This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft
File: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft (raw, json)
Hash identifier: mXQbBSm7+6Sq2zTQcO3gPrgY3sZKG4MyTK+F1W7jNzo=
Subject key identifier: B0:0C:4D:1E:5F:72:B4:FF:3D:E6:50:95:CD:21:AC:8F:08:96:F9:AB
Authority key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD
Certificate issuer: /CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
Certificate serial: 88330AAB5DE2BD271A7038F002B291EA2DD7FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft
Manifest number: 01B8
Signing time: Sat 06 Dec 2025 04:50:01 +0000
Manifest this update: Sat 06 Dec 2025 04:45:01 +0000
Manifest next update: Tue 09 Dec 2025 05:29:01 +0000
Files and hashes: 1: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: rfgoK21VT80jcjTnSSTUWLHb0odprGUSbTG8ns7Fdx8=)
2: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: q4M2q2KFusV9WALClaWNLjI5YHGqNj7u0KWUCOIzdx0=)
3: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl (hash: PFOXxrcegI7z32qkqftnFS3WtkyN76BbZqvEc51zYTA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl
rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 05:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
88:33:0a:ab:5d:e2:bd:27:1a:70:38:f0:02:b2:91:ea:2d:d7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
Validity
Not Before: Dec 6 04:45:01 2025 GMT
Not After : Dec 9 05:29:01 2025 GMT
Subject: CN=B00C4D1E5F72B4FF3DE65095CD21AC8F0896F9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d4:bb:af:44:68:3c:1b:0e:2d:dc:d3:57:90:
76:24:9b:13:a0:e7:df:0c:d9:0b:3d:e3:d5:8c:de:
e9:7e:c3:76:08:6f:5a:9d:d7:1d:04:74:40:88:50:
2b:89:33:87:ec:06:39:d9:5a:c8:5e:8f:2d:8c:95:
9b:1c:a5:25:74:c0:68:c9:56:f2:a5:23:eb:e0:02:
eb:24:a9:87:e0:ab:2a:26:d5:4d:5e:cc:81:20:02:
89:2f:4b:c7:df:93:88:c3:d8:e0:dc:8c:16:41:27:
2f:a4:e1:b9:fe:ef:dc:ea:8a:bf:3e:69:8b:0f:9a:
0d:7a:41:45:b6:37:eb:55:75:1a:fe:72:a8:f1:78:
ae:2c:79:97:0b:ea:71:5e:6b:c1:55:7b:37:fc:03:
d1:31:d6:90:82:56:25:69:bb:48:27:15:25:7c:24:
6d:4e:e0:a8:56:c2:14:9a:d3:c1:a6:be:6d:c0:3e:
2d:fb:f2:67:d7:b9:c2:ac:a2:ff:7b:1e:99:9e:aa:
63:42:ae:4e:e5:95:1c:bf:5b:f0:17:b0:a6:7d:de:
75:20:1b:31:bc:ce:76:c5:a2:03:df:46:f8:8f:23:
1f:9b:01:8b:85:a1:c0:d4:66:b3:a5:88:a4:68:69:
f3:e1:02:e7:0e:7d:da:e4:da:4d:08:64:3e:f8:07:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:4D:1E:5F:72:B4:FF:3D:E6:50:95:CD:21:AC:8F:08:96:F9:AB
X509v3 Authority Key Identifier:
keyid:17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1c:32:bf:c6:8a:a8:d8:a0:4c:f3:3b:f1:01:a3:0b:f8:b8:
46:83:94:1e:a9:d6:12:ff:22:c4:ac:f5:df:e6:fd:c9:be:ba:
63:17:54:16:4c:72:93:75:32:1d:7a:35:5a:ac:b8:f2:e5:02:
3a:d7:ba:29:54:f4:29:bf:53:b4:2c:34:b4:ef:8e:43:b9:83:
0b:70:07:ac:e1:4f:23:42:f3:9d:62:ac:94:af:27:c7:9f:64:
0b:3b:6f:cc:b2:bf:42:a0:b8:c7:94:ab:4b:59:2e:2e:02:32:
76:9d:a6:ea:db:60:ca:77:cf:81:b2:9c:f7:82:39:0e:bb:cc:
4f:75:89:ac:5c:98:ac:96:e8:ed:23:68:0e:c2:bb:f8:19:61:
45:6f:53:f6:7d:ad:c4:78:7b:b4:b0:0a:a6:cd:cf:1c:08:24:
62:2d:81:08:4e:3b:0b:01:09:76:1d:87:c2:41:d6:0e:55:59:
cf:fc:c7:80:6d:d5:43:65:57:7a:fd:3f:3a:81:81:0c:da:f1:
22:ef:bb:0a:f7:f0:b9:35:be:2d:49:86:dc:97:9a:b0:b1:17:
25:a4:69:ac:96:9a:1d:cb:48:22:b7:64:da:f2:35:21:53:bb:
c5:27:89:9e:08:13:6b:df:8a:21:0b:86:35:13:4a:ae:4a:18:
2f:7b:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:14 2025 by rpki-client