This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
File: F33127B2252454B491C5DC9FE3937C56F28F8066.mft (raw, json)
Hash identifier: bhNf0NaiIbJu64rActBvHeOvBxBBby1+y+2VoJxZ0to=
Subject key identifier: F9:68:EA:33:13:1D:BB:45:B8:BA:A9:55:9F:0C:86:05:35:E0:CD:93
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 593BC165D7AD859C626114B2BAFC8F982086AA34
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
Manifest number: 0415
Signing time: Fri 05 Dec 2025 07:31:00 +0000
Manifest this update: Fri 05 Dec 2025 07:26:00 +0000
Manifest next update: Mon 08 Dec 2025 16:49:00 +0000
Files and hashes: 1: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: nPfvFxh32GtLGhwJQ/WVsbfFCUobHuoJlvZ49Ao0HyU=)
2: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: Xb1Bkjs5hzP5DiGreqFq1n1/N1wG2GKWoe1mJNbSKvU=)
3: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: 8x2Coc9pifmT+orzQex2GAIyBvhcFaqojB9aD5S8okg=)
4: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: xd0vdotwl3DI/gtzK9jd/Z1SgDoCaQpGK+EAJgcM1tI=)
5: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: sfYpDs3jHVhySahEuUQy0V6BeSKjH1Lk7XnZpDOyCWI=)
6: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I=)
7: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: 44xJ+4HPqKcd5YyfQZtlfLdXLia/wNGmzcAqkBPsBnY=)
8: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: LK7y7Lgv53BZtTgHVdhNU9vAFNrTBJKQoUlDcnr1peM=)
9: F33127B2252454B491C5DC9FE3937C56F28F8066.crl (hash: hDbJRrZK6jMC/NUgCyzukk9tr5z35v4TYwhpsiZ4QHE=)
10: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs=)
11: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y=)
12: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: BhrGTMcOlTnS9+LXizZepRTc8dUVDoSk9wrBjorwUZI=)
13: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 16:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:3b:c1:65:d7:ad:85:9c:62:61:14:b2:ba:fc:8f:98:20:86:aa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Dec 5 07:26:00 2025 GMT
Not After : Dec 8 16:49:00 2025 GMT
Subject: CN=F968EA33131DBB45B8BAA9559F0C860535E0CD93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:c0:97:e4:3d:70:14:3f:ed:c0:06:aa:36:
5c:07:7d:01:f0:ba:9b:22:10:77:34:82:24:52:8a:
54:e5:df:a5:7b:d7:88:0a:9f:4f:9c:df:10:14:46:
24:04:bf:2b:4c:ba:43:74:cd:62:11:88:a8:0b:6e:
68:8c:41:3a:3f:7e:bf:ca:b6:1d:4e:5d:90:46:9d:
d4:e6:5d:d5:48:4a:85:52:7a:01:84:31:dd:c2:a3:
d5:7e:74:e0:44:4b:a9:b4:c4:72:e9:b7:03:ef:37:
45:ac:5a:b3:33:62:31:96:e1:a3:af:08:86:d4:62:
f3:08:75:dc:de:7d:c3:d8:68:04:87:df:28:e9:0c:
49:3e:18:f0:d8:d0:4b:59:bc:8c:2b:e5:4e:5f:c1:
af:89:2e:34:df:68:62:99:ac:4d:dc:61:d4:5c:74:
23:43:16:f2:e7:c3:da:d5:c0:cd:b3:a1:8c:fa:7b:
6f:fc:65:d4:50:71:46:f0:60:e0:fb:0a:ce:6f:9a:
54:32:56:ef:bc:6b:f7:76:b4:23:ad:b2:58:cb:18:
3a:99:39:4d:92:4d:6e:d7:83:f5:cb:19:eb:73:b4:
e9:f5:0c:0e:93:29:d4:0b:58:88:be:61:c1:40:d2:
3d:8d:f4:36:e8:7f:29:1e:de:b0:cb:a9:10:63:90:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:EA:33:13:1D:BB:45:B8:BA:A9:55:9F:0C:86:05:35:E0:CD:93
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:7e:e7:6f:cf:18:2d:e9:9d:67:69:93:93:76:13:4d:6b:
0f:ea:9e:56:12:05:5d:59:5e:e7:c4:63:25:c2:10:7e:22:aa:
3f:1a:72:ac:64:3e:45:1f:1a:bf:56:5f:be:8d:05:38:de:96:
67:b3:c9:69:3b:6f:d2:5d:8b:5f:ef:cd:47:4b:34:fc:da:2d:
c6:b5:7e:81:94:a1:4a:c5:f3:a9:bc:66:6c:bc:4b:4b:8a:fc:
27:c4:61:8a:ac:72:96:b7:85:0a:be:e1:86:8d:42:87:3e:e4:
0f:09:de:2e:b6:fb:89:7a:41:75:58:cf:dc:29:95:54:20:e7:
94:28:bb:0b:1d:75:7d:a3:3c:06:21:ca:c1:f8:0e:c9:72:9d:
85:71:f7:b6:77:7a:ac:9f:b3:ec:d7:9d:10:e8:5f:27:40:fe:
86:10:60:f0:1a:c4:7e:2b:17:96:fa:24:9e:62:7d:bf:dd:22:
be:fd:0f:de:4d:42:0d:70:10:fc:90:da:ef:56:46:e6:bd:68:
b8:5b:46:4e:f7:11:0d:e5:16:92:b4:6f:d4:15:0c:3f:53:a3:
42:59:f9:5f:44:4b:70:1a:59:f6:01:fc:96:a2:2c:fa:fa:fe:
db:ba:05:19:60:72:29:e6:b6:91:67:28:0d:4c:30:09:47:e9:
7e:7f:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:40:23 2025 by rpki-client