This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json)
Hash identifier: 9Ga7vHQUYMhGJTT73VDIe6pGmOI+xPfKwlv8e71tTak=
Subject key identifier: E0:B1:6E:EF:34:CB:01:F6:9B:D4:76:9D:E1:5D:AB:3F:D9:C1:8E:1F
Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Certificate serial: 4D1C915ED7E220B7FB4A8C155E9DFE2CA30E52DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
Manifest number: 014E
Signing time: Sat 06 Dec 2025 03:41:40 +0000
Manifest this update: Sat 06 Dec 2025 03:36:40 +0000
Manifest next update: Tue 09 Dec 2025 07:45:40 +0000
Files and hashes: 1: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: EBR+p3PkcTAiMYCAgv6PbSayq0bFAGHJD99zgOmEdFk=)
2: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: S9NQ9lrjO3o2MdrQHBiluUdffg5vFA8ERPTWeXZQ0+Y=)
3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 07:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1c:91:5e:d7:e2:20:b7:fb:4a:8c:15:5e:9d:fe:2c:a3:0e:52:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Validity
Not Before: Dec 6 03:36:40 2025 GMT
Not After : Dec 9 07:45:40 2025 GMT
Subject: CN=E0B16EEF34CB01F69BD4769DE15DAB3FD9C18E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:f3:f4:46:07:64:1c:63:72:6d:71:61:4e:
aa:ab:07:ed:36:4b:15:11:b0:3a:b2:d3:b3:a9:63:
18:03:ff:9c:ee:e2:24:79:d1:d8:94:40:27:ae:34:
57:85:56:b6:7b:3c:ec:66:c9:4d:78:35:27:28:51:
27:ed:ef:4e:a7:cc:42:73:b4:36:fa:36:39:7a:ba:
a4:2b:f8:dd:be:c3:ad:88:0b:5f:30:35:fd:34:b7:
b1:26:5c:18:fe:ae:f7:ca:d9:6c:2f:d5:95:d3:04:
60:88:92:2b:1b:94:09:f1:30:9f:39:5b:88:75:cd:
73:4f:7c:19:13:04:82:82:f5:bc:85:0b:24:78:28:
74:c4:67:0d:eb:e7:90:96:a4:45:8a:23:63:38:a4:
7d:15:d5:cb:a7:83:28:d0:ab:a5:21:9b:b4:4b:d1:
84:42:0d:39:38:3f:6a:d2:43:98:b0:71:03:69:c2:
5b:c7:9e:ae:f1:03:51:94:7a:08:24:7a:53:de:23:
e9:6f:a5:96:7b:21:24:e4:8a:da:33:8d:0c:39:53:
37:9f:3e:c3:d3:15:b7:c6:86:47:13:f8:50:a1:9e:
c9:dc:59:81:ac:8c:42:e6:05:f7:bb:57:30:d9:d5:
ae:1d:b9:20:e6:cf:95:48:4d:e6:f6:01:27:d5:0c:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B1:6E:EF:34:CB:01:F6:9B:D4:76:9D:E1:5D:AB:3F:D9:C1:8E:1F
X509v3 Authority Key Identifier:
keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:aa:3f:78:08:a9:ea:45:81:c4:b5:71:60:be:9c:1a:31:
f2:dc:14:00:89:d9:74:3c:74:f9:41:56:fb:54:4c:61:c7:cd:
66:a5:51:8d:e8:e0:4c:eb:fd:03:61:8e:91:60:11:0a:42:6e:
db:17:2f:b9:b7:eb:7d:e3:f8:0f:f2:d2:53:f9:4d:0c:e2:05:
de:cf:4c:5a:e5:64:42:a2:e3:5f:56:24:3e:3d:25:a4:93:9e:
67:3c:b2:c3:0f:cb:08:92:19:be:f1:08:c6:1c:64:c8:90:11:
cb:1a:95:8c:ef:f5:56:ae:59:fc:7a:53:23:55:ab:1c:4f:8b:
0b:98:cf:0c:06:f8:f3:ea:ca:de:95:93:4e:ec:7b:f0:a8:6d:
48:14:05:2a:4e:8d:e2:e0:a8:f5:5b:d1:6f:03:9f:96:34:68:
d9:48:28:72:66:c7:02:b1:92:9a:15:69:31:bb:66:b7:97:f3:
a4:c1:62:3e:27:ee:ad:dc:22:12:cb:ac:71:f6:bb:f2:15:ce:
3b:a2:f6:24:7c:c5:94:08:6a:51:77:25:05:c7:77:08:89:f4:
64:73:fa:c6:e4:46:3e:93:60:9e:3d:ae:c9:8a:5e:39:7b:0d:
fa:f9:9f:07:0f:24:dc:e1:40:bc:f6:31:be:45:38:f3:cf:8c:
cf:76:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:35:30 2025 by rpki-client