This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json)
Hash identifier: XtD6m0KByln1cMFwNMs3CHfW4q8+0z0lVXyccRa7SWc=
Subject key identifier: 3A:B0:D5:52:8B:7E:76:DB:AA:14:12:6C:36:C0:64:3F:9B:31:31:C3
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial: 3B16E117AE44FD62E502BE9FF9886CEB6531ED88
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
Manifest number: 052D
Signing time: Mon 17 Nov 2025 17:22:17 +0000
Manifest this update: Mon 17 Nov 2025 17:17:17 +0000
Manifest next update: Fri 21 Nov 2025 01:58:17 +0000
Files and hashes: 1: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=)
2: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: UoB8vx+eixc7tgJlF9rZrimJ4yxfV4pnQL1EhEzXVlg=)
3: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=)
4: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=)
5: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=)
6: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=)
7: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Nov 2025 01:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:16:e1:17:ae:44:fd:62:e5:02:be:9f:f9:88:6c:eb:65:31:ed:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Validity
Not Before: Nov 17 17:17:17 2025 GMT
Not After : Nov 21 01:58:17 2025 GMT
Subject: CN=3AB0D5528B7E76DBAA14126C36C0643F9B3131C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fb:f7:19:c8:df:b2:11:c5:73:ca:49:59:0d:
e2:f4:81:12:c2:6c:aa:b3:7e:f3:c6:46:e1:d9:9e:
21:03:c9:c4:1a:aa:d9:07:85:b1:c1:9e:e1:8d:41:
9a:d8:6b:5a:a9:6c:4c:4e:85:ef:0b:49:5d:5f:54:
a6:0d:83:78:d3:3e:f6:0b:dd:b4:6d:08:1f:fc:e3:
6f:55:e9:90:68:5f:c8:c4:3e:42:f1:86:11:9d:87:
e5:3d:ee:55:c0:e5:59:28:a9:cc:a6:ec:3a:e8:6f:
49:c9:9d:d5:08:8d:40:48:73:80:e7:06:57:c6:e4:
48:6a:cf:dd:61:ff:d7:1d:2b:ea:bf:ea:d5:6e:cc:
3b:bc:db:20:3e:0b:40:58:bc:33:92:2a:25:61:c9:
fb:f4:54:3a:95:66:5e:9c:e4:c5:f5:58:32:57:cc:
2b:a2:b3:ef:d1:84:67:97:21:f3:4a:70:43:fd:86:
be:04:25:a0:56:4e:0d:bb:3a:d3:38:86:80:35:d9:
9d:a4:0c:f8:e6:5a:38:c2:22:89:33:b0:10:ee:14:
4c:fd:a0:95:e6:b2:d7:3f:c3:ae:c0:9e:c0:b4:90:
6d:b7:96:70:07:ae:06:99:aa:10:87:14:6e:1c:ed:
0d:f3:c4:b4:0d:84:5e:9d:e3:26:0f:f2:24:5a:94:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:D5:52:8B:7E:76:DB:AA:14:12:6C:36:C0:64:3F:9B:31:31:C3
X509v3 Authority Key Identifier:
keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:61:7c:52:ef:2f:95:d4:fa:f0:b2:cf:a9:05:6e:97:df:ee:
ef:c8:f3:67:35:d6:17:07:19:08:52:f6:3a:69:aa:8f:d4:20:
c9:37:e2:0d:cb:df:02:36:4b:0e:b0:28:4f:df:96:c6:51:2a:
bb:f4:3b:13:fb:7d:54:a7:fe:9c:83:4b:cd:6c:dc:2f:3b:57:
4c:de:a9:fa:8b:28:f6:5e:7e:90:ea:92:ba:e5:ef:e7:99:e1:
4c:e0:58:7b:d7:42:f3:15:cc:11:bc:bd:63:31:7c:b6:8a:b7:
41:34:19:0f:b8:20:8c:79:5c:53:87:b7:56:83:86:a8:54:d0:
71:73:cf:60:3c:4a:1e:cd:a8:c3:80:d2:4c:8c:c8:b2:a0:ee:
87:77:b4:53:d7:b4:63:66:20:26:56:95:5e:0c:57:fe:a4:f9:
95:56:6e:72:65:28:4c:b3:f6:d0:80:f2:2e:32:a5:68:85:2d:
39:e7:07:e3:34:7f:0d:0d:68:4e:b4:39:55:27:04:0e:6d:99:
4f:35:1c:d7:a3:6a:73:bb:8e:bc:a8:14:47:e2:cd:d6:ad:15:
6b:24:e4:ee:c3:46:a4:a3:f0:fe:10:ac:3b:f5:29:43:3b:16:
92:e3:12:2c:4d:32:fb:cf:03:8c:02:24:28:60:fd:c3:4c:c9:
f9:b5:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 12:44:17 2025 by rpki-client