This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json)
Hash identifier: G1abu0fSA0hKXMHHl3tvVi8gc78VWo1ifRZljrZdaJg=
Subject key identifier: F3:FF:73:A3:32:BE:83:E5:0F:A3:DE:92:7A:AF:D2:D2:C7:BC:54:CE
Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25
Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25
Certificate serial: 1D05DDBAC3D59C935D15F824EA2330FDDB7073C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
Manifest number: 01BF
Signing time: Mon 01 Dec 2025 13:21:17 +0000
Manifest this update: Mon 01 Dec 2025 13:16:17 +0000
Manifest next update: Thu 04 Dec 2025 14:40:17 +0000
Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: Sp0Au+Yh4hLlxZP9oz8LeH4LJT6SZzWJ3de+5ua66FU=)
2: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=)
3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl
rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 14:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:05:dd:ba:c3:d5:9c:93:5d:15:f8:24:ea:23:30:fd:db:70:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25
Validity
Not Before: Dec 1 13:16:17 2025 GMT
Not After : Dec 4 14:40:17 2025 GMT
Subject: CN=F3FF73A332BE83E50FA3DE927AAFD2D2C7BC54CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b8:22:64:79:1c:7b:f4:c1:f5:1a:1d:82:a2:
17:cb:8b:06:0a:50:4a:fe:3a:3e:d7:96:19:d9:0b:
92:55:ae:98:97:12:14:af:11:fd:38:5e:b7:57:1f:
1b:b2:10:ae:f0:a3:cc:93:26:03:5a:cb:6a:35:ee:
35:98:91:1e:8f:62:5d:5e:68:1e:aa:07:ba:46:73:
30:91:c6:45:78:b5:ef:7b:3f:10:22:0f:f5:b6:c7:
10:ce:60:1d:f2:55:ec:5a:68:63:e2:d9:55:fa:78:
1e:12:bb:f0:3e:f7:e7:b7:b3:32:21:ea:e4:a5:46:
bc:1c:59:88:a7:00:96:2b:88:23:95:31:99:68:0b:
de:20:5e:ec:fd:55:7e:d9:96:0b:54:c5:8a:02:4e:
c1:a0:df:14:22:96:2b:f1:a4:88:a0:46:aa:10:5e:
49:e5:c6:07:c4:10:9c:10:02:8c:ca:06:0b:81:bc:
b2:f5:92:e0:31:8f:b3:6c:5b:b9:46:58:ef:db:27:
53:cf:0e:36:6e:26:3b:29:4f:04:2c:ab:1c:59:9c:
b9:dc:25:21:cd:b1:05:17:56:34:72:b3:72:a8:55:
fa:90:93:ac:d9:94:62:3f:49:82:1e:55:3a:01:cf:
73:69:f2:90:99:1e:bd:5b:b7:61:d0:31:55:54:ff:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FF:73:A3:32:BE:83:E5:0F:A3:DE:92:7A:AF:D2:D2:C7:BC:54:CE
X509v3 Authority Key Identifier:
keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3a:0d:f5:28:8a:40:b6:62:cb:76:45:11:12:63:ac:d8:09:
14:fd:80:db:11:6a:bb:0c:b9:22:9b:2b:14:af:95:fb:73:98:
49:49:90:af:eb:5e:8d:f1:2d:77:ed:24:11:21:32:c9:17:c9:
56:e5:40:44:3b:82:41:7b:d1:47:2d:7d:e1:9c:68:0d:3e:84:
60:6c:0d:7c:19:8f:7a:1d:2f:8c:a5:8f:86:bd:03:2e:16:0c:
42:4e:90:61:9b:1e:9e:b3:f8:16:91:2c:6c:52:d3:e0:fe:cd:
73:bf:e9:e3:8d:df:80:7b:45:9f:50:1e:6a:81:7f:20:a2:d0:
f9:2a:22:26:1d:84:88:41:89:91:f6:ea:8b:a3:47:80:0f:9a:
3d:18:99:89:03:ad:f0:2f:9c:29:2c:5c:ae:ad:14:90:d7:aa:
38:6f:64:9a:3b:6a:4b:3c:e6:ca:7e:57:db:8e:88:cb:65:59:
25:4a:2e:51:51:ec:08:34:b2:b9:5f:50:0b:9d:f2:2f:11:a4:
77:96:97:b6:46:dd:75:4f:96:9d:48:4a:52:1f:89:5d:53:d6:
9e:89:b2:4a:82:8d:cd:23:02:3c:3e:fa:0a:35:8c:21:af:1f:
fa:5f:9c:18:e1:fa:85:ea:fa:55:02:37:36:57:55:06:44:1e:
97:97:27:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:48:51 2025 by rpki-client