This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json)
Hash identifier: Irr6IZGMjewXwfG4oszLhtt6ydooCgdr5/4Do9ZpUfs=
Subject key identifier: FB:2C:69:B8:3F:92:9A:14:EF:FD:26:AF:6D:02:37:53:92:F0:0B:EB
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial: 0B4DAA00C0D4F799C3078019E0808167E16738BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
Manifest number: 023F
Signing time: Wed 03 Dec 2025 06:22:22 +0000
Manifest this update: Wed 03 Dec 2025 06:17:22 +0000
Manifest next update: Sat 06 Dec 2025 14:50:22 +0000
Files and hashes: 1: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=)
2: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=)
3: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=)
4: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: uzd42f/6k8ZCYePBxOHRjNPld/znCManYBSP2ipTh3A=)
5: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4d:aa:00:c0:d4:f7:99:c3:07:80:19:e0:80:81:67:e1:67:38:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Validity
Not Before: Dec 3 06:17:22 2025 GMT
Not After : Dec 6 14:50:22 2025 GMT
Subject: CN=FB2C69B83F929A14EFFD26AF6D02375392F00BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:52:69:fe:50:03:29:f7:88:23:af:22:52:60:
2b:6a:a4:c7:23:79:42:db:39:33:c9:aa:85:62:30:
4c:6b:07:e8:9f:9a:a4:84:4d:63:39:be:2a:f9:22:
2a:98:7b:d6:13:2a:10:bc:da:9c:4c:bd:14:2c:12:
36:ab:90:ea:2e:26:78:0d:9a:d1:4e:30:d4:41:70:
cc:aa:df:8a:e6:17:73:eb:71:4b:d5:38:f1:65:c6:
58:ff:d8:dd:25:a9:fa:32:17:a3:d0:cc:76:b0:0b:
69:26:09:dd:16:44:27:f7:2d:d2:6d:f9:61:bc:c2:
4f:2f:3b:83:c5:83:7c:04:1f:bb:01:23:ab:51:6b:
35:61:5e:97:2a:7d:a5:43:20:1c:cd:cb:fa:b9:18:
01:59:51:f5:d1:85:87:13:df:cb:00:fe:bd:4b:b0:
8b:53:d9:53:26:ec:d6:d4:58:9a:9b:99:ab:7f:86:
d6:1b:2c:7e:ae:9f:47:0e:63:77:77:7e:91:a4:4d:
a3:75:26:ee:99:ad:e8:b4:af:ef:54:45:62:8c:b6:
a5:e9:c1:2f:f0:66:be:01:81:db:76:d4:20:88:bd:
d9:a2:23:66:a4:30:f6:71:dd:f4:4d:43:d5:aa:35:
12:ac:fd:c5:ef:eb:37:a2:df:25:06:8f:32:12:e8:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2C:69:B8:3F:92:9A:14:EF:FD:26:AF:6D:02:37:53:92:F0:0B:EB
X509v3 Authority Key Identifier:
keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9d:62:af:2d:24:39:d6:e9:d7:db:ce:2a:a6:23:c6:82:72:
2f:b3:77:4e:82:ed:38:b8:d2:a0:1a:ea:a2:d6:1b:c1:35:84:
ef:cc:05:f2:e8:fb:56:34:37:09:32:22:14:27:f5:b0:87:6a:
30:a5:c9:ef:3b:c2:b7:9f:09:dd:59:10:d1:18:79:4b:1b:74:
de:de:8b:ad:9c:92:77:c1:1a:17:6f:2b:cb:3a:db:90:00:36:
4a:da:e1:43:51:0f:9c:f4:2b:ff:18:49:7e:42:ab:3d:0a:f6:
54:77:5b:f3:ac:9c:26:6c:b7:8b:1c:d0:e7:93:1d:a7:ea:6f:
f6:7f:76:6d:c1:54:94:f9:91:48:dc:1e:b9:d8:b9:4d:ca:85:
92:36:a7:66:99:d1:fd:e0:39:34:5c:b0:07:f2:1c:ec:56:ff:
8b:13:a3:ec:01:11:fd:72:eb:14:f9:73:07:2e:e8:4e:92:3e:
ba:86:1a:8d:ff:69:c1:c4:49:2b:49:94:4f:40:05:b9:6f:a0:
38:6b:5e:27:6f:68:aa:f5:a1:e1:3b:26:ec:14:46:e6:ca:68:
fb:e0:30:9d:d2:51:9b:2f:43:d0:15:d1:9e:a5:fc:97:ec:c1:
c3:0e:86:96:12:a2:97:ad:03:07:22:39:09:2e:51:51:8a:df:
b4:65:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:24 2025 by rpki-client