This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json)
Hash identifier: IxF2h8ht2/VWJvrlNdU4xMgVkCt1mXOV/T/cwXAS394=
Subject key identifier: B1:11:50:B9:E3:01:61:D8:25:84:01:A2:CA:FF:05:5D:CC:C6:38:0F
Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50
Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550
Certificate serial: 48909FC70A7ACD06CD01A5E49BC5B59DB56E00E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
Manifest number: F3
Signing time: Sat 06 Dec 2025 16:50:55 +0000
Manifest this update: Sat 06 Dec 2025 16:45:55 +0000
Manifest next update: Tue 09 Dec 2025 19:59:55 +0000
Files and hashes: 1: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: 5Pw2LDruCYOKIpkBI+trN1x40xwA8g5vCVGI6Mz+Shg=)
2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl
rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:90:9f:c7:0a:7a:cd:06:cd:01:a5:e4:9b:c5:b5:9d:b5:6e:00:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550
Validity
Not Before: Dec 6 16:45:55 2025 GMT
Not After : Dec 9 19:59:55 2025 GMT
Subject: CN=B11150B9E30161D8258401A2CAFF055DCCC6380F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:e2:18:aa:61:0c:f6:cd:75:cb:df:d5:ff:
23:3b:9e:02:f2:0b:13:89:df:21:71:51:38:8c:a1:
3e:d6:0d:90:b8:1a:68:ac:79:3d:84:c3:99:9e:c5:
13:18:86:9c:a4:b5:18:5b:e7:a9:6d:27:cf:ca:fb:
e7:57:5e:e5:9a:e1:2a:4d:93:03:c3:2f:7d:6a:ff:
41:b1:fd:2b:35:a4:91:d1:e1:18:af:81:e3:57:ab:
c0:c3:61:a5:58:93:b1:19:d1:b0:e5:bc:92:81:2d:
6b:7a:2a:16:35:02:c6:27:ee:84:c6:06:54:ff:9b:
98:f4:25:ea:81:7f:ae:07:72:14:41:32:05:0f:3b:
eb:c2:f9:a4:54:66:75:20:6f:cd:2b:36:40:b6:5e:
ac:0b:dd:21:b4:3a:52:de:b0:fd:1e:88:26:a5:ec:
61:d7:ba:b8:69:6c:10:95:14:4a:5f:2d:a2:51:85:
f8:bd:9c:82:5a:34:62:37:29:55:8b:de:9f:00:88:
2a:05:3a:f1:35:cd:5c:7c:51:72:08:5d:da:5f:78:
48:65:e8:ca:0c:c2:97:e9:d2:ab:26:24:50:35:37:
72:33:74:af:7d:2d:26:d7:dc:64:07:f3:de:49:88:
13:f6:70:01:45:46:d3:9f:54:bd:c9:fd:d1:01:a2:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:11:50:B9:E3:01:61:D8:25:84:01:A2:CA:FF:05:5D:CC:C6:38:0F
X509v3 Authority Key Identifier:
keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:63:fa:bc:11:5c:6d:83:7d:db:17:61:6f:f0:87:5e:57:8c:
a8:d3:3d:a1:26:c8:0a:ac:27:a8:84:c7:9a:f4:c8:3c:07:4b:
e5:95:fd:a9:89:00:9f:7b:9d:14:5e:37:73:c8:95:2a:9d:90:
dd:c1:dc:53:14:37:fe:e1:d2:f0:63:67:1a:d7:1c:a1:b0:ce:
fa:b4:64:51:a8:ab:85:86:44:bb:a0:4e:06:db:27:f8:13:fb:
95:c9:29:45:00:e4:c4:36:77:81:a7:a8:50:c4:4f:3a:d6:ef:
7b:1f:cb:8b:5b:c9:23:71:37:83:ad:c7:ac:b4:e8:72:ed:e7:
0a:3e:90:57:bd:2c:cf:14:e3:d3:a6:01:94:f1:12:e9:b5:1f:
29:93:2d:f8:58:2a:a9:97:73:1d:d2:3c:ca:2b:ae:10:6e:d5:
76:25:96:55:5c:9b:92:49:21:85:ce:b2:6c:54:03:70:62:89:
a6:1e:b5:3d:a7:47:57:d9:82:2e:cb:cd:fe:57:ab:fb:d8:4c:
0c:19:90:99:96:7a:a6:f4:2c:17:ba:70:11:28:70:7e:e2:ed:
0a:a8:69:25:37:46:f5:e2:14:a7:8b:ca:4e:3f:de:b7:08:29:
f4:05:cb:28:07:1d:74:dd:17:5f:b9:40:f8:d2:89:a2:36:79:
20:3b:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:46:18 2025 by rpki-client