This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
File: 05BC764F85F9F88CE41FD879C6125E65117E8E79.mft (raw, json)
Hash identifier: gQq1htyWJdtn/IPR3CTR3LeC9Jr5dt/MglcN9TRLR4g=
Subject key identifier: 36:49:8F:73:7D:42:AC:8A:07:71:2A:B2:98:8C:4E:E2:AB:BE:E1:76
Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Certificate issuer: /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Certificate serial: 5C369590F67ECB662C2BD83F7F2C2A8B4F8AE5C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
Manifest number: 052F
Signing time: Wed 17 Dec 2025 11:31:33 +0000
Manifest this update: Wed 17 Dec 2025 11:26:33 +0000
Manifest next update: Sat 20 Dec 2025 22:18:33 +0000
Files and hashes: 1: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: oN07EEzMfkHBn9JnnG4sRK6teKNd4kpEdvJthcOFQvg=)
2: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: f0BWuTzxCArn4KfGhPORVbfEFH0pcc52v4wRTW6XvmA=)
3: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: D88QpUodDy8ztOI3PsXX3NvtYOASEcix4uqfFJmts0U=)
4: 05BC764F85F9F88CE41FD879C6125E65117E8E79.crl (hash: 4gGdouyJG02dgfc68rtbMY0Br6SDal3rWKpu8Ul8ofQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 22:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:36:95:90:f6:7e:cb:66:2c:2b:d8:3f:7f:2c:2a:8b:4f:8a:e5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Validity
Not Before: Dec 17 11:26:33 2025 GMT
Not After : Dec 20 22:18:33 2025 GMT
Subject: CN=36498F737D42AC8A07712AB2988C4EE2ABBEE176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:f4:78:ae:a8:ae:f7:82:51:8e:dc:df:42:
e6:4f:12:8b:bf:fd:1d:16:f6:f2:53:aa:5d:25:d0:
b0:e3:bc:20:22:c7:07:b7:d2:72:ea:e0:44:0c:1a:
a7:d7:07:22:da:85:d3:d4:29:f1:8e:b3:17:5c:da:
dc:6b:b3:2c:d5:8c:f1:db:80:23:60:e2:d6:a6:5b:
16:26:51:17:1c:80:9f:f6:c1:ac:5a:c5:ce:1f:19:
57:04:2f:87:db:c6:67:9b:78:61:81:33:9e:e6:1e:
67:24:b2:25:76:ff:db:b8:45:c7:1a:6a:10:6f:06:
b9:9c:5b:58:ff:73:0a:b4:f7:d0:7e:39:51:99:d0:
30:a3:85:60:7a:f8:c6:de:34:a7:38:ca:91:02:68:
51:30:80:4b:a6:5a:91:3a:88:2f:16:f6:d1:87:1f:
c0:58:22:fb:c9:f1:e3:1c:05:39:99:54:2a:d1:30:
76:f8:3e:07:67:b5:84:b8:81:5a:b2:4b:9b:de:b1:
38:54:00:34:73:4f:e2:45:3e:ff:61:7c:2e:e7:b0:
f4:6c:46:d3:d5:26:9b:18:b3:d0:1c:46:eb:94:6b:
b5:eb:0b:be:ac:5d:54:02:31:b9:9b:2d:f3:ff:5c:
b4:93:a2:39:51:ec:db:27:99:da:0d:f5:b7:d0:d3:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:8F:73:7D:42:AC:8A:07:71:2A:B2:98:8C:4E:E2:AB:BE:E1:76
X509v3 Authority Key Identifier:
keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c1:c4:3c:95:56:15:c3:bb:8d:ff:a8:c1:07:4f:e2:bb:ed:
1c:b3:fe:e4:85:2a:4c:1d:83:90:14:ab:36:42:f7:ac:2f:4b:
71:b5:33:70:9b:16:6a:0c:a1:ae:2f:63:bb:20:77:14:d0:17:
a4:5f:27:f0:04:35:c4:42:e3:0a:28:eb:af:90:b7:fb:7e:f6:
38:20:09:92:5f:42:60:b8:c7:4c:44:7a:cb:77:76:eb:bd:fc:
b8:fc:6f:89:1b:0a:1c:86:5d:de:c9:4b:87:ae:c2:a2:3f:79:
c2:d9:47:6f:65:67:c9:d0:f7:ab:54:bd:00:a4:5d:3b:d6:4b:
b7:d2:ee:8f:30:7a:ff:97:02:87:c1:81:de:f8:a3:50:d3:1a:
08:e1:d3:cc:ee:fc:84:1c:76:7a:20:71:b6:46:2f:75:bf:01:
6f:fe:fb:8b:ce:38:00:0e:43:58:c6:1b:14:1b:aa:b0:00:7a:
76:cc:63:d8:d5:cd:b4:d8:c4:bf:49:70:52:6c:65:9b:b7:45:
2e:0f:73:54:d3:8d:be:1c:01:b5:67:7c:cd:ae:5a:13:d0:fd:
b5:e5:0d:f3:2e:4f:c6:4e:79:ef:74:50:e8:de:2d:94:ea:2d:
7f:dc:ef:19:58:24:92:84:ae:4f:84:58:d1:b6:c9:0f:26:79:
7e:e5:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:41:59 2025 by rpki-client