This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
File: 104563E8068F3AE19631B1F43A5C9A47466100AC.mft (raw, json)
Hash identifier: Xhp/KX8fFnhPiT8wgHUa4hw5D6E8gImdMriPLhJqNs8=
Subject key identifier: 26:93:4E:F3:FE:60:6A:F1:E0:92:74:EF:DD:87:DA:93:36:41:A9:8D
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Certificate issuer: /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial: 484A0990774ED8A292A397175B34A157E28270F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
Manifest number: 035A
Signing time: Thu 18 Dec 2025 14:31:26 +0000
Manifest this update: Thu 18 Dec 2025 14:26:26 +0000
Manifest next update: Sun 21 Dec 2025 21:01:26 +0000
Files and hashes: 1: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: VcKH5MJv0PsbSw/ylAqkYnvN7oEA35OAIpUTZqe2tts=)
2: 104563E8068F3AE19631B1F43A5C9A47466100AC.crl (hash: Pw3dxMWBxsipFaBoO7GDdVk/naTky8n1h5jr633jUAw=)
3: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: FFItnTTMKt/KdS5iV3+5t51Nd97nxTmIPrWc7N6PUvw=)
4: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: +SLRXlahaObHYrJgflPMiDjr0u2mDJrsOXf4SROIz+s=)
5: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: mLstSys1ibyLiHgcMAosimwglWRWJ2SkAeeFcz0SnqE=)
6: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: VLkItKFaeejUHC1WgS1PSkZ19Q0bo3xj4xKJ0hQtCic=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4a:09:90:77:4e:d8:a2:92:a3:97:17:5b:34:a1:57:e2:82:70:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Validity
Not Before: Dec 18 14:26:26 2025 GMT
Not After : Dec 21 21:01:26 2025 GMT
Subject: CN=26934EF3FE606AF1E09274EFDD87DA933641A98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:6e:13:e8:31:87:a5:a5:e0:8a:fe:68:88:
b2:50:af:31:65:e3:84:fa:4e:34:0a:e4:b9:7c:a0:
ef:bc:29:ca:7f:4a:5e:5b:ee:7e:87:fa:e3:f9:db:
cc:67:85:31:3a:3d:8c:eb:7c:6a:4e:22:65:79:a4:
1b:77:fd:65:12:c4:f6:74:3c:44:7c:f9:d1:e5:07:
d4:ee:e2:67:d2:18:ed:9d:24:08:ca:9b:eb:b1:76:
5d:5e:aa:48:00:19:f4:90:1d:1c:14:5c:cc:8c:8b:
92:5c:91:77:a5:e7:f2:01:d7:48:4f:da:56:df:dc:
56:35:86:6b:ca:6c:4f:fe:45:66:da:c2:40:0b:63:
29:8c:2b:65:af:aa:85:84:f0:1c:1f:66:fb:06:09:
44:bd:59:92:6f:c4:59:01:5e:ad:46:ec:4f:f8:cd:
71:b2:28:6f:f8:04:05:ef:5c:62:ab:3c:71:30:c6:
cc:89:92:21:94:09:9f:50:a8:86:d9:04:f1:b7:0c:
0c:76:de:44:ea:1e:f4:7e:d1:ac:a7:93:2e:0b:32:
a7:1c:87:80:94:f8:7f:c0:99:53:f7:c0:54:e6:63:
71:6e:89:aa:02:f6:b7:b7:9c:ef:01:c5:c8:60:28:
21:e0:30:df:8d:c7:92:74:91:9c:56:1c:02:d9:93:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:93:4E:F3:FE:60:6A:F1:E0:92:74:EF:DD:87:DA:93:36:41:A9:8D
X509v3 Authority Key Identifier:
keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:40:fd:a8:55:4d:41:db:b0:56:7f:d4:32:aa:de:bb:59:ae:
61:7a:1c:1d:f0:d7:67:d5:d4:c9:93:3b:bb:13:8d:ba:30:d7:
96:64:d9:92:f2:46:31:ec:43:68:02:c9:83:d5:93:58:3b:2c:
84:61:98:69:5c:bf:70:d0:c3:6f:45:04:2a:d8:e8:2e:a6:43:
ce:85:0b:13:88:40:be:7c:fe:a1:93:1b:dc:ac:90:04:44:02:
e9:85:57:d3:66:01:b5:77:63:b7:44:a8:0c:49:af:04:43:2e:
c3:c5:0b:7b:81:1f:31:ed:cd:ba:bf:6d:9d:d8:53:bb:ba:91:
ec:e7:c2:d8:fe:45:1c:15:97:b3:5d:ba:10:d4:96:e1:98:e9:
ca:10:1e:70:6e:bc:cb:7e:cf:eb:df:f7:0b:f0:9e:c9:fc:11:
e3:9c:7b:b0:6d:28:78:37:bf:2d:cc:02:14:88:b6:48:a7:c6:
b6:fe:e7:05:96:2f:c5:49:58:76:1d:5a:f2:46:62:9c:a5:51:
16:7c:91:e4:18:f7:05:59:e8:4d:bc:6d:1e:d3:f4:54:bc:45:
84:e6:38:d8:98:4b:6d:a6:b4:24:27:11:55:16:23:31:99:3f:
c0:dd:7a:c6:e8:66:0f:06:67:0c:38:55:2c:e3:bf:60:81:7f:
3f:56:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:59:37 2025 by rpki-client