This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
File: 75890247E178C40DD3F9A5968202F684AEB89D9A.mft (raw, json)
Hash identifier: cxgdVUhV7Sw40PoiBPezlCgns3p5CbW8HwDSAi5oIeI=
Subject key identifier: 9C:DE:69:46:5B:5F:82:98:C1:84:8B:37:6D:3C:34:0C:C5:5B:7E:DA
Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
Certificate issuer: /CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Certificate serial: 1A3FC1C1E2E74E2CBB8AA7F4CDE03E503E39E194
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
Manifest number: 01FA
Signing time: Sun 14 Dec 2025 07:01:03 +0000
Manifest this update: Sun 14 Dec 2025 06:56:03 +0000
Manifest next update: Wed 17 Dec 2025 12:40:03 +0000
Files and hashes: 1: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: ABOgyOC/6WBI7TsB52quJVoJIzB223bKwujKqyNGano=)
2: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: fXiiGXJRCPKNViYWqCFLLjVfmQD8H4I+YjRRxMPnTUk=)
3: 75890247E178C40DD3F9A5968202F684AEB89D9A.crl (hash: jE4qi/CpMme5Yjej9YSmVDm78S9UDZeo1s8GhRjp6KM=)
4: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: g6PqLS5mE+1W2ojOPy8XOSM+C1KCNHjLUWlTp/BiYKA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl
rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 12:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3f:c1:c1:e2:e7:4e:2c:bb:8a:a7:f4:cd:e0:3e:50:3e:39:e1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A
Validity
Not Before: Dec 14 06:56:03 2025 GMT
Not After : Dec 17 12:40:03 2025 GMT
Subject: CN=9CDE69465B5F8298C1848B376D3C340CC55B7EDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:e9:f4:c2:11:57:c9:5e:02:21:1e:c9:cd:
28:37:20:59:5f:55:fd:aa:2e:19:3a:d1:b6:12:fa:
4d:3d:6d:14:2d:94:6c:4e:fc:a1:88:e7:ab:69:70:
e1:f3:4b:c3:5f:3d:f2:e4:20:6e:35:a1:4f:b7:93:
10:8b:5c:98:27:27:b0:9c:0b:27:e5:8f:ca:17:1c:
57:47:70:ef:07:35:2f:86:6f:ba:e1:49:ee:eb:5a:
f5:17:8b:6a:78:1b:3f:aa:6e:8f:2f:2b:a9:6c:22:
65:d0:75:eb:24:24:b0:a5:38:8c:37:bf:b0:29:4c:
5a:1b:dd:92:e1:cc:ae:a6:3a:a8:fa:1f:3c:4f:ab:
92:15:3e:28:8b:6c:29:21:b7:2c:06:d8:3a:1e:67:
81:52:3d:9f:07:85:ba:de:f2:b3:6f:6d:e0:9e:4a:
5e:29:f2:13:6c:a7:c5:61:6f:69:81:7c:0b:59:05:
22:82:66:f0:cd:d5:fd:31:04:ab:9c:9a:86:57:d0:
9f:f5:ba:b3:a1:9a:d8:00:88:0f:3a:70:61:35:c8:
25:c1:c4:e9:75:3f:62:90:9f:90:be:0d:ee:c2:ef:
a1:25:46:65:08:91:86:ba:df:ce:9c:81:60:43:84:
bf:92:f5:da:73:b4:b0:13:70:b3:97:c5:7a:d4:e0:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:69:46:5B:5F:82:98:C1:84:8B:37:6D:3C:34:0C:C5:5B:7E:DA
X509v3 Authority Key Identifier:
keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c3:ef:a6:30:87:67:e4:3d:9d:54:8a:4e:48:cf:21:a8:b9:
03:7b:b3:bd:75:8e:6f:b9:24:d5:55:ac:ef:9a:04:bc:8d:1c:
7d:f9:55:30:da:ef:9c:67:c5:0d:f3:2d:79:f2:a5:f5:3e:cd:
08:d5:98:d0:92:ed:1b:05:f4:2a:0f:8c:d1:13:d3:3f:9c:33:
93:47:50:54:31:f7:db:c6:7a:4f:da:3f:3e:a4:14:e9:d4:32:
b3:c1:d5:19:ee:f5:25:2e:07:72:dc:60:59:40:ce:09:88:22:
34:33:41:76:56:09:ec:5b:62:32:03:20:37:c4:8a:99:06:de:
f3:f1:8f:37:28:75:05:af:14:dd:00:40:5e:f3:40:21:1c:01:
f1:3e:34:b9:ba:5a:e6:e5:f1:42:f1:27:f6:ef:f9:4e:55:32:
db:02:26:5f:ee:56:01:c6:7b:9d:26:ad:0d:dd:ce:c3:cd:63:
e2:3f:6d:d1:62:14:59:ae:3b:0a:c7:10:0b:7a:44:d4:3d:c8:
a5:1b:d9:25:4e:c7:2e:1a:70:a7:50:b6:ad:51:83:70:d6:56:
b2:93:c3:63:03:73:77:d1:71:e9:85:d4:1a:42:4a:94:61:c2:
4c:f2:70:82:04:6e:82:f2:9d:f8:30:f8:8c:9a:99:b9:51:12:
f3:14:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:20:47 2025 by rpki-client