This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File: 667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier: bXCMIS83gnaCfdG3/AVidVtiN0lflKdjTczP0R/RL5c=
Subject key identifier: 9A:38:EE:DE:02:1A:FA:8A:90:F8:04:9E:E0:56:EB:36:2E:2F:39:42
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial: 01555E6B404DD02790FA6EAF1CCF891C6BA18609
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number: 02D7
Signing time: Tue 02 Dec 2025 17:01:29 +0000
Manifest this update: Tue 02 Dec 2025 16:56:29 +0000
Manifest next update: Fri 05 Dec 2025 23:30:29 +0000
Files and hashes: 1: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: 4EhIBVtTUnA2NsufqUE56qVJQ8W9fy5ksrwQzL7c16E=)
2: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: 2pAFw4pCfgppnXNzn4U9fVaUZRHA5FxGk6QsaeCqBJY=)
3: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: CFm8UxOFUNv/+ECnjHOC47sfC3C4NJroGuyfEm+9/Ds=)
4: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: p1IlE+POO9hCFBImJs4SWaLDjBIhdLsxh8yaBGtXhAg=)
5: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: W5Ot0BBUNk5NFwRYk7ap1jPaT+1meSB0kfyCkhd5n7I=)
6: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: K/7tOYYasBJDVZIKKaVcNikbjcVjARDxAvAMyMWJm4Y=)
7: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=)
8: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: Rpp4YpehQ1M+h6emtzM5wkYph2BpAIpQDGT9zp1ts2M=)
9: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: HbKwsuQgYC8kyv50M23w4h1WaGyYUtMgukyV/PzUlcs=)
10: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: yr0MNMuQ/IlUxBG9BJkWSvncA4WzNuZMrgeTlRsfQrw=)
11: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: Ix+R/yfCu9YeIQiklNVMKU4ccTsIM4M8qCqs+sb4ZL0=)
12: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 23:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:55:5e:6b:40:4d:d0:27:90:fa:6e:af:1c:cf:89:1c:6b:a1:86:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
Validity
Not Before: Dec 2 16:56:29 2025 GMT
Not After : Dec 5 23:30:29 2025 GMT
Subject: CN=9A38EEDE021AFA8A90F8049EE056EB362E2F3942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:31:18:4e:e3:68:b8:64:dc:b3:16:fa:69:
4b:a9:23:fd:a1:6a:67:d9:3a:7f:fc:69:bb:e5:6b:
ac:66:bf:99:dd:96:94:4f:cb:3c:37:e3:69:67:aa:
2e:3d:c9:78:1b:2d:2a:ea:d0:4a:e2:62:3c:07:ca:
11:6d:85:a1:e4:9e:a9:f7:b5:9a:13:f7:5f:7c:32:
11:6c:aa:0e:f9:24:ab:8f:fc:2d:34:ee:5f:5a:9c:
9f:27:f6:dc:ae:95:6d:e1:b4:ca:95:d9:8c:27:f2:
1c:1b:7b:58:82:80:3d:97:60:d1:3c:8b:dd:dd:4f:
8a:41:09:7c:05:49:7b:aa:f4:5c:4d:b9:34:03:2e:
bc:ec:70:29:43:4e:35:b4:c2:82:15:7b:1a:b5:f0:
3f:af:b4:1e:31:f9:ce:1c:b4:97:0f:03:79:26:5c:
ba:86:e8:f5:1e:16:39:2e:2d:92:9e:c6:d3:c5:63:
f6:1b:5d:24:ae:c2:bd:0a:f5:ca:5d:56:2a:5c:26:
a1:f7:e8:6d:f1:d6:20:0e:52:7c:10:0b:9c:70:7e:
c9:3f:11:5a:a4:a1:75:be:65:29:84:57:2b:c9:29:
8a:a4:d4:04:23:f6:0b:63:bd:0f:17:65:82:ad:f1:
9c:f5:c2:7f:df:80:b7:76:ba:d2:0e:06:c1:40:ac:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:EE:DE:02:1A:FA:8A:90:F8:04:9E:E0:56:EB:36:2E:2F:39:42
X509v3 Authority Key Identifier:
keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:07:b9:04:2d:cd:c4:32:1f:56:b7:41:e2:8b:db:a1:0c:
6e:23:0e:1f:b4:ef:d7:ad:66:40:aa:77:d1:19:54:71:fa:e9:
ed:95:6d:ad:37:dd:f9:25:2b:03:5d:4b:6a:04:79:43:a8:a9:
5a:4b:58:6a:02:2f:84:5f:ca:f5:23:40:53:a2:be:53:e5:b8:
bb:0e:7d:d8:39:81:ba:00:09:59:b2:c3:25:4d:3d:73:22:63:
cb:22:50:fe:ee:5e:d5:a8:13:0e:82:ec:f4:be:9b:b4:33:b0:
e7:f7:5f:24:d4:20:77:89:97:89:4d:f1:22:b3:3d:d4:93:30:
d8:4c:c9:40:e2:c3:e9:d4:38:09:f8:56:cd:2f:a5:60:f5:f2:
69:5d:1f:58:5c:5e:73:d4:15:33:c6:82:61:78:16:23:fc:0f:
ba:e0:b6:d1:ce:94:9c:42:9f:6a:11:52:bc:6b:9a:e7:30:34:
c1:37:c0:34:8b:b6:d8:9f:ca:eb:dd:d4:4b:a6:97:6f:c4:f1:
27:a4:95:90:1c:f4:cd:b9:55:01:82:1c:ef:6a:aa:0f:c5:e4:
e6:69:b2:81:38:f4:37:e1:55:aa:db:1e:10:b7:2d:54:65:0d:
a8:73:0c:42:ec:ff:02:3b:51:b9:63:04:1d:1b:19:08:97:fc:
e1:d8:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:51 2025 by rpki-client