This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft
File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json)
Hash identifier: AEjFxjLLegRJoBlla7Usv+6U57/MDTuvHJ/VDXZ3Qh0=
Subject key identifier: 15:4F:1C:59:31:40:05:22:C2:39:C0:33:CE:1A:6A:0A:9E:B1:77:8D
Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87
Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
Certificate serial: 220EEB178224DEA5790FA2954DD338B13FD631C3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft
Manifest number: 0529
Signing time: Tue 02 Dec 2025 03:12:10 +0000
Manifest this update: Tue 02 Dec 2025 03:07:10 +0000
Manifest next update: Fri 05 Dec 2025 03:26:10 +0000
Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: 3A4hJlwmsozw2JP+xhQXlVvoR9iO1CB4zG3bVLOEyPY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl
rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 03:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0e:eb:17:82:24:de:a5:79:0f:a2:95:4d:d3:38:b1:3f:d6:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
Validity
Not Before: Dec 2 03:07:10 2025 GMT
Not After : Dec 5 03:26:10 2025 GMT
Subject: CN=154F1C5931400522C239C033CE1A6A0A9EB1778D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:a5:f2:6e:59:0d:53:f1:c7:e5:b1:08:81:
40:c0:ce:cd:b1:27:1c:aa:51:16:de:b8:02:e9:62:
61:51:b7:bf:42:bb:27:2f:7a:f6:ac:f3:5d:6b:96:
a4:74:0b:78:33:fd:5b:fc:4d:4f:02:dd:bf:7d:80:
b6:f5:cd:ca:b0:1f:89:97:35:52:63:4b:9a:98:f1:
17:40:1a:81:8b:f5:49:17:d7:a9:0c:23:58:83:6a:
b9:b1:0e:74:b4:a7:69:90:42:8d:c9:4f:e0:87:69:
e3:c7:ad:43:fd:ee:ca:3e:93:49:d8:4a:76:3c:82:
0d:35:3e:d6:b0:49:d0:1b:61:62:5c:83:22:3e:9c:
7a:fd:be:69:70:06:64:bb:2a:4e:e3:45:68:c4:36:
7d:81:0d:5a:8b:3e:42:08:4c:ce:1b:78:13:0f:e2:
d2:92:28:c3:08:d8:6e:24:26:19:a5:26:ed:14:81:
8a:76:83:63:22:46:98:a0:d5:71:a6:46:44:a8:1b:
0e:66:76:ca:e7:63:c1:92:d4:2c:61:c9:71:47:07:
a6:23:d1:49:f4:e2:b8:8d:3c:8a:16:1e:38:6b:ab:
04:88:a0:6d:ca:39:dd:19:72:bc:28:56:08:66:17:
38:97:5c:a1:3c:8c:1f:a6:73:e5:35:8e:90:c8:09:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:1C:59:31:40:05:22:C2:39:C0:33:CE:1A:6A:0A:9E:B1:77:8D
X509v3 Authority Key Identifier:
keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:aa:50:a2:8f:1c:21:d9:e6:f0:92:87:9b:f3:d9:3d:fc:b1:
e0:ef:38:0f:6e:fb:14:ae:6d:06:fb:a3:a5:63:8e:05:1d:dd:
d9:6c:f1:d4:62:17:e3:76:f4:ae:2f:df:e0:ab:da:f0:b9:90:
13:dc:50:e7:bf:27:e2:f4:ef:ca:92:53:ec:c8:f0:3c:1f:ff:
a8:d7:e4:28:83:3a:22:7b:3f:ce:e6:62:14:54:ef:c2:18:83:
20:59:37:3f:02:e4:8a:b1:15:dc:8b:d2:9b:52:98:45:eb:78:
7c:4e:93:f9:e7:15:fe:33:a3:b7:3e:67:14:e8:30:a7:13:2e:
ee:4a:c2:3f:64:ba:ba:23:61:29:bc:4e:91:f8:32:47:b3:af:
bf:2c:1e:3f:2a:97:28:9f:82:a3:ed:63:21:42:d7:3e:88:86:
d1:31:e7:78:e4:73:18:e1:c9:6e:5d:7c:c1:4b:b7:a6:7e:b8:
18:c5:db:7a:a9:e3:1e:c1:e9:e2:ef:04:e0:e7:8b:57:d1:2e:
c9:ab:6c:3a:ef:d0:39:5f:33:58:d9:64:1e:4c:96:6e:9e:b2:
54:a0:6e:b0:b4:62:82:18:fe:60:f3:88:0d:86:9e:ed:c0:34:
c4:5d:f0:05:5f:da:c4:ac:b9:bc:22:81:df:3f:05:7f:eb:39:
f9:d0:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:55:10 2025 by rpki-client