This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
File: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json)
Hash identifier: xJ07QElMghGFMsOJMDSrEQwSEUhOtISelSxHSdTq4uY=
Subject key identifier: 7F:76:19:C1:51:79:8E:24:AC:08:B6:CE:96:12:44:8B:28:6E:13:38
Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Certificate serial: 69415322643735929B2197357B24B0F7AEB47F01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
Manifest number: E3
Signing time: Mon 01 Dec 2025 23:12:08 +0000
Manifest this update: Mon 01 Dec 2025 23:07:08 +0000
Manifest next update: Fri 05 Dec 2025 03:46:08 +0000
Files and hashes: 1: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: 5d1MR7rKvEWqFJE9IZmsunjaxhaRl4wODAGB+LLjxEo=)
2: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: ky6kqewG2CLcXwQoFuB0Gbkz5WHCCY7RgpoJqEc0cVU=)
3: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: wu+uU5YHRoJebEIyE5THyk9OFhF1oB4tz7uqtWqzaUI=)
4: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=)
5: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 03:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:41:53:22:64:37:35:92:9b:21:97:35:7b:24:b0:f7:ae:b4:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Validity
Not Before: Dec 1 23:07:08 2025 GMT
Not After : Dec 5 03:46:08 2025 GMT
Subject: CN=7F7619C151798E24AC08B6CE9612448B286E1338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d6:30:4d:44:94:59:68:1b:a9:cd:2d:76:73:
52:c2:44:a7:15:00:b6:59:dd:e3:f3:ae:99:cd:64:
fe:87:76:4a:ea:c8:f8:af:b6:08:dd:5e:03:93:4f:
c9:15:be:67:06:44:52:39:c6:ff:86:44:44:1d:e6:
af:9a:3f:40:dc:a7:66:8e:c0:79:ac:78:2f:6a:6b:
99:ea:ec:6f:12:ac:56:36:69:b2:ee:e5:65:7e:0b:
22:48:0d:43:d6:04:cb:cf:9c:91:fd:9e:ff:57:00:
09:41:46:8e:53:61:9c:55:ae:3d:c1:24:e8:53:b7:
d8:f3:8a:cf:6e:ec:d1:32:59:78:d4:38:43:af:c2:
af:1c:dd:47:76:da:e3:9b:eb:2c:28:3d:63:7f:a3:
da:8a:86:5b:f6:d0:8f:38:5d:8b:1f:ea:52:cd:7b:
56:cd:37:77:c8:e2:79:c3:ed:c6:4a:3b:58:d3:2e:
86:21:eb:4b:cc:80:e5:ce:29:65:c1:35:dc:19:4d:
09:eb:95:49:1e:7f:9e:ab:68:d9:e6:3a:96:e8:98:
6c:38:15:d7:4a:7e:f6:e2:32:fc:97:5f:05:3d:61:
26:a5:b4:a1:af:b8:4f:45:18:78:82:7b:b5:87:e3:
91:88:c3:1d:33:d1:c9:47:5e:cd:c7:1a:89:c4:b5:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:19:C1:51:79:8E:24:AC:08:B6:CE:96:12:44:8B:28:6E:13:38
X509v3 Authority Key Identifier:
keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d1:f2:19:ee:a5:a7:f3:cd:d5:af:06:92:fc:6e:76:0d:b4:
3c:d2:b3:5b:00:88:42:f7:eb:9a:67:33:e3:36:71:83:ae:8f:
8b:d3:e7:e5:7c:8b:38:b4:55:93:30:1b:ad:54:ec:7f:02:5a:
77:e0:cd:ac:b4:66:33:e5:64:66:a3:71:b6:aa:b4:3b:62:4f:
99:2d:b7:7f:ed:97:86:be:f5:5a:1c:db:4c:4c:98:0c:fa:4d:
61:ed:21:fd:1b:1d:0d:09:2d:be:ad:96:ef:7f:3b:9c:fe:26:
b2:5f:3b:63:a8:b1:68:e4:dd:a2:44:43:30:7a:ed:65:38:25:
55:79:ba:95:fd:ec:58:74:2d:67:b1:11:e9:2a:87:0e:62:bb:
e3:25:e0:96:f4:fc:28:39:b6:80:7b:89:ec:a8:51:80:40:f2:
8d:64:3a:fa:f9:1c:1a:61:c5:9e:f5:e3:61:e4:55:92:cb:3f:
8f:b3:a9:07:d2:43:5c:af:77:8c:66:89:70:cd:40:35:99:88:
16:c1:5f:82:3d:d7:7a:7f:ae:f5:cb:d8:6a:5c:e4:a2:c2:7c:
3e:ba:56:27:0a:44:a3:77:f5:e3:17:4e:0d:a9:c3:dc:9a:e3:
70:43:58:c1:b7:f8:d2:cd:00:e4:91:34:d0:d7:85:ac:57:49:
83:66:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:20:39 2025 by rpki-client