This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json)
Hash identifier: Q82MO9mf8szRHoutj3W67XFPcZ2a+Wzce8SFuzkLPDg=
Subject key identifier: C6:18:63:8A:A3:D5:75:18:1C:45:E0:C5:07:C3:4A:93:13:29:2D:26
Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902
Certificate serial: 5FAFEFEA296FBAD7BF91C0E6BDA1026FE6D3F349
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
Manifest number: DC
Signing time: Thu 18 Dec 2025 04:01:19 +0000
Manifest this update: Thu 18 Dec 2025 03:56:19 +0000
Manifest next update: Sun 21 Dec 2025 13:58:19 +0000
Files and hashes: 1: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: S+sQfMEkJEdHFuFKyAP6JjlwjBOWyFy1QAgtAwGz15Q=)
2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 13:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:af:ef:ea:29:6f:ba:d7:bf:91:c0:e6:bd:a1:02:6f:e6:d3:f3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902
Validity
Not Before: Dec 18 03:56:19 2025 GMT
Not After : Dec 21 13:58:19 2025 GMT
Subject: CN=C618638AA3D575181C45E0C507C34A9313292D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:8f:89:33:8e:4b:bb:ef:92:19:70:8e:fd:
46:93:cd:37:f1:e8:a0:71:99:dc:72:6e:74:b2:7e:
04:ab:67:70:cf:cc:67:cf:cb:50:eb:83:8e:75:bf:
ff:2a:5d:10:ef:3f:7a:e5:91:43:d7:9b:bf:09:f5:
90:dd:58:61:a9:f7:62:fe:9b:b8:d9:80:01:c6:61:
78:fa:88:bc:91:f9:54:2e:a8:eb:22:d6:ee:07:48:
07:13:b3:a0:52:f3:5b:c8:96:15:be:d0:3f:b4:90:
94:2d:b0:49:0c:a9:92:fd:c7:4f:01:e6:63:25:02:
35:df:93:12:f3:e1:f4:23:25:73:4c:7e:52:18:69:
06:b3:51:ba:31:60:8f:c2:54:24:e1:8a:cb:09:01:
02:2f:43:ea:dd:29:0b:2d:bb:53:78:40:da:6a:e3:
8e:d6:94:5e:de:da:2b:4d:9a:52:60:5e:fc:b3:57:
df:de:7f:8e:6f:9f:a2:66:d7:c2:90:08:ed:52:a9:
5b:53:35:1f:86:5a:54:7e:e4:71:4a:93:9a:65:7f:
53:45:57:c5:d0:74:aa:b3:f6:ac:69:52:c2:64:32:
66:7b:9b:ea:fd:23:19:99:3c:11:19:b0:16:a0:3d:
a4:fe:7a:47:d7:94:60:11:0e:69:a2:9f:df:9c:11:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:63:8A:A3:D5:75:18:1C:45:E0:C5:07:C3:4A:93:13:29:2D:26
X509v3 Authority Key Identifier:
keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:24:8f:28:7e:a6:0b:9b:c1:f9:ca:69:da:6f:bc:7d:6b:d5:
89:8f:52:c7:44:b6:75:43:e0:cc:12:6c:99:ca:13:48:2a:36:
f2:ad:da:07:af:b2:2b:27:aa:66:19:95:05:07:68:90:ad:a4:
d0:bf:7b:33:93:4e:3b:bb:a5:11:9e:9f:ee:94:00:de:f5:1f:
af:38:19:e9:7e:ee:be:92:27:9c:c0:08:98:2b:e0:b5:cb:56:
5a:0e:ae:05:0d:f1:1e:87:91:26:b0:0b:11:9d:2f:c8:af:86:
00:40:44:ae:0e:eb:06:08:de:39:45:d3:03:98:8f:0e:4e:e6:
8c:29:4f:57:aa:1e:63:f1:5a:44:3c:ad:64:15:d3:e7:08:58:
ec:9e:9a:a5:c4:52:26:19:c8:b1:ce:78:46:88:71:a1:b0:26:
e6:53:b7:ee:0d:7a:cd:1e:fb:d6:69:22:46:7d:e4:8c:a8:52:
6d:70:1e:6b:d0:ef:02:84:bd:80:85:b9:19:22:77:99:10:24:
bf:fb:d6:33:8b:c6:d5:2f:d5:c3:c9:67:f8:38:9d:38:1f:95:
32:8a:c5:a1:0b:50:a2:e2:0c:3b:7c:62:01:02:58:ea:72:9c:
40:50:76:81:c5:9d:fe:45:25:8b:14:9f:da:76:2a:b2:7c:e1:
75:6b:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:37:47 2025 by rpki-client