This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json)
Hash identifier: FwefnL4yJkMcYTy6r4KyCLtTXL+pGcMzPXRXtAVRG/0=
Subject key identifier: 04:AD:B5:4D:E3:32:3F:9B:16:74:2A:48:37:5A:F9:B9:87:0B:52:40
Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Certificate serial: 7122B6D2E7E71FCDB64F0F8FF938742DF974AC65
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
Manifest number: 0212
Signing time: Wed 03 Dec 2025 03:11:45 +0000
Manifest this update: Wed 03 Dec 2025 03:06:45 +0000
Manifest next update: Sat 06 Dec 2025 06:11:45 +0000
Files and hashes: 1: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=)
2: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=)
3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=)
4: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: I9aPIXXqsdAhCDXCMOeIsm7BAmd3Hxda9CEbVHpjN+0=)
5: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: jCC55QoiailnQ1RFdBW81Arc7TozD6cSp8bDswcvT9g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl
rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 06:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:22:b6:d2:e7:e7:1f:cd:b6:4f:0f:8f:f9:38:74:2d:f9:74:ac:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Validity
Not Before: Dec 3 03:06:45 2025 GMT
Not After : Dec 6 06:11:45 2025 GMT
Subject: CN=04ADB54DE3323F9B16742A48375AF9B9870B5240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:47:f1:36:b6:dd:de:4b:78:be:9e:ce:94:
74:57:e9:c6:40:d4:d9:03:eb:36:19:e9:94:71:69:
2c:df:a3:fc:84:81:69:8e:75:4d:a2:63:39:4c:1f:
eb:a2:7f:7b:95:83:1f:61:c6:0f:8e:5b:c8:96:21:
f6:47:e1:fa:21:d6:3a:b1:42:ce:78:ad:72:42:0e:
0c:17:f4:99:66:fd:33:59:10:37:75:4d:18:32:27:
ab:46:bf:23:71:ab:7d:e4:16:bf:50:8d:b9:fb:20:
a6:21:c9:91:22:f5:9e:8d:8a:48:f2:a6:cd:fd:96:
49:c7:d1:d5:2f:48:f2:24:1f:ff:1b:d3:6f:27:e9:
62:37:d1:7a:d9:6f:df:fe:01:b5:2b:d2:0d:5a:3a:
27:42:0c:2d:eb:75:df:1a:6c:8a:79:18:ad:c1:cf:
d9:c3:7e:81:51:93:02:83:9d:d1:bd:ce:6c:7a:48:
0b:c5:7e:f1:a6:ad:c8:d5:cb:6a:38:6a:45:53:1b:
fb:4d:43:77:79:48:b4:bb:8a:9e:51:d5:cb:9a:11:
f0:89:3a:8a:63:af:24:8d:d4:0c:1b:dd:8b:6e:23:
e9:c2:b9:fc:c2:ea:af:a3:e2:42:63:11:29:4c:e2:
5b:6a:5f:03:c1:fe:1e:2d:7a:3f:03:59:db:8f:77:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:B5:4D:E3:32:3F:9B:16:74:2A:48:37:5A:F9:B9:87:0B:52:40
X509v3 Authority Key Identifier:
keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9d:d8:c2:6d:69:4d:9d:d3:18:8e:06:37:ff:f3:f7:09:2a:
16:d7:29:d8:ba:4a:df:fc:dd:74:04:76:20:49:e9:dc:17:43:
cd:2d:4d:05:71:c3:1b:7d:ff:d2:a0:87:d6:ee:ee:14:9c:6d:
03:9a:da:b9:fc:a9:08:1b:d2:33:9b:35:02:d5:29:20:6f:0c:
e5:dd:29:f2:1c:b6:9c:78:75:b7:ee:89:c8:24:24:73:65:22:
ac:f4:f8:16:dc:68:f6:46:1c:f7:f7:9b:a4:77:3f:1d:2b:3e:
a3:f8:05:6b:84:8d:91:ee:de:2f:07:e3:2f:43:e2:4b:1e:7b:
24:a9:00:9c:bd:3f:b7:07:4f:76:8c:b2:55:7c:5c:04:b9:fb:
3e:01:0c:71:df:9d:3e:cc:af:2a:f1:e0:6e:84:7b:14:41:fa:
8a:00:30:ac:e5:1b:1e:48:d9:80:50:bf:8b:bc:c3:14:ef:39:
73:ed:df:5c:c2:c6:cf:70:14:85:d6:80:d6:a0:ef:f8:a9:95:
0a:22:01:ca:96:df:34:a8:98:35:0d:ae:5b:25:24:33:a0:2c:
63:61:87:7e:17:d5:3b:c2:f6:ec:28:d5:04:57:f1:f0:f8:38:
5d:e3:a1:ab:3c:9b:67:ec:e0:10:13:21:3b:4c:fc:8b:1c:35:
3e:a7:fd:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcSK20ufnH822Tw+P+Th0Lfl0rGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE
MEI0RDhCRDAeFw0yNTEyMDMwMzA2NDVaFw0yNTEyMDYwNjExNDVaMDMxMTAvBgNV
BAMTKDA0QURCNTRERTMzMjNGOUIxNjc0MkE0ODM3NUFGOUI5ODcwQjUyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7K0fxNrbd3kt4vp7OlHRX6cZA
1NkD6zYZ6ZRxaSzfo/yEgWmOdU2iYzlMH+uif3uVgx9hxg+OW8iWIfZH4foh1jqx
Qs54rXJCDgwX9Jlm/TNZEDd1TRgyJ6tGvyNxq33kFr9Qjbn7IKYhyZEi9Z6Nikjy
ps39lknH0dUvSPIkH/8b028n6WI30XrZb9/+AbUr0g1aOidCDC3rdd8abIp5GK3B
z9nDfoFRkwKDndG9zmx6SAvFfvGmrcjVy2o4akVTG/tNQ3d5SLS7ip5R1cuaEfCJ
OopjrySN1Awb3YtuI+nCufzC6q+j4kJjESlM4ltqXwPB/h4tej8DWduPd581AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBK21TeMyP5sWdCpIN1r5uYcLUkAwHwYDVR0j
BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE
MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0
RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw
ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx
QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFid2MJtaU2d0xiOBjf/8/cJKhbXKdi6St/8
3XQEdiBJ6dwXQ80tTQVxwxt9/9Kgh9bu7hScbQOa2rn8qQgb0jObNQLVKSBvDOXd
KfIctpx4dbfuicgkJHNlIqz0+BbcaPZGHPf3m6R3Px0rPqP4BWuEjZHu3i8H4y9D
4kseeySpAJy9P7cHT3aMslV8XAS5+z4BDHHfnT7Mryrx4G6EexRB+ooAMKzlGx5I
2YBQv4u8wxTvOXPt31zCxs9wFIXWgNag7/iplQoiAcqW3zSomDUNrlslJDOgLGNh
h34X1TvC9uwo1QRX8fD4OF3joas8m2fs4BATITtM/IscNT6n/Yk=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:19 2025 by rpki-client