This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json)
Hash identifier: d9gd25yOpLZZzSo1w3YPaywmMs5DOjb8uk2LHz2xB/0=
Subject key identifier: 71:20:A0:97:6E:59:6C:E8:F6:4D:2C:6D:F8:B3:9C:E2:63:D8:F6:90
Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Certificate serial: 6FFF706775B223927CED4B7409C364A0BB56016D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
Manifest number: 7E
Signing time: Mon 01 Dec 2025 08:01:54 +0000
Manifest this update: Mon 01 Dec 2025 07:56:54 +0000
Manifest next update: Thu 04 Dec 2025 19:18:54 +0000
Files and hashes: 1: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=)
2: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=)
3: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: Hh2sb/ign78Xrl382jFQfV12EVqSp6xWMQ7rD56eUZk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl
rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 19:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ff:70:67:75:b2:23:92:7c:ed:4b:74:09:c3:64:a0:bb:56:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Validity
Not Before: Dec 1 07:56:54 2025 GMT
Not After : Dec 4 19:18:54 2025 GMT
Subject: CN=7120A0976E596CE8F64D2C6DF8B39CE263D8F690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:d6:85:0e:09:70:f9:f2:73:9c:d8:c7:81:
13:7f:69:bc:ba:a8:a3:4b:83:a3:bf:23:85:d1:9e:
43:61:ca:3c:f8:42:99:a1:7b:d0:c9:7c:45:69:15:
42:03:28:20:7a:29:97:41:b2:02:01:db:03:bc:d8:
e5:06:d5:99:cb:8d:3b:2e:20:92:38:ed:6d:19:18:
39:ff:6c:88:c7:e4:08:4c:14:9e:09:d6:d0:f6:8c:
e9:17:b3:73:41:5c:89:31:04:5a:43:85:ac:c0:44:
6e:cb:a5:13:95:13:fb:80:1a:0c:2f:72:2a:4c:1d:
d9:1c:6c:f2:e2:b7:57:50:0b:30:90:83:07:9f:45:
24:93:cd:fc:dc:fb:c1:4c:fb:70:01:d0:a1:e4:c0:
34:ca:3b:e4:ef:0b:b5:5f:4e:de:8d:f1:d3:c4:70:
4e:64:4d:d3:af:9e:09:4e:47:73:b5:97:93:66:05:
a3:87:cb:4d:40:8d:67:ce:6c:c9:14:c7:54:a8:77:
b8:5f:89:a4:33:48:ed:ea:52:4e:42:3c:a4:6e:16:
30:20:3c:fb:6b:b4:3a:37:2d:ee:69:c4:5b:b9:b8:
61:b8:5e:56:d5:05:05:46:88:2a:2d:24:bd:1b:b4:
de:d9:c8:c5:05:d2:64:db:fb:47:31:0d:af:f7:7e:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:A0:97:6E:59:6C:E8:F6:4D:2C:6D:F8:B3:9C:E2:63:D8:F6:90
X509v3 Authority Key Identifier:
keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:aa:85:cb:00:d8:6a:a0:30:99:41:60:7b:e6:51:18:55:2f:
b2:d2:f3:a9:5d:8c:e6:f9:75:ef:a5:85:fb:5c:e9:ff:39:99:
02:ed:65:b4:53:ae:8f:bc:ca:26:64:c0:f0:d9:4c:76:76:73:
8a:5c:e4:ad:8c:a0:66:b1:8e:89:93:14:80:91:75:bc:47:80:
86:ac:99:b7:28:5c:18:40:52:f8:93:bb:90:7e:8b:52:1b:75:
1d:1d:1d:95:b3:ae:72:4e:a8:a9:04:67:41:60:7d:bf:b0:5b:
ea:f1:d8:b7:ef:8e:aa:10:ca:20:c5:0f:43:38:5b:ca:a4:a1:
b5:f1:a1:63:be:d8:e4:68:e6:79:02:66:cd:79:38:c6:63:54:
15:17:13:d0:6f:db:d0:3d:32:80:29:5b:0d:c7:1d:99:9a:dc:
b3:8f:f9:55:41:54:8e:ab:b5:be:9c:d1:95:b3:1c:b7:25:12:
55:1c:c7:31:8f:b3:70:48:a1:f5:14:76:02:52:1a:4f:75:3a:
9d:fc:b1:0d:90:de:ca:5a:b5:ca:32:16:60:76:7e:cd:28:0c:
76:67:83:12:18:9b:ff:ca:a4:90:de:7f:81:cd:b4:e8:ec:1c:
8f:fa:14:fb:29:f1:16:0e:9f:ae:7d:c1:ba:e4:cd:4f:e9:23:
58:cc:53:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:26 2025 by rpki-client