This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
File: 782659A7F6433029248A38A1C68F2E9971161391.mft (raw, json)
Hash identifier: PxV8Op7csEkNZWGeNWllSgOKDWNHf02rYMml9I/vLz0=
Subject key identifier: CB:D1:0C:2E:5B:08:1A:0E:2C:49:E1:D2:B2:C1:D4:48:E1:F2:6C:9C
Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
Certificate issuer: /CN=782659A7F6433029248A38A1C68F2E9971161391
Certificate serial: 1D5FC08F7037D0ACBB75EE8D8813BFC8DEBF2590
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
Manifest number: 0145
Signing time: Wed 03 Dec 2025 06:30:59 +0000
Manifest this update: Wed 03 Dec 2025 06:25:59 +0000
Manifest next update: Sat 06 Dec 2025 07:53:59 +0000
Files and hashes: 1: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: 40JRxNw6stZoA1fUKj/zKco7HRJV/HtMAMb74Ejikyo=)
2: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=)
3: 782659A7F6433029248A38A1C68F2E9971161391.crl (hash: h+JK4gC07x16tD0tP/2fejfl92Y8sPiTRJUyQnrVXDI=)
4: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: 4SzxYxsm34j+//J0Zj7fCtaaSGBPCJKKVqr4apFWEx0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 07:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5f:c0:8f:70:37:d0:ac:bb:75:ee:8d:88:13:bf:c8:de:bf:25:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391
Validity
Not Before: Dec 3 06:25:59 2025 GMT
Not After : Dec 6 07:53:59 2025 GMT
Subject: CN=CBD10C2E5B081A0E2C49E1D2B2C1D448E1F26C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:ca:a5:b2:67:c8:6f:66:85:74:82:d2:97:
c8:ad:e2:71:9d:23:57:ef:5c:11:50:cf:f9:91:b7:
14:69:0f:be:fc:55:40:7e:ca:e7:43:22:a2:e0:3e:
e4:84:c0:c2:89:46:6e:c9:0a:4a:49:29:71:a9:88:
79:ac:97:b9:f6:14:fc:3f:f9:28:ab:fe:6f:0b:99:
74:2d:ed:52:48:96:ef:7e:20:c6:1a:98:7a:52:f5:
29:88:4e:97:a7:d7:14:42:aa:a1:0b:17:6b:86:e5:
25:b4:0c:fa:57:4c:af:08:9d:68:78:73:e1:dd:1c:
0d:53:07:94:b9:c7:2b:14:b8:29:a0:3b:5e:6e:09:
60:b2:a2:2b:19:3e:f8:3e:37:dd:db:f0:a1:d8:94:
54:df:26:37:c9:e5:18:ff:d4:2e:4d:38:b3:da:26:
78:87:c9:c6:8f:ea:a5:94:c1:d2:57:77:ca:46:aa:
61:1e:78:a8:df:df:bb:eb:1d:55:f8:65:4d:0f:3c:
29:4f:18:94:ce:27:a5:8d:40:0d:ac:61:19:19:1e:
57:6c:bb:e8:10:48:40:2a:fd:d2:e9:a8:3b:26:01:
7c:c8:3e:60:94:bd:0f:e6:d4:1b:8c:1b:04:49:4b:
4b:d4:11:0c:65:fc:52:eb:3b:39:88:49:b7:ce:87:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:0C:2E:5B:08:1A:0E:2C:49:E1:D2:B2:C1:D4:48:E1:F2:6C:9C
X509v3 Authority Key Identifier:
keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5b:1b:a3:74:de:af:7b:3b:0c:e5:d0:6e:bc:ef:7c:f0:17:
8f:e3:e6:6a:b6:ea:7a:b2:48:9a:f3:52:46:6f:0a:44:e7:86:
b2:5c:78:f9:df:e4:7f:f0:36:3f:a3:70:4f:2f:90:f7:9c:91:
6f:50:35:1e:52:3f:a8:78:e9:cd:a7:51:3c:87:1e:2a:9f:d0:
ce:34:24:a8:62:b7:30:9c:1d:ef:77:64:05:96:60:69:a7:49:
e1:25:e4:98:41:ae:c5:35:90:5e:81:62:f9:cd:48:4f:e2:da:
5a:8e:d1:25:cc:a2:33:57:bd:01:82:08:61:09:d3:66:87:8e:
d5:3e:4a:6b:c7:d7:28:01:2b:66:16:9c:ad:69:1b:b5:2e:84:
b3:3c:7d:70:39:ae:98:52:0c:b4:a3:7a:97:2a:53:48:98:a3:
c4:c9:ec:92:00:e0:b5:8b:01:d3:4d:1b:e7:03:3d:c4:73:c3:
bf:c2:02:d8:19:8e:81:d8:a5:5f:72:35:f5:b2:fc:ba:4a:04:
9b:03:81:13:61:0e:ae:78:fa:db:55:6b:d5:9c:c7:14:b1:3d:
be:4b:72:07:f6:cd:40:69:d4:60:8e:24:26:0a:08:1e:fa:c6:
cf:e7:3c:c8:c2:4d:81:37:80:22:64:3b:60:a8:95:da:fb:b4:
e4:b8:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:24 2025 by rpki-client