This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json)
Hash identifier: W6bJWrMkXPAD19c0WTmRlGT1y19VgrF4701uEu3f5aI=
Subject key identifier: 22:0B:EE:83:C3:5F:2A:BA:6A:2E:D2:19:53:F6:D3:08:ED:CE:7F:87
Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Certificate serial: 284D5AD6A20CDFECBC7FDD2DDE6C0661D5586C51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
Manifest number: 0531
Signing time: Tue 02 Dec 2025 23:42:00 +0000
Manifest this update: Tue 02 Dec 2025 23:37:00 +0000
Manifest next update: Fri 05 Dec 2025 23:58:00 +0000
Files and hashes: 1: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: gIKkIGkZm7OxQ7k8KYXU1OguRf76El1DoB7NPk29hSo=)
2: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: PpwdW1Sh67VcI29Rs6SsVeiTKG/TdkizTmZ0n4tpRMU=)
3: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: mC7pHV7NYsbpeeW0ZP+ibU3Ewbq2p4OfCkZ3LiVxhX4=)
4: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: YihHTOoSh3htXl8Oxb8JRY8AWjyAVmix8TlWAly2uyM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 23:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4d:5a:d6:a2:0c:df:ec:bc:7f:dd:2d:de:6c:06:61:d5:58:6c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Validity
Not Before: Dec 2 23:37:00 2025 GMT
Not After : Dec 5 23:58:00 2025 GMT
Subject: CN=220BEE83C35F2ABA6A2ED21953F6D308EDCE7F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:65:f5:ea:93:6f:00:c1:42:ec:c7:74:3c:
33:86:12:f2:a9:96:54:0e:3a:e2:ae:82:ed:41:a5:
9a:19:80:53:bc:dd:34:8d:5a:94:f0:ef:9f:08:9f:
a9:32:b7:b6:41:63:99:97:77:a4:4d:6e:e9:7d:e3:
8c:cc:73:75:87:ba:51:bd:50:da:72:8f:a1:a4:56:
02:56:25:96:0e:bf:63:cc:cb:42:2d:a1:77:cf:9e:
48:c9:34:a6:6d:1c:70:e7:19:4e:ba:12:84:9a:21:
b6:bb:6a:17:9a:f6:38:a5:63:b0:14:00:88:1f:a4:
d0:4b:a1:2e:ad:69:ed:e6:1b:22:e1:6b:1b:04:e2:
7c:4f:7a:6f:5d:a8:c1:f6:42:f4:f3:07:84:e9:4f:
f1:74:f3:96:9e:bb:74:5b:4d:fb:2d:31:0a:54:04:
8c:ed:ba:b5:2d:a6:57:a7:ad:54:33:01:5d:fe:63:
ea:ad:20:af:f3:25:af:2d:51:9d:3a:9c:88:60:df:
d9:ec:76:8b:69:a8:ec:b2:6f:76:cc:dd:87:50:f3:
4d:f2:ae:95:84:a1:23:24:d9:bf:ce:00:5f:83:df:
76:41:a6:d0:7f:ad:dd:82:a7:d4:32:16:8c:d3:77:
70:89:77:b4:f1:b2:8c:f6:7c:ae:8a:8b:b6:c3:e8:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:EE:83:C3:5F:2A:BA:6A:2E:D2:19:53:F6:D3:08:ED:CE:7F:87
X509v3 Authority Key Identifier:
keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:23:09:36:91:93:04:10:3d:d8:ac:13:02:c8:08:5c:a4:b9:
f9:66:21:d2:aa:4d:93:52:0c:4e:ee:e4:cd:f4:65:b4:66:ad:
24:da:c8:35:b1:ce:8f:92:5d:dc:a4:89:a5:04:d9:08:07:03:
5b:7a:1e:2b:55:55:86:1d:c7:b0:c3:20:46:b7:e7:c1:9c:48:
35:29:62:8b:38:cf:05:76:06:78:f0:c7:da:5a:2d:5e:d8:61:
b5:96:23:7f:ef:50:53:5e:2a:c6:6d:02:d7:e0:ad:cf:c1:d9:
19:b5:ec:2b:de:d1:10:0e:1c:a9:58:6f:5d:aa:50:ee:47:5a:
1a:e7:d2:00:e4:43:74:f1:6b:70:05:61:57:c2:e9:81:7f:de:
17:ea:b4:0d:38:04:ee:62:1b:35:52:32:cd:40:16:1c:1a:ff:
b3:b8:5d:e1:3a:c5:9b:8d:d3:5a:30:6b:c2:c4:a9:25:a0:6f:
c3:8e:c6:00:4b:a9:e0:5a:df:39:82:65:2c:b5:d4:44:b9:f5:
f0:d5:13:57:24:10:4c:7e:22:d3:8f:18:cf:27:ec:07:fe:9e:
df:ae:ac:89:ad:6d:68:17:0d:7d:db:3a:65:05:25:00:ef:59:
dc:8e:c1:cd:6b:f0:a0:37:0e:64:31:b6:10:10:ea:1a:c9:33:
1b:e7:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:14:34 2025 by rpki-client