This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json)
Hash identifier: rLpLhPfl6DlOo3Mp0rp8aQ+FgRvPZpH6m4QeUp4Smp8=
Subject key identifier: 14:81:3E:1A:F7:80:83:B7:33:F9:4F:8C:BF:C4:0C:9C:16:84:5F:AD
Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Certificate serial: 43430BEA973FBF92DC2CDEFD00FDC661394367FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
Manifest number: 052F
Signing time: Tue 02 Dec 2025 22:52:22 +0000
Manifest this update: Tue 02 Dec 2025 22:47:22 +0000
Manifest next update: Sat 06 Dec 2025 08:06:22 +0000
Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: f6mBmBOmWo+2HtTjAZaGwW5XmgbAOHTNF9/UbquUpjQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl
rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 08:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:43:0b:ea:97:3f:bf:92:dc:2c:de:fd:00:fd:c6:61:39:43:67:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Validity
Not Before: Dec 2 22:47:22 2025 GMT
Not After : Dec 6 08:06:22 2025 GMT
Subject: CN=14813E1AF78083B733F94F8CBFC40C9C16845FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:72:43:89:36:fe:f0:2f:25:fe:89:34:74:
b4:6a:2d:3e:62:cb:17:cd:c7:06:21:57:e7:c1:4c:
06:27:57:4a:ce:38:64:19:99:1a:ca:84:19:89:ca:
60:17:b4:40:3d:58:ec:da:33:26:f7:9a:ab:ce:61:
a0:fd:9e:38:02:0c:de:4e:aa:9c:cc:d0:ef:93:f8:
56:d2:2c:5f:4a:ca:26:3e:f7:ab:9c:8c:42:37:11:
65:6a:cf:8b:89:09:15:9b:25:34:d8:f3:37:ee:d9:
49:76:46:94:0a:71:ca:2e:82:ba:1a:ef:4b:c2:64:
f0:aa:85:1b:b4:e4:65:ba:3e:d5:9c:3e:a6:ac:38:
6a:25:c1:dd:81:ab:14:00:0e:ce:f0:77:73:29:58:
e1:ab:a0:46:95:d7:01:de:8a:e5:54:87:a7:f2:56:
c6:40:39:55:b9:fc:a4:89:65:f3:fd:13:6e:46:52:
4b:eb:a4:fa:20:8c:4b:00:0c:a2:2a:78:d6:72:10:
1a:c1:a5:e2:63:86:d0:c5:db:89:79:3d:2b:88:93:
43:b1:b6:c0:73:98:84:c2:91:75:ca:79:ce:87:46:
ab:bf:75:b6:cd:15:fd:25:f4:d1:67:0f:dc:a0:0e:
9e:bb:f0:ca:24:40:82:12:50:06:85:64:be:6e:df:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:3E:1A:F7:80:83:B7:33:F9:4F:8C:BF:C4:0C:9C:16:84:5F:AD
X509v3 Authority Key Identifier:
keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:61:b5:c4:56:a5:b5:1a:cd:e0:e2:8e:32:b3:2f:7b:18:7b:
24:92:95:30:66:b7:39:73:72:01:9e:97:3a:87:10:8e:a7:76:
cc:e5:47:d1:a5:53:2c:40:ae:08:72:bc:82:96:88:02:f5:5a:
02:43:f2:9b:87:84:04:bb:33:cf:56:a1:2a:dd:80:b9:ff:9e:
ee:40:d2:3d:73:a3:4a:22:54:f3:f2:e5:b3:25:5c:34:fd:60:
dc:f6:44:e8:db:d3:ee:b5:20:cd:1f:11:9c:62:8e:a6:0d:4d:
d6:df:45:13:c9:38:e1:fc:aa:c9:1e:28:82:7f:80:85:61:bc:
9a:a6:01:53:e9:99:6a:66:4b:03:2f:83:09:13:72:9f:6c:08:
a8:53:79:31:bf:5a:21:c7:e2:a6:85:fa:8a:ea:9d:21:03:89:
58:f1:47:64:0d:63:12:e1:e6:e2:b9:68:b0:f4:78:c1:79:14:
74:ea:7d:9b:90:c2:a1:00:ad:d9:96:18:78:54:a0:17:07:ca:
ee:22:08:c8:39:c4:3d:50:be:2e:f8:9e:ef:b4:35:b2:da:aa:
b1:d6:fc:a2:95:23:c6:c4:94:da:a4:da:4d:77:ab:5f:e8:1e:
7d:f7:8d:1e:56:99:72:8e:2e:65:37:7b:6e:36:d1:d2:da:0f:
bd:96:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:29 2025 by rpki-client