This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json)
Hash identifier: RdisdDt4hAMdc7KOcQSTFxWB2GUmvDLO6/28rSTflvA=
Subject key identifier: 83:57:2F:52:36:81:F0:9E:DF:E9:F2:D1:30:9E:21:B9:2E:54:F5:18
Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Certificate serial: 19CC33225A1EE0DBF3743FED4914B1794A485485
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
Manifest number: DA
Signing time: Wed 03 Dec 2025 10:11:20 +0000
Manifest this update: Wed 03 Dec 2025 10:06:20 +0000
Manifest next update: Sat 06 Dec 2025 17:56:20 +0000
Files and hashes: 1: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=)
2: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: VFU9BCG374emCvjjPQyXXjdnjbVt4W3IIMhmsVV2Nhs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:cc:33:22:5a:1e:e0:db:f3:74:3f:ed:49:14:b1:79:4a:48:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Validity
Not Before: Dec 3 10:06:20 2025 GMT
Not After : Dec 6 17:56:20 2025 GMT
Subject: CN=83572F523681F09EDFE9F2D1309E21B92E54F518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:6a:28:99:2f:76:e3:60:e3:c4:59:01:53:
cc:54:c1:d4:c5:70:25:89:35:73:0b:ba:c7:70:db:
f2:45:26:c1:86:e1:44:5a:5e:3d:79:7a:82:e9:15:
82:de:6f:25:ef:d4:89:be:52:24:bb:15:04:be:58:
00:f2:2c:be:bb:ee:b8:e0:51:a7:e5:af:eb:64:48:
33:84:73:38:cd:b3:db:09:e7:8e:7e:21:9a:3e:60:
b0:72:a9:db:9c:af:99:cf:6a:50:06:2f:52:94:3c:
35:4e:c3:9e:9a:3a:0f:38:20:c3:ba:66:a7:74:45:
f6:0e:c2:be:95:3e:4f:6b:a0:f8:4a:e6:cf:ce:41:
c3:af:7f:7e:fc:50:23:d8:b1:8f:1e:41:9d:19:4f:
d3:93:2a:27:a8:64:7d:97:81:74:37:64:82:b2:78:
a6:e8:a6:d1:8c:db:5b:09:50:2c:36:27:70:c2:ab:
28:38:ea:08:12:00:fb:8f:2a:ca:9a:9c:0e:8c:7f:
fa:83:97:ec:00:fe:20:06:fe:ad:48:10:7a:ce:13:
eb:e4:f4:e2:b1:a3:ae:8a:e7:f9:17:16:be:b4:86:
59:3d:4b:c5:3d:81:09:d1:ab:40:27:ae:4a:22:af:
41:3c:ed:6f:d4:d8:a2:be:59:62:f4:b8:b0:38:a9:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:57:2F:52:36:81:F0:9E:DF:E9:F2:D1:30:9E:21:B9:2E:54:F5:18
X509v3 Authority Key Identifier:
keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:e5:85:0a:22:1a:55:33:da:99:de:c6:85:60:86:87:e3:
6c:4a:4b:71:4d:dc:61:c7:ce:c2:05:92:03:0a:14:3b:f0:9c:
c0:11:36:df:51:68:d9:f5:bb:4b:7a:e7:60:d9:40:00:22:6c:
62:14:e3:05:37:4a:80:e6:31:d5:1f:57:00:c8:68:72:1b:dc:
59:ad:f1:d0:88:98:62:eb:7c:4c:bc:a8:02:19:f2:d1:d2:65:
e3:43:64:32:fd:4b:8e:c3:01:90:34:ae:5d:eb:e4:7b:ee:b0:
db:de:94:6f:4d:a5:ba:56:fc:45:0c:a4:6f:38:ca:67:05:e0:
1d:ba:4b:62:63:09:07:81:a5:5e:eb:c5:e0:ae:15:3d:b8:39:
fc:58:21:22:b5:2f:97:1e:57:be:70:79:4b:58:5c:24:04:1e:
d0:ab:1a:75:a4:d1:8f:26:ed:59:1f:2f:d3:7d:3e:00:df:36:
7c:a6:bf:76:0b:db:e9:13:c2:a6:97:a8:8f:9e:72:a7:55:62:
14:85:8f:ce:30:86:c2:f2:e6:a4:7d:cc:5a:23:ab:b7:3a:e4:
0d:90:87:9e:1e:42:60:c2:8e:e0:36:5a:53:48:d4:d7:d4:7b:
85:b5:f7:67:43:44:6a:d8:7b:f7:0d:d7:39:5e:c9:e1:ad:f3:
f5:77:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:07 2025 by rpki-client