This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json)
Hash identifier: 2Ti89WF7UukfMucpK074oMv56bqSCL1xoknXhdklVyk=
Subject key identifier: EF:99:9B:04:8F:63:18:54:F8:ED:6B:11:93:F4:BE:2E:19:79:27:5D
Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
Certificate serial: 36AA4411ED01E3697C2E07A0BA9472ED93B7E82D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
Manifest number: 048C
Signing time: Wed 17 Dec 2025 23:20:00 +0000
Manifest this update: Wed 17 Dec 2025 23:15:00 +0000
Manifest next update: Sun 21 Dec 2025 04:00:00 +0000
Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4=)
2: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: R60nVEnKQK0qP1uaEII42x8X64D5/W4RAZXbBMQa5RA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl
rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:aa:44:11:ed:01:e3:69:7c:2e:07:a0:ba:94:72:ed:93:b7:e8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
Validity
Not Before: Dec 17 23:15:00 2025 GMT
Not After : Dec 21 04:00:00 2025 GMT
Subject: CN=EF999B048F631854F8ED6B1193F4BE2E1979275D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:f3:e0:31:4a:01:98:ce:af:6e:5c:c3:18:
5c:8d:aa:2b:5e:3f:5d:a3:65:5b:0c:ea:08:9f:d3:
fc:a0:70:66:df:b0:8e:ff:52:43:f0:ea:27:4d:89:
a8:8a:35:44:75:9b:e9:87:4d:d4:d4:b1:4b:27:9e:
83:c7:43:21:82:68:43:58:f9:30:80:c8:f1:0e:d1:
d4:7f:38:e4:3d:75:cb:a3:6a:82:4f:bd:68:25:8e:
5a:3e:d0:7a:b5:d2:d4:6f:88:81:ce:4d:50:8e:69:
fc:77:c5:10:18:d1:ab:e1:71:2a:96:97:23:5f:70:
e4:b7:ab:fc:5a:05:6e:a1:5f:bb:13:4e:2f:9d:eb:
5f:1a:53:4a:6c:ee:10:a0:de:68:3c:9b:80:0b:2b:
8b:f4:3c:3a:16:a5:a7:40:39:ec:0f:05:33:bf:9d:
9f:6d:d7:0c:65:a6:a8:d3:58:b8:96:92:12:90:6d:
9d:65:16:3d:ca:cd:f3:a9:19:60:e6:da:e1:ef:0f:
4a:44:6f:23:61:59:90:df:c4:96:d5:f1:ba:79:2e:
62:30:bc:4f:d3:f5:cc:2b:3f:35:f7:53:7b:6e:86:
4f:60:00:37:ed:94:1a:9c:99:78:da:a3:df:f9:d8:
dd:74:a9:dc:20:e6:8c:aa:1b:3c:27:4e:1f:5d:1e:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:9B:04:8F:63:18:54:F8:ED:6B:11:93:F4:BE:2E:19:79:27:5D
X509v3 Authority Key Identifier:
keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:f5:cd:4b:d1:e5:92:f7:b8:6f:fc:a7:30:de:9d:44:cb:
19:4d:d5:5a:c9:59:21:ab:2c:6f:bc:78:3d:5f:54:cb:d2:4d:
76:5b:12:5c:a9:e0:df:b1:24:81:15:1c:ed:af:75:05:46:33:
65:e8:3c:4e:20:d8:d3:44:17:bd:b7:5e:8b:89:e0:2b:c5:bc:
02:60:2e:77:77:ae:fc:4e:68:c5:0e:ea:43:f1:23:45:53:07:
0c:1e:10:10:60:c7:4f:3a:de:48:4b:68:89:a2:30:d8:d2:4c:
8c:83:03:a5:ef:5c:fa:c6:0a:45:02:72:da:17:15:23:a1:ad:
95:f5:fc:56:01:67:c6:a7:46:17:2e:5a:72:b3:0c:66:28:36:
81:38:64:fc:81:a2:8c:bc:29:3d:bf:02:26:5a:2f:0a:6d:0f:
c3:50:62:14:7e:64:b7:cd:00:10:42:e2:72:9a:fe:3c:b5:b0:
6d:cc:17:0e:95:01:66:d0:73:dd:da:35:53:3c:8c:17:15:c9:
f3:90:7e:73:62:39:5c:50:6c:04:9a:df:30:82:1b:ec:32:85:
3a:b6:75:2e:15:87:8f:81:b4:21:6b:86:7a:1d:6b:5f:e2:47:
6c:a7:ac:7c:50:2a:82:f0:23:ce:22:97:92:24:aa:2c:f8:2a:
ba:f8:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:37:53 2025 by rpki-client