This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
File: 4515472806DD01B59715410103D51C05E4F28B96.mft (raw, json)
Hash identifier: 9pWBb8kPnhUSLftkrjCL55ngYX3ySQt+hnHmBYBfzCU=
Subject key identifier: E1:86:E1:D1:28:22:35:30:32:43:9E:C0:5C:76:F3:D6:70:22:20:C1
Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
Certificate issuer: /CN=4515472806DD01B59715410103D51C05E4F28B96
Certificate serial: 742749D0C0A8068C51A238721EA06BE50019138C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
Manifest number: 0256
Signing time: Tue 02 Dec 2025 04:42:05 +0000
Manifest this update: Tue 02 Dec 2025 04:37:05 +0000
Manifest next update: Fri 05 Dec 2025 05:32:05 +0000
Files and hashes: 1: 4515472806DD01B59715410103D51C05E4F28B96.crl (hash: mhc65myQoPEopqDW+GrHz87G/HFv8XKypbc3A1nkQNQ=)
2: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: vRlgOXUVxZU3L35iv5K0e1tNJbS3jxz2tstDvvGIpOA=)
3: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: Tu/lmXG1SR10FA6Mlg+q8BJ0wAM8BZdiNc8TMtD2S9s=)
4: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: HBcmtBf124LaJLrEpyA0+OcG5c4rLC3yDarVnj9n8nQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 05:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:27:49:d0:c0:a8:06:8c:51:a2:38:72:1e:a0:6b:e5:00:19:13:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96
Validity
Not Before: Dec 2 04:37:05 2025 GMT
Not After : Dec 5 05:32:05 2025 GMT
Subject: CN=E186E1D12822353032439EC05C76F3D6702220C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:13:13:f7:3d:f5:46:b0:79:95:9e:d8:55:
69:21:79:f6:b5:2d:eb:aa:a7:7a:13:47:2a:13:87:
d0:2c:e7:db:e3:b6:6d:a2:63:90:30:3b:9d:da:b8:
3f:cc:7d:eb:35:56:c7:2d:b4:60:5e:e4:d9:94:8a:
29:43:17:f3:0b:38:63:3c:35:a4:9b:12:36:41:70:
0a:db:bc:65:32:ee:e8:91:7c:68:34:0f:7b:92:4d:
90:f0:7c:66:cb:fc:41:c2:32:e2:f3:16:90:57:f7:
99:9e:14:c7:2b:11:6f:da:c6:f9:9a:3b:bc:1e:c6:
11:07:43:e9:9e:19:d9:65:8e:97:e5:4f:c8:89:11:
f9:e5:fd:ae:63:ab:16:e9:33:14:5e:b5:40:59:b2:
56:5e:0b:2d:b0:48:50:8d:a0:03:a1:74:c5:68:39:
8b:45:7e:c1:f9:75:a5:31:03:68:be:90:98:07:a0:
ea:d4:76:f4:b8:4c:e6:57:9b:e8:e5:7e:48:24:fc:
12:4b:a4:5f:ad:27:1e:85:cf:11:dc:02:83:ad:a4:
7d:39:8b:cf:3c:e8:a7:41:ce:65:96:1e:3e:2a:f3:
b0:8c:f0:30:1a:e1:56:85:02:d9:19:2e:46:78:92:
14:d7:32:84:c3:94:27:da:06:0f:05:a5:68:21:bd:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:E1:D1:28:22:35:30:32:43:9E:C0:5C:76:F3:D6:70:22:20:C1
X509v3 Authority Key Identifier:
keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b3:ea:d7:22:e8:fc:ed:f3:aa:8c:72:23:ab:33:50:a1:a0:
5a:bb:f4:32:d8:7d:33:70:c7:cc:9c:09:df:16:92:30:66:e1:
c8:fd:b1:ba:9b:7c:f6:8d:84:17:d9:50:7e:8c:4a:5e:d8:bf:
29:1b:4a:99:5c:46:73:17:3e:35:47:a3:8b:94:25:a9:4f:8d:
6a:1d:9d:c1:df:dd:eb:dd:8a:80:c4:83:93:5a:8d:3e:b8:98:
18:ae:bf:01:a5:56:34:ec:1c:ce:12:50:80:df:bc:3b:6a:9d:
2a:60:74:46:6d:e6:b4:b6:9f:13:25:13:44:d3:4d:80:d8:70:
0d:c0:b2:3a:33:b5:54:43:21:f0:c6:09:82:c2:e3:3a:5c:9c:
86:e9:28:5a:8a:07:b5:99:8e:9f:ee:78:26:a3:e4:38:ef:d5:
2e:aa:04:f6:69:24:d5:a7:8d:49:d3:da:0d:1f:98:fa:b8:e7:
91:96:1a:e5:f7:1a:4e:68:9e:a8:8a:46:7b:94:1c:c5:2b:fe:
86:04:43:2e:1e:dd:21:7b:ac:21:f9:86:57:36:de:b5:7c:10:
d4:e6:a1:76:3e:f3:e6:eb:bc:c6:6f:98:cc:75:5d:b5:3c:21:
2a:9a:36:26:0a:ab:0d:0b:01:f1:de:01:52:83:ca:fa:25:81:
19:f8:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:06:56 2025 by rpki-client