This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft
File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json)
Hash identifier: K6xR8Cc1TaG4cU+Ln/eVXCPZ4VdZ958UsqQQb0HR1wI=
Subject key identifier: E9:F7:E7:EC:0E:84:A1:76:6F:41:F6:E5:A9:B6:3F:02:12:F0:87:23
Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A
Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A
Certificate serial: 72AE6ABB2EAD941645ADF7CDC49CA009819F1770
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft
Manifest number: DF
Signing time: Sun 07 Dec 2025 15:10:00 +0000
Manifest this update: Sun 07 Dec 2025 15:05:00 +0000
Manifest next update: Thu 11 Dec 2025 01:24:00 +0000
Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: 1ziFf/l8wFGVJ/wdjbSvVmlh3wiwUqPb1FE4Ubo2TcY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl
rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ae:6a:bb:2e:ad:94:16:45:ad:f7:cd:c4:9c:a0:09:81:9f:17:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A
Validity
Not Before: Dec 7 15:05:00 2025 GMT
Not After : Dec 11 01:24:00 2025 GMT
Subject: CN=E9F7E7EC0E84A1766F41F6E5A9B63F0212F08723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:ed:d2:9a:5d:df:91:e2:24:b9:79:38:8a:
a7:16:5a:5e:76:99:ed:64:91:9b:cb:51:d4:cb:33:
d1:b2:42:7f:20:a6:27:e3:a5:a8:b8:23:c0:e6:cd:
06:51:cb:f5:ed:bf:da:02:0e:b3:da:27:f7:e7:37:
af:d7:0e:b1:ee:8c:0f:bb:7c:1b:a5:bb:73:22:08:
68:2b:d9:e7:3b:ed:4f:60:ee:ec:6c:49:07:ad:3d:
a2:65:8c:89:b8:8a:f3:4b:79:c1:53:2d:7b:5a:68:
e7:f1:65:61:39:bb:1f:51:7b:0e:dc:19:9e:6d:87:
92:23:2b:50:3b:db:35:54:3a:65:7b:d3:ea:d2:61:
15:5a:76:a1:a0:78:0c:b3:47:a7:44:90:1f:0c:c9:
6c:a7:84:00:7c:25:5d:eb:0a:b5:9f:06:b1:19:9c:
71:dc:54:41:b0:67:3e:65:10:2a:3c:40:d0:d2:21:
1d:e1:47:53:21:24:1c:0f:8e:3a:b8:2c:e4:64:d2:
9d:7a:e8:ac:2b:9d:e4:16:cd:9e:43:c4:11:3f:a1:
0f:d2:8b:69:71:29:48:9d:09:27:8e:b1:7b:d6:90:
53:9a:1d:92:98:78:d4:90:8c:8f:cd:26:55:46:f0:
e4:c9:69:6c:bb:7d:d8:88:a1:60:e6:84:d4:7d:30:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F7:E7:EC:0E:84:A1:76:6F:41:F6:E5:A9:B6:3F:02:12:F0:87:23
X509v3 Authority Key Identifier:
keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c0:12:83:85:2e:db:c9:80:37:6e:d7:0d:3d:6b:1e:be:0b:
66:bb:73:a8:04:ac:d0:dc:53:0a:42:fb:60:28:8f:9e:a3:fa:
9c:1b:bd:d5:ef:8e:98:9d:19:9d:79:d0:de:22:21:f0:5b:95:
4a:76:70:b0:c6:9a:3a:09:eb:2c:94:22:a8:11:a1:85:dc:0a:
11:17:48:cc:10:9d:00:92:08:cd:a4:60:be:7a:8c:f5:40:ba:
f3:62:34:1a:1a:be:db:90:25:80:a9:ff:8c:de:3a:99:28:3f:
55:1f:27:d1:1a:de:9e:34:8b:1c:ce:8c:47:bc:cd:a3:19:7d:
be:1b:c6:a1:b7:5e:84:13:d8:7b:b8:f1:96:d1:54:7a:e8:58:
23:ab:8b:63:de:5e:7b:6b:89:f0:0c:b0:d9:36:29:40:b1:9f:
f8:b0:64:c7:16:64:d8:6d:dc:a2:53:b8:5f:4c:c1:b7:14:72:
24:83:b4:16:e5:e4:e1:d4:32:52:d0:02:fb:6c:9c:a0:18:48:
68:d0:24:14:a1:6f:2c:f3:01:75:45:fd:56:b3:b7:f8:80:82:
4f:66:aa:a2:64:91:f8:a2:4c:b6:3e:42:ac:24:cb:ad:fc:f0:
c1:8d:bc:60:02:59:49:18:fa:3b:2f:c1:cd:b8:50:99:ba:93:
cb:df:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:56:11 2025 by rpki-client