This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier: y+QYE66Sqj4eLDvATERm9KalhmCuClt9aD+krYtxv4E=
Subject key identifier: A2:29:77:C3:A9:19:72:80:DF:B2:E4:69:D0:C5:0D:5A:79:88:D3:2C
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial: 0138531DF97C32EF3D9D681A6036CFE5EF038EBA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number: 0193
Signing time: Tue 02 Dec 2025 01:11:15 +0000
Manifest this update: Tue 02 Dec 2025 01:06:15 +0000
Manifest next update: Fri 05 Dec 2025 01:12:15 +0000
Files and hashes: 1: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: vNj2u5YQ2vjbwVmtcViVGeq3kgjdfKg/+gGTIie1b7U=)
2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=)
3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 01:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:38:53:1d:f9:7c:32:ef:3d:9d:68:1a:60:36:cf:e5:ef:03:8e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Validity
Not Before: Dec 2 01:06:15 2025 GMT
Not After : Dec 5 01:12:15 2025 GMT
Subject: CN=A22977C3A9197280DFB2E469D0C50D5A7988D32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:ee:70:fc:29:37:d6:a2:ce:1b:cd:44:7c:
45:d5:13:6e:e7:0f:19:59:5e:ae:ea:68:7f:9b:ad:
a9:51:17:2d:0d:1b:1f:25:d1:b3:c7:0c:55:8a:3c:
8c:fd:34:08:70:04:bf:32:a3:a8:ff:3f:22:fb:97:
5a:0d:5c:f8:18:df:5f:c0:ed:e9:ab:c4:7d:56:2f:
44:cd:e3:dd:44:40:51:02:0e:99:d5:20:69:a8:38:
a0:65:ad:04:ff:04:f4:bb:5a:f5:42:40:04:71:c2:
e2:b3:75:87:c9:88:63:35:ef:49:20:ba:a0:ec:4b:
1d:dd:67:56:29:16:18:a7:cc:ec:e3:06:1f:c1:d0:
21:1b:8d:95:b2:0d:45:3e:99:07:9f:bc:bb:63:b6:
eb:da:6b:e0:38:85:33:94:e2:b5:99:ca:fe:89:f8:
78:ee:95:13:6b:5b:61:fd:3e:dc:e3:5a:e9:cd:48:
da:73:0a:f9:92:d1:71:41:0d:88:85:fb:78:ab:7a:
35:f6:e9:b1:fa:b2:94:c2:6b:9d:9e:86:2d:a5:74:
48:ea:01:93:de:f6:ff:09:70:97:27:20:8f:df:71:
89:f3:3a:52:a1:14:62:c8:b0:ac:a1:45:1d:ef:a9:
a2:32:e6:3b:46:41:91:3c:32:28:c4:44:d6:97:73:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:77:C3:A9:19:72:80:DF:B2:E4:69:D0:C5:0D:5A:79:88:D3:2C
X509v3 Authority Key Identifier:
keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:28:3c:ef:27:aa:1f:c7:50:d4:a6:b2:42:71:10:4a:a3:b3:
ee:2b:b3:f0:c1:af:46:f0:aa:aa:32:df:83:7d:bf:45:13:36:
b0:9d:a2:92:f5:1e:f9:b7:69:d8:93:2e:db:a3:f1:a5:8e:8f:
dc:0b:dd:46:0f:12:fe:22:a0:b7:5a:e5:67:fe:4b:07:8f:cf:
a7:69:1f:d8:6c:25:c4:b9:66:01:9f:c4:f4:02:e4:0a:dc:80:
b9:37:9b:37:43:6b:09:6f:a4:29:4e:64:74:23:39:93:1c:a1:
b3:00:81:04:6d:96:45:69:25:f3:d2:ab:1d:c9:d0:77:53:7a:
e1:ea:74:70:ad:3c:0a:7d:0c:37:9f:99:f0:e9:f6:11:09:5b:
93:b2:87:31:4b:11:26:53:09:d6:0f:0c:d4:15:98:5a:67:41:
14:af:d6:85:c1:85:11:48:c7:4d:ba:a7:b4:3f:88:8f:69:a4:
2e:3f:bd:d1:cf:21:e1:be:bf:66:03:f7:97:aa:02:2d:f6:4a:
8b:d1:5a:6a:93:21:d5:ca:53:9a:ce:b3:b3:08:b7:92:ef:e2:
b2:8d:53:2e:9b:8d:41:2d:03:c1:b0:5d:39:8f:e5:57:bd:3f:
a2:b7:ed:6f:13:24:1e:01:24:ab:d0:db:7f:ea:36:06:ca:c1:
e1:92:f4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:15 2025 by rpki-client