This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft
File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json)
Hash identifier: MXRbGJcto3t0aGipyHU+mga/0mA7eDCWg/ilnr/BrIo=
Subject key identifier: 97:1F:75:28:78:3E:5C:88:81:4A:8A:48:40:AE:17:A5:0B:F8:2D:1C
Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F
Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F
Certificate serial: 4A91986E931AECDD58B63CCC65906DD3F412CD5A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft
Manifest number: 022D
Signing time: Tue 02 Dec 2025 01:31:10 +0000
Manifest this update: Tue 02 Dec 2025 01:26:10 +0000
Manifest next update: Fri 05 Dec 2025 04:42:10 +0000
Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: COOtWh2b662oUEB6bIfgUvXtfytLl+L0qUA4yTCly2c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl
rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 04:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:91:98:6e:93:1a:ec:dd:58:b6:3c:cc:65:90:6d:d3:f4:12:cd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F
Validity
Not Before: Dec 2 01:26:10 2025 GMT
Not After : Dec 5 04:42:10 2025 GMT
Subject: CN=971F7528783E5C88814A8A4840AE17A50BF82D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:29:00:df:96:ad:ea:2b:69:6c:cc:d0:25:
6d:54:93:1d:49:01:3e:6b:90:12:b7:dc:ff:4e:b7:
c2:23:26:4e:b8:14:2b:47:96:0d:45:d9:84:0e:d4:
cc:5a:94:d3:c7:fd:45:22:39:9e:35:65:96:0d:c2:
1d:2a:33:f5:43:c3:d4:89:17:12:46:74:03:67:0e:
a6:47:98:6a:06:a5:e8:7c:83:cd:8c:f7:eb:9d:39:
89:35:2f:32:a8:26:8c:36:10:40:cf:bc:d2:58:20:
31:04:20:21:72:df:e0:c1:36:1e:eb:fa:ba:06:02:
35:25:ac:17:17:66:ac:53:fb:79:7a:8c:14:22:af:
60:56:f3:58:a6:fc:f2:6a:54:c8:e0:5c:e5:56:39:
a5:1b:d1:76:de:5e:eb:8c:e2:96:bf:8b:13:4e:4d:
d2:62:c5:b8:92:48:bc:a0:09:02:53:07:f5:6b:aa:
eb:8f:e9:43:90:c5:ab:35:cf:9c:88:24:a6:95:03:
43:4c:c7:c8:68:c5:05:c0:e5:4a:42:9f:e3:73:7f:
46:2a:90:6a:6c:74:47:20:3b:0f:af:8f:d3:52:62:
1b:82:11:2b:70:89:20:ba:07:d3:bd:cc:44:39:1f:
7d:50:a3:90:d6:b7:34:56:3c:30:41:2d:f2:4f:0b:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:75:28:78:3E:5C:88:81:4A:8A:48:40:AE:17:A5:0B:F8:2D:1C
X509v3 Authority Key Identifier:
keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:af:52:7c:ba:19:11:f2:f6:1a:af:7d:ac:c9:74:fb:75:
49:e3:4f:c5:13:43:27:b5:af:a6:df:c8:bb:f8:48:6c:49:8a:
9d:b2:54:f3:73:e3:9e:1a:63:fa:d3:bf:a0:6e:a9:a4:6c:04:
be:a3:63:16:8a:8c:c4:a8:24:6f:8f:71:1b:3f:37:b6:21:ee:
d6:df:6a:0e:ea:88:83:8b:51:4f:b7:9d:ea:4b:ef:d5:0a:40:
fb:cf:0d:2a:65:58:e6:a8:e6:e8:5f:18:dd:28:53:4e:2e:92:
41:14:4b:a2:ff:48:a1:13:a7:58:fb:f1:93:48:a9:c0:92:bc:
8e:1d:59:8a:9e:bb:89:ec:c9:1f:5f:06:69:89:a4:91:37:ad:
a8:a3:38:e3:4c:fd:46:c8:7c:41:f7:0b:cf:27:ec:01:6b:69:
47:0f:c8:b4:14:9e:61:67:0d:51:ea:dd:03:c0:6c:3b:31:56:
1a:77:3c:4c:f3:e2:1e:0a:7a:a3:9e:e8:4e:5e:fb:e2:10:d2:
5b:e2:c1:bd:ee:66:cb:ab:6d:d7:48:a9:7f:e4:22:1a:a0:74:
2c:82:51:7e:6b:53:45:7f:23:12:00:30:ec:3a:13:25:fb:19:
60:3a:da:eb:65:3b:94:4a:19:f5:55:6e:4a:10:0e:ee:58:90:
0d:27:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:53 2025 by rpki-client