This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft
File: 7701FBF4A9C9B559888F02656447A3AA1963811C.mft (raw, json)
Hash identifier: p9CzQjK3V4KSLUD+3llAfqYihgkxsTpdEaBQrvwWEaA=
Subject key identifier: FF:92:6A:79:67:F4:37:15:D5:3C:8C:AE:81:F6:2B:C7:91:19:C6:4F
Authority key identifier: 77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C
Certificate issuer: /CN=7701FBF4A9C9B559888F02656447A3AA1963811C
Certificate serial: 6E27B5CB1E35D0A26221E43D87A0B7F5EF9FA3FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft
Manifest number: 0201
Signing time: Tue 02 Dec 2025 17:31:15 +0000
Manifest this update: Tue 02 Dec 2025 17:26:15 +0000
Manifest next update: Sat 06 Dec 2025 02:52:15 +0000
Files and hashes: 1: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: tgAxo2PkCLcwRQp+/tf9sxvBS4Sl8uCrZgT8LdPuiis=)
2: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: nH1oMcdoDvuHP/DwzkTAyZckDG1Pwn9g7DHCrhDPMiw=)
3: 7701FBF4A9C9B559888F02656447A3AA1963811C.crl (hash: j9/SljtqF5/Q7nbzeHBJQ+3WwUifP7liQ+YHWPL2uB4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl
rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 02:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:27:b5:cb:1e:35:d0:a2:62:21:e4:3d:87:a0:b7:f5:ef:9f:a3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701FBF4A9C9B559888F02656447A3AA1963811C
Validity
Not Before: Dec 2 17:26:15 2025 GMT
Not After : Dec 6 02:52:15 2025 GMT
Subject: CN=FF926A7967F43715D53C8CAE81F62BC79119C64F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:57:0d:95:e4:79:03:dd:a6:de:58:5b:a3:
32:7c:b8:ac:cf:b0:45:ad:05:38:37:97:92:8f:d3:
69:7b:fd:fa:ef:c2:6c:3c:50:6c:43:4d:37:33:a8:
ec:21:48:c1:b5:6e:03:53:d1:7a:57:30:0e:d5:16:
77:19:32:c0:38:ef:f4:7c:39:44:b1:9c:72:04:1d:
e9:2c:62:0a:3a:41:06:4d:ed:41:b9:cd:22:ee:e0:
16:3c:f3:73:ff:a2:17:4e:3e:42:09:4c:6b:2c:67:
c3:95:72:c8:0d:d7:ec:93:d6:ba:2b:e5:1d:5e:d9:
98:b3:70:35:71:5c:02:46:2b:a7:1b:26:a1:dc:c6:
4a:98:71:95:f9:46:59:a4:6a:90:4e:8e:c5:e7:8b:
7e:8f:a1:91:c9:89:52:ab:92:ab:f1:e8:ac:88:94:
74:e3:b4:29:cc:2d:bc:ad:d7:27:0f:e2:3b:2c:54:
4d:57:bb:17:92:ea:72:50:53:87:95:02:ff:60:63:
87:40:89:63:67:a3:18:91:95:d8:f9:de:aa:95:ed:
0c:5e:84:05:44:2e:5a:75:5b:7f:9d:41:dc:f1:e0:
ea:ec:70:72:89:ed:6a:67:05:62:37:e6:b2:ae:8f:
ff:7b:09:ff:01:9c:08:9b:1e:39:66:0a:56:56:78:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:6A:79:67:F4:37:15:D5:3C:8C:AE:81:F6:2B:C7:91:19:C6:4F
X509v3 Authority Key Identifier:
keyid:77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:03:2a:2e:e9:58:e1:32:0c:da:a9:9a:1e:49:f1:11:03:
74:b3:d6:0f:de:2f:45:aa:63:9f:4e:51:84:a2:b1:b3:18:68:
9f:14:9a:1b:3d:37:96:6c:fb:79:92:18:65:5a:6a:84:f7:d9:
e6:6b:ef:49:51:13:8b:11:6e:97:2a:b1:cc:29:23:df:0a:04:
50:fa:01:aa:51:0c:17:4a:34:d2:cd:7b:6a:b5:27:ea:24:36:
dc:43:aa:1e:d2:94:d4:a2:09:9a:16:af:89:fa:bf:14:91:ff:
7d:cb:c5:68:08:62:e7:6d:8b:cf:ad:ff:c3:4e:7e:e1:08:26:
f7:06:a0:5e:2a:1c:63:56:29:b2:3b:66:4e:e9:8c:f7:fa:d9:
93:36:f8:c7:d3:2b:93:61:20:71:38:04:05:11:75:0b:c6:ea:
b0:4c:97:83:5e:27:47:d9:5c:c3:32:44:5a:c9:37:e9:e5:28:
99:3c:8b:5c:7f:bc:6b:cd:af:e1:1d:78:66:f7:38:52:29:a5:
30:94:a9:23:2b:c8:c2:5a:27:3d:08:3a:d9:97:a6:64:26:a0:
94:72:08:48:d6:5e:8d:c8:98:c3:5c:cb:17:2d:1f:b8:89:df:
3f:fb:27:9f:cc:3b:da:76:fb:92:3c:0d:e1:57:a7:15:7e:e1:
0b:03:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:59:52 2025 by rpki-client