This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json)
Hash identifier: 0luAhOn3iVglwulFmvNg+o4QB/YTTgVhqKYmFi8GbzA=
Subject key identifier: C9:66:1E:4B:27:9A:F3:6E:1B:B9:AB:30:BC:7C:16:2A:27:A2:3D:C8
Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31
Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31
Certificate serial: 3B0B86033F6BFFD92EE9394C98D3CF99525DA3F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
Manifest number: 0258
Signing time: Tue 02 Dec 2025 17:01:36 +0000
Manifest this update: Tue 02 Dec 2025 16:56:36 +0000
Manifest next update: Fri 05 Dec 2025 19:25:36 +0000
Files and hashes: 1: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=)
2: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: +CjzInQYa8qP1BCrnHN3tuc/yTLCetr8BIdDaNB2jrA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl
rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 19:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0b:86:03:3f:6b:ff:d9:2e:e9:39:4c:98:d3:cf:99:52:5d:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31
Validity
Not Before: Dec 2 16:56:36 2025 GMT
Not After : Dec 5 19:25:36 2025 GMT
Subject: CN=C9661E4B279AF36E1BB9AB30BC7C162A27A23DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:4c:20:1f:e7:12:f1:e2:78:51:2b:df:84:
91:5d:a8:22:df:de:31:b2:95:12:ff:fa:53:81:9a:
88:95:eb:9b:d5:24:62:a3:d9:a8:6b:e5:d7:10:5c:
1a:ce:4e:4c:7b:d9:27:f6:5f:44:c9:ad:ae:4c:62:
b0:4f:39:26:5d:10:ca:10:41:9f:1c:d2:c8:4d:77:
fd:75:d9:8e:4a:82:f8:6d:1a:19:a3:64:67:94:bf:
ec:23:26:f7:e2:8c:7c:29:83:a5:e8:88:8a:c9:9c:
45:f9:09:ce:0a:f5:89:04:70:8a:8c:10:17:e9:a5:
ab:fb:7f:e1:e3:52:8e:bd:39:a7:04:da:1b:62:51:
61:55:23:17:4d:37:f4:ee:aa:58:c9:52:9c:53:9a:
24:95:24:6d:0e:5d:f6:41:95:51:a5:92:56:3a:99:
78:3e:d8:e4:14:fc:2e:84:ab:a9:75:bb:95:38:93:
91:03:bc:18:4d:7f:f5:e1:1f:d1:56:f2:47:86:4c:
8c:b7:7b:0d:8f:a2:42:5a:0c:05:39:5a:60:f2:5c:
22:87:e1:fe:8e:94:7d:0e:e6:23:1f:ad:7f:05:b2:
c6:85:67:b3:ef:fd:2e:6c:ea:dd:1f:6c:65:a5:4b:
82:86:09:0a:b8:2c:c0:d8:ef:5c:ea:4c:b4:45:9c:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:1E:4B:27:9A:F3:6E:1B:B9:AB:30:BC:7C:16:2A:27:A2:3D:C8
X509v3 Authority Key Identifier:
keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:41:00:46:d6:9f:61:d3:5f:64:35:13:e6:be:8a:ea:37:2f:
94:d5:73:cc:32:af:08:e0:ea:96:1e:af:1c:6b:9f:0f:de:ac:
ce:25:f2:3f:65:26:1e:50:c0:dc:66:4d:7f:fd:d9:cb:af:a7:
80:bd:40:96:af:6f:6d:6b:3e:8b:8f:6e:16:de:3c:41:f8:a1:
51:7f:61:31:32:da:e0:f0:5a:13:b4:cb:a2:f1:7f:6f:82:f3:
68:bb:a7:5c:1a:7f:72:b5:00:dc:09:f7:2b:e1:43:2c:4f:3b:
ff:74:c7:56:07:2f:77:ee:78:a2:55:56:df:ee:01:82:f5:e2:
c3:c6:a7:89:38:00:7f:db:0c:fe:b9:f7:43:4e:06:88:d1:ab:
75:e5:eb:48:7d:a4:2d:56:65:b6:90:1a:07:ed:9d:7a:74:37:
64:cb:01:51:61:99:34:fb:cc:ac:e4:65:75:a8:bb:02:67:6b:
41:d4:80:e8:c5:b8:02:63:f0:00:8a:72:4e:90:c4:19:5b:c2:
e8:a6:97:5f:a3:3a:4f:49:c5:bb:21:fa:f5:87:46:f8:f8:ef:
cf:db:c8:3b:f0:60:94:b1:f0:7c:64:19:2b:ca:e8:ef:63:20:
de:a6:1d:90:fb:0a:ef:7f:7e:d9:43:68:d9:07:9a:53:0e:d7:
12:3b:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:27 2025 by rpki-client