This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier: b9Vfmcm470RCwcbEiL3phmrbYdNFriDqCsnswPkhISU=
Subject key identifier: 4F:B0:79:5B:FD:AF:2D:9C:75:06:C0:CF:AB:28:B2:3C:55:EC:3C:5D
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial: 287E34551C89A9663FE1FCBAB48BE0F901DC7552
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number: 0538
Signing time: Mon 01 Dec 2025 17:02:28 +0000
Manifest this update: Mon 01 Dec 2025 16:57:28 +0000
Manifest next update: Fri 05 Dec 2025 03:29:28 +0000
Files and hashes: 1: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
2: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: kGOUgYcfU0lipgVW6JyJINZjvC/9IZgf9YNMhFm4hRU=)
3: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
4: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
5: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
6: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
7: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
8: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
9: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
10: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
11: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
12: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
13: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
14: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
15: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=)
16: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 03:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7e:34:55:1c:89:a9:66:3f:e1:fc:ba:b4:8b:e0:f9:01:dc:75:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Validity
Not Before: Dec 1 16:57:28 2025 GMT
Not After : Dec 5 03:29:28 2025 GMT
Subject: CN=4FB0795BFDAF2D9C7506C0CFAB28B23C55EC3C5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:7c:44:bd:d6:49:90:2d:a8:78:ca:42:4a:
5d:fe:bf:e2:d4:7e:9a:01:70:2d:77:bf:45:6c:32:
48:1f:12:51:64:08:0c:fd:e7:51:56:f5:37:23:87:
5b:e3:b2:0b:48:01:4a:bc:08:df:1f:7e:a8:37:08:
f1:27:9b:f2:dd:cb:53:28:54:dd:07:f7:7c:1b:b3:
c5:83:70:2b:48:44:51:6f:48:ca:34:63:46:b3:fd:
69:82:66:64:2f:8b:15:e9:42:67:4d:0e:42:78:7a:
8c:2e:04:22:94:87:fa:bd:94:de:2e:cc:45:77:5b:
0d:30:4b:79:4f:93:f1:22:78:19:a0:6d:5d:1b:e5:
9d:bd:09:ed:56:cb:5e:0b:e7:fd:e4:dd:c6:5d:86:
af:d9:5e:cd:fa:36:ed:9e:ab:89:8f:44:5b:83:66:
e0:d0:4f:ba:d3:b0:04:9b:6a:37:49:99:f2:89:88:
7b:b8:27:6f:86:00:a2:34:24:5c:d2:53:b4:1d:e4:
cf:02:0a:43:ba:55:63:0f:fe:cf:9f:d9:5e:21:10:
b7:36:16:28:00:03:5c:fa:41:8b:99:da:8a:5e:9b:
47:4f:99:90:93:81:e2:ab:2b:ca:cb:7e:cf:56:d7:
ca:2a:62:c4:64:17:ec:3c:b1:4b:c6:60:12:16:6e:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B0:79:5B:FD:AF:2D:9C:75:06:C0:CF:AB:28:B2:3C:55:EC:3C:5D
X509v3 Authority Key Identifier:
keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b5:72:96:ee:86:7c:65:04:77:3a:3e:e1:4f:8b:2b:a5:e0:
0d:81:bc:5a:03:39:3f:68:98:c9:dc:91:89:1a:71:f8:c2:6e:
cf:ac:1f:d6:f1:30:ba:d5:c6:51:e6:86:62:43:91:6a:7e:b3:
90:03:12:78:10:fc:07:4a:70:6d:02:b0:c9:c2:f0:1b:3d:6c:
97:a6:85:fd:db:be:16:88:ea:4a:52:45:91:75:95:89:40:bc:
99:b2:f7:90:68:b1:f5:e7:08:6f:54:b2:3a:d2:4d:6c:98:d7:
90:fb:06:88:38:e8:47:9b:98:61:1b:83:70:a4:c8:79:0d:67:
79:6a:45:5f:e1:35:ea:c8:1c:eb:39:fb:af:e8:e1:4b:17:4f:
a5:44:b0:6c:fb:9d:a3:c5:42:60:8b:5d:80:6e:b8:57:6b:b3:
44:73:cb:a5:a6:3c:d6:19:d9:29:66:ea:09:59:96:7f:59:7b:
96:ee:a2:a3:6f:f6:e5:2c:1a:ca:63:2c:8d:0e:17:bf:7d:46:
37:0d:85:38:33:b2:d2:8f:cd:ce:05:ae:26:ab:02:bd:a8:33:
3d:9b:bc:69:cc:8c:79:62:a7:cd:ee:6a:05:74:a7:c6:f9:3e:
d5:f5:52:50:1a:e0:3d:f5:6e:bd:bc:db:0c:a6:e7:76:1b:9d:
ec:d3:fc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:34 2025 by rpki-client