This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft
File: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft (raw, json)
Hash identifier: K/E6ZsnzzogKvzy0gAfrKvjVkBYD1HpCU8M1MKlAUf4=
Subject key identifier: 65:95:21:CF:4A:24:1E:65:69:73:34:9A:19:D9:A2:7A:4F:6B:9B:74
Authority key identifier: 54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE
Certificate issuer: /CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE
Certificate serial: 69B35215360E7B2616D8B40CAC86AB7645D57AA4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft
Manifest number: 052C
Signing time: Wed 03 Dec 2025 05:51:33 +0000
Manifest this update: Wed 03 Dec 2025 05:46:33 +0000
Manifest next update: Sat 06 Dec 2025 10:10:33 +0000
Files and hashes: 1: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: HoilO9KAsNDvqhA1QW+xRWbMVFCIXL/5ZP3Wb1KxcsY=)
2: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: 4Y2+me1T7YOW0mP4kEwSrY0/8rA8cOe6GeK5fECPb4g=)
3: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl (hash: eX9BOf9kcuNApRvaHkgpYvuREsCpdzUIJzFGZNX8i4Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl
rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 10:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b3:52:15:36:0e:7b:26:16:d8:b4:0c:ac:86:ab:76:45:d5:7a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE
Validity
Not Before: Dec 3 05:46:33 2025 GMT
Not After : Dec 6 10:10:33 2025 GMT
Subject: CN=659521CF4A241E656973349A19D9A27A4F6B9B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:de:06:c3:de:96:3a:c1:e7:f0:2c:ac:0b:
d1:5e:e5:da:cf:2f:a3:c8:81:17:8d:ba:55:8e:8f:
2c:1c:6a:54:d2:c1:5e:8a:5e:58:6c:76:9b:91:83:
0a:91:71:b4:66:01:f8:d3:7c:4e:34:ae:d4:c3:a5:
58:c2:cb:01:6d:8d:66:35:eb:2a:b9:18:06:cb:88:
21:8f:38:1a:3f:d5:dc:32:f4:07:c5:3c:b9:7c:46:
e4:8d:5c:13:ff:b5:f9:7a:af:b4:58:25:8f:0b:e4:
be:05:5a:ef:f5:41:a1:dc:a5:e4:e8:d4:6b:7c:0b:
08:08:18:8b:e5:d1:81:11:2b:bb:4f:3b:82:85:6d:
28:87:21:2e:ae:5c:2e:e1:c0:cc:af:b7:de:1b:23:
18:8d:6f:d6:ee:f5:f6:98:6d:e4:69:62:e1:0f:c5:
08:1e:44:0c:78:4e:23:58:21:b2:64:de:4f:e7:05:
0a:86:6d:64:ad:94:0e:03:fe:07:59:23:30:bc:63:
df:2a:d2:a3:f8:29:a1:88:e3:99:36:db:f7:77:7a:
a8:0a:04:f7:f0:9e:a3:32:8d:e9:35:e6:1a:9b:2c:
cd:14:b6:33:fc:21:32:85:2b:e7:a7:8a:7d:0c:f8:
21:48:1c:ba:d6:16:e9:80:d8:29:fc:23:ba:7d:bf:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:21:CF:4A:24:1E:65:69:73:34:9A:19:D9:A2:7A:4F:6B:9B:74
X509v3 Authority Key Identifier:
keyid:54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1d:5d:0d:75:05:8f:0b:f6:a0:6a:8e:3a:56:ae:16:79:66:
42:7a:6d:db:ac:8b:94:e9:af:ef:5c:12:97:1e:1d:9c:11:de:
b6:77:73:21:3e:29:89:2b:ad:2e:a0:ac:52:0a:a7:7e:80:63:
ba:f4:25:5b:bf:61:76:04:e8:61:08:73:08:fe:13:62:d8:1e:
a3:a0:e0:53:ca:c3:d2:d9:bb:2a:2d:04:60:8f:80:bd:28:be:
46:97:8d:d4:dd:07:8d:b3:3b:e9:f8:f3:31:3e:8d:48:2e:ff:
31:ed:d6:e3:83:9d:2f:6b:7f:c3:90:61:79:a7:64:b2:bd:29:
bc:f9:cd:1e:5c:2f:df:c4:9a:9f:87:fa:27:ba:0c:42:49:53:
36:46:fa:b8:9c:03:08:9e:59:d9:46:5e:69:db:da:fa:28:90:
84:14:35:d9:37:c3:86:d6:bb:2e:cd:2b:02:62:5d:12:f0:d7:
2b:d8:98:b2:b7:23:c6:c9:d0:ca:30:c7:15:58:5b:62:36:a6:
54:f1:06:8d:c6:4c:ae:a0:1b:d5:92:02:87:0c:8a:76:d2:25:
7a:86:80:0a:2f:c0:c0:e8:f7:d3:17:1c:b7:d9:34:b2:d8:8b:
fc:9d:52:23:e4:4b:13:4c:64:c1:86:91:76:e4:c6:5e:32:f7:
13:c3:c8:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUabNSFTYOeyYW2LQMrIardkXVeqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRG
NjYxOENCRTAeFw0yNTEyMDMwNTQ2MzNaFw0yNTEyMDYxMDEwMzNaMDMxMTAvBgNV
BAMTKDY1OTUyMUNGNEEyNDFFNjU2OTczMzQ5QTE5RDlBMjdBNEY2QjlCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaN4Gw96WOsHn8CysC9Fe5drP
L6PIgReNulWOjywcalTSwV6KXlhsdpuRgwqRcbRmAfjTfE40rtTDpVjCywFtjWY1
6yq5GAbLiCGPOBo/1dwy9AfFPLl8RuSNXBP/tfl6r7RYJY8L5L4FWu/1QaHcpeTo
1Gt8CwgIGIvl0YERK7tPO4KFbSiHIS6uXC7hwMyvt94bIxiNb9bu9faYbeRpYuEP
xQgeRAx4TiNYIbJk3k/nBQqGbWStlA4D/gdZIzC8Y98q0qP4KaGI45k22/d3eqgK
BPfwnqMyjek15hqbLM0UtjP8ITKFK+enin0M+CFIHLrWFumA2Cn8I7p9v5C3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZZUhz0okHmVpczSaGdmiek9rm3QwHwYDVR0j
BBgwFoAUVP8UG+lgE/5rwIFtmRvPtPZhjL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2FmMjcxZi1jODNkLTQ0MWUtYmVhOS0xOGEyNDRkMGUwMGUvMC81NEZGMTQxQkU5
NjAxM0ZFNkJDMDgxNkQ5OTFCQ0ZCNEY2NjE4Q0JFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRGNjYx
OENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl
YTktMThhMjQ0ZDBlMDBlLzAvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNG
QjRGNjYxOENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK4dXQ11BY8L9qBqjjpWrhZ5ZkJ6bdusi5Tp
r+9cEpceHZwR3rZ3cyE+KYkrrS6grFIKp36AY7r0JVu/YXYE6GEIcwj+E2LYHqOg
4FPKw9LZuyotBGCPgL0ovkaXjdTdB42zO+n48zE+jUgu/zHt1uODnS9rf8OQYXmn
ZLK9Kbz5zR5cL9/Emp+H+ie6DEJJUzZG+ricAwieWdlGXmnb2vookIQUNdk3w4bW
uy7NKwJiXRLw1yvYmLK3I8bJ0MowxxVYW2I2plTxBo3GTK6gG9WSAocMinbSJXqG
gAovwMDo99MXHLfZNLLYi/ydUiPkSxNMZMGGkXbkxl4y9xPDyJ0=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:25 2025 by rpki-client