This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
File: ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft (raw, json)
Hash identifier: YahC/sKeEhm8Tgi5IrwtQIR9KUt6z2ugb8Tb/t+O0Y0=
Subject key identifier: C4:24:39:F7:2A:1A:63:8A:A0:BD:80:95:84:AC:B0:CB:3A:25:67:32
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Certificate issuer: /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial: 47347856EB51567EB75BDE5A6110D6E1095CE2F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
Manifest number: 0256
Signing time: Mon 01 Dec 2025 15:50:49 +0000
Manifest this update: Mon 01 Dec 2025 15:45:49 +0000
Manifest next update: Thu 04 Dec 2025 20:48:49 +0000
Files and hashes: 1: 3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (hash: BQDZ7beKpSG5YJTRW/gbj7YmxhbuMugwzWVLa45Kdxg=)
2: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (hash: TrjJa445+JUR+ayqk91EMJFWmXepW8pWumfROn/i7JY=)
3: 3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (hash: dUSjnFJULsQt0ZMfSuCJpifmDF9rtnb0yNIzE9XIOWo=)
4: ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl (hash: nzi5ihRhE1eImhIMnhYLMgevxU5drb29GJE1dQ3/vbM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 20:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:34:78:56:eb:51:56:7e:b7:5b:de:5a:61:10:d6:e1:09:5c:e2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Validity
Not Before: Dec 1 15:45:49 2025 GMT
Not After : Dec 4 20:48:49 2025 GMT
Subject: CN=C42439F72A1A638AA0BD809584ACB0CB3A256732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:bc:28:58:56:c8:26:fb:b2:a7:39:26:02:
49:45:52:62:09:c3:d5:cb:5e:c0:5f:db:f1:b6:0c:
70:8b:6f:4e:f5:f7:61:12:b6:0c:46:d7:56:38:f6:
cb:46:e8:7f:28:ee:4b:3b:bb:1e:70:ec:c3:05:0f:
d7:51:0c:4f:95:19:89:c1:f9:8b:e6:f0:2f:67:13:
4d:6e:fe:60:fb:4f:33:6f:01:fd:ea:44:76:7c:e4:
53:c8:92:fe:9c:2f:ab:09:49:44:e7:c6:c2:4c:ab:
9d:94:13:85:73:c4:8c:05:6b:5d:4f:75:06:f7:e8:
60:73:c1:ce:75:80:9f:4f:c7:d4:6f:0d:af:22:f7:
29:2b:e1:5a:ee:64:de:b0:42:80:4c:d4:83:b4:4a:
92:db:fb:88:aa:9d:34:e3:4d:d7:4a:82:21:ac:52:
9c:8f:5d:a1:7a:10:9f:c9:1f:c8:1d:12:21:1a:27:
8c:e7:6a:24:da:37:be:52:e8:90:9c:44:91:d9:bc:
f8:34:b4:a9:d8:83:78:9d:d2:9e:cb:83:bd:0a:8d:
db:59:f0:92:4c:0e:13:a2:23:2d:a6:9b:c7:9b:9a:
40:5e:ac:61:61:4c:ac:89:a2:4b:bd:9a:73:c9:f5:
99:89:67:9c:5a:53:23:69:63:43:d2:7d:7d:6c:e9:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:24:39:F7:2A:1A:63:8A:A0:BD:80:95:84:AC:B0:CB:3A:25:67:32
X509v3 Authority Key Identifier:
keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3c:c5:f0:3f:a9:93:a5:4b:26:bd:6c:0f:1f:14:a3:a3:f0:
34:c3:a4:26:31:ee:03:ef:bf:c8:f7:08:a5:b7:22:62:80:79:
b6:bd:f7:c1:42:cb:5a:38:f8:b2:fb:c5:f8:e6:92:fc:f3:de:
69:fe:e8:8f:6c:34:4b:45:60:19:8c:70:8a:9b:00:8e:c4:94:
94:46:19:b2:e7:76:f6:a9:98:96:18:c0:66:d4:22:a5:38:da:
58:67:22:65:7d:fe:6f:95:5c:29:db:e4:9d:3f:3d:fd:31:67:
f0:36:46:55:70:83:5a:3c:78:ae:96:d0:07:a4:d2:f4:42:7a:
a6:69:df:09:c1:8d:7e:dd:7e:5d:dd:5c:95:c5:ab:60:50:3f:
73:d8:fd:94:e6:87:fe:ac:dc:e4:da:c3:e0:87:c5:c7:ca:8a:
d7:03:09:ea:48:fc:0b:68:7f:91:85:b4:4f:c6:3e:f8:ec:be:
74:44:dc:16:29:94:66:57:16:c2:d3:5b:dd:94:15:37:86:6e:
ee:b2:e6:32:45:75:fa:10:7b:e2:e7:d7:49:57:bc:a4:f5:50:
00:09:6f:b8:e2:85:6b:58:87:2e:a4:9d:29:44:6d:08:22:f3:
b6:6f:f9:80:86:85:79:01:fa:c0:7d:cb:20:27:62:d9:a3:6d:
ba:28:f6:0e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURzR4VutRVn63W95aYRDW4Qlc4vYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlB
NEMyMzhGNDAeFw0yNTEyMDExNTQ1NDlaFw0yNTEyMDQyMDQ4NDlaMDMxMTAvBgNV
BAMTKEM0MjQzOUY3MkExQTYzOEFBMEJEODA5NTg0QUNCMENCM0EyNTY3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCth7woWFbIJvuypzkmAklFUmIJ
w9XLXsBf2/G2DHCLb07192EStgxG11Y49stG6H8o7ks7ux5w7MMFD9dRDE+VGYnB
+Yvm8C9nE01u/mD7TzNvAf3qRHZ85FPIkv6cL6sJSUTnxsJMq52UE4VzxIwFa11P
dQb36GBzwc51gJ9Px9RvDa8i9ykr4VruZN6wQoBM1IO0SpLb+4iqnTTjTddKgiGs
UpyPXaF6EJ/JH8gdEiEaJ4znaiTaN75S6JCcRJHZvPg0tKnYg3id0p7Lg70KjdtZ
8JJMDhOiIy2mm8ebmkBerGFhTKyJoku9mnPJ9ZmJZ5xaUyNpY0PSfX1s6ZP/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxCQ59yoaY4qgvYCVhKywyzolZzIwHwYDVR0j
BBgwFoAUrbnBlzUvgSj22qR6In04aaTCOPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NzNkMmI2MC0xMmM4LTQxM2UtYjk0MS0zOTNlMDBmZGQ2NTMvMC9BREI5QzE5NzM1
MkY4MTI4RjZEQUE0N0EyMjdEMzg2OUE0QzIzOEY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlBNEMy
MzhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzczZDJiNjAtMTJjOC00MTNlLWI5
NDEtMzkzZTAwZmRkNjUzLzAvQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4
NjlBNEMyMzhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABM8xfA/qZOlSya9bA8fFKOj8DTDpCYx7gPv
v8j3CKW3ImKAeba998FCy1o4+LL7xfjmkvzz3mn+6I9sNEtFYBmMcIqbAI7ElJRG
GbLndvapmJYYwGbUIqU42lhnImV9/m+VXCnb5J0/Pf0xZ/A2RlVwg1o8eK6W0Aek
0vRCeqZp3wnBjX7dfl3dXJXFq2BQP3PY/ZTmh/6s3OTaw+CHxcfKitcDCepI/Ato
f5GFtE/GPvjsvnRE3BYplGZXFsLTW92UFTeGbu6y5jJFdfoQe+Ln10lXvKT1UAAJ
b7jihWtYhy6knSlEbQgi87Zv+YCGhXkB+sB9yyAnYtmjbboo9g4=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:30 2025 by rpki-client