This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json)
Hash identifier: pT9VC4oarp6ibeL3+AQgUr9dANppYgC2N12nK69Rnps=
Subject key identifier: B7:14:72:84:31:45:92:3F:49:AE:2D:69:4D:AE:B4:D1:6A:D8:79:34
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial: 1C2F9F4307FAE05ABFE481C33AFF3990ADF05D40
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
Manifest number: 026F
Signing time: Mon 15 Dec 2025 23:02:27 +0000
Manifest this update: Mon 15 Dec 2025 22:57:27 +0000
Manifest next update: Thu 18 Dec 2025 23:47:27 +0000
Files and hashes: 1: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: 8qmJTm3w/YB+pPXRr4kfQMyCGfmyB46RphMFNG6KdwM=)
2: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=)
3: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: yqDA1Gh+nI24zoKtqUazyok0UGXURA+Nlb1kM1EqJCo=)
4: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=)
5: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: +34bwpSOef67RB/oQRDTwqFvI+QSTOfbg9cPryv6moM=)
6: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: UnglZoBVP+l2hAxzoGbqmzfsJvv/Xe0z5CKmhsW/FLo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 23:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2f:9f:43:07:fa:e0:5a:bf:e4:81:c3:3a:ff:39:90:ad:f0:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Validity
Not Before: Dec 15 22:57:27 2025 GMT
Not After : Dec 18 23:47:27 2025 GMT
Subject: CN=B71472843145923F49AE2D694DAEB4D16AD87934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:32:8c:93:1b:94:69:41:c8:0a:5d:5a:bf:
e2:f4:15:9e:dd:6e:7b:c3:68:39:eb:a4:c0:db:2f:
88:6c:94:12:df:14:ad:a9:8c:a0:8f:b2:0a:cf:c6:
d8:00:43:78:7c:fa:2b:42:23:ce:2c:fc:d4:bb:3d:
fb:9d:c9:ce:c6:11:5f:10:95:fa:56:57:b4:1a:9f:
18:75:4d:c0:22:27:75:c0:aa:87:31:0e:41:65:65:
26:ef:a7:0b:0b:2f:8f:e0:8b:a0:2d:08:61:8b:90:
9a:a5:83:13:80:99:23:0a:b3:1b:85:8c:9b:de:d9:
6d:a2:bd:7d:21:0e:6b:82:7f:25:82:d4:cb:26:87:
0e:c3:af:0c:3e:55:a2:f2:80:e0:6a:d2:27:83:50:
62:62:c3:c7:8b:30:fe:ff:03:41:b3:f7:e4:4a:01:
82:d5:97:9d:e5:33:dd:a9:f8:2d:10:27:5e:24:3a:
5c:ba:b1:f7:87:93:f2:d8:57:ff:8c:6c:33:07:85:
1a:6c:07:99:b8:d6:69:fe:02:70:c1:96:da:36:7d:
53:69:5e:3c:99:ac:5a:37:a0:39:cc:b4:30:29:ca:
d6:a6:37:de:5c:7e:c5:94:d6:82:a4:0a:fe:c5:02:
46:03:01:ee:fc:39:ea:20:cb:c4:ee:27:f2:a4:55:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:72:84:31:45:92:3F:49:AE:2D:69:4D:AE:B4:D1:6A:D8:79:34
X509v3 Authority Key Identifier:
keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6c:71:36:ce:49:5b:db:5e:27:79:eb:4f:0d:a8:59:6c:7f:
7a:71:61:4c:aa:ae:73:54:65:8c:c1:9b:65:6b:d5:07:1c:0a:
80:64:be:d8:8a:f7:3b:b4:6b:6a:5d:40:5f:ae:6e:77:a3:8a:
dd:03:73:85:9f:0f:e5:c0:a4:4b:7b:e6:22:b6:36:ed:0b:b2:
2a:31:84:a9:28:f2:c1:e1:1e:c7:a6:53:d2:03:ab:5d:7f:bd:
d2:06:de:48:91:0f:23:51:a7:43:2b:f1:35:4d:c6:cd:83:c4:
a8:1b:9f:64:f5:bb:1e:ca:83:25:18:f6:1b:27:d1:9f:bd:54:
73:ea:ac:52:7b:ce:2f:a7:bf:62:e0:a6:ae:26:eb:c3:47:a2:
65:0a:b1:00:72:fa:18:25:d6:17:85:90:d9:18:89:04:fd:e0:
22:14:ed:65:2e:56:7b:3a:a6:c8:af:12:c4:ca:53:11:c3:81:
99:ee:2f:69:72:42:64:6e:23:52:43:d6:ea:49:07:d9:88:2b:
bf:78:16:35:e4:f9:54:e3:ec:ed:7b:88:0d:e8:32:85:4c:7d:
8b:77:30:1a:ce:34:80:73:a2:9d:93:9d:0c:b0:88:be:8a:21:
17:db:dc:95:a7:3d:eb:8d:3b:f7:6c:45:d3:57:4f:6f:86:71:
57:f0:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:43:31 2025 by rpki-client