This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft
File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json)
Hash identifier: wvlr2Gya24bCxZlZ2ctwhCwLfbxtZxVyKWivwc2cOjg=
Subject key identifier: 61:6E:DA:0E:E4:6B:B5:25:D9:53:68:17:D3:5F:F3:50:BF:F4:EB:9D
Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10
Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610
Certificate serial: 7EF0DF2ADC5E386C5A5D552DAD27BF00A8BA76F8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft
Manifest number: 032E
Signing time: Mon 01 Dec 2025 05:11:20 +0000
Manifest this update: Mon 01 Dec 2025 05:06:20 +0000
Manifest next update: Thu 04 Dec 2025 16:47:20 +0000
Files and hashes: 1: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: ApCI8J5HQr3P5FoSdUSLLW3ZrtUKrYh+7RcZQmqJGDk=)
2: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=)
3: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=)
4: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=)
5: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=)
6: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=)
7: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl
rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 16:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f0:df:2a:dc:5e:38:6c:5a:5d:55:2d:ad:27:bf:00:a8:ba:76:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610
Validity
Not Before: Dec 1 05:06:20 2025 GMT
Not After : Dec 4 16:47:20 2025 GMT
Subject: CN=616EDA0EE46BB525D9536817D35FF350BFF4EB9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:d1:5e:61:0c:1b:04:6d:0a:37:a9:80:77:
97:81:cf:4a:9f:07:d1:4f:d5:d2:2b:90:9c:88:dd:
1d:e2:40:fa:47:ea:dd:8f:3c:17:79:78:ea:25:bd:
5f:0f:af:33:2f:57:83:65:4f:c9:a7:f4:91:83:c8:
75:49:36:33:ca:31:2f:f9:69:34:0c:25:f9:1e:02:
ec:4a:04:64:db:46:0d:bd:0a:1c:03:cf:6b:01:9f:
cf:29:19:ef:61:08:ce:45:11:59:73:2f:f2:bf:0c:
5f:e9:3e:05:16:bd:51:cb:f5:97:37:16:9c:a2:d4:
88:79:1b:cc:07:3f:3d:72:b8:a3:c1:bd:29:11:04:
80:60:db:52:0e:31:be:b1:2d:b3:b9:80:7f:3b:36:
68:ef:26:86:8d:30:d1:de:3a:7e:17:96:aa:26:0e:
ad:4b:03:45:e3:55:2c:de:2b:54:3f:53:88:1b:2a:
83:89:91:cd:f0:6a:f9:7d:5b:a5:a7:75:b2:a2:68:
40:b8:1a:08:23:55:6f:b7:fe:96:69:c7:82:0e:53:
06:c9:ee:36:76:70:68:28:0b:fd:39:bc:b1:df:15:
75:48:ef:d7:79:9c:23:b1:33:cb:5c:c2:f2:db:19:
d3:36:bb:f9:f9:09:d0:de:51:9c:37:47:63:72:be:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6E:DA:0E:E4:6B:B5:25:D9:53:68:17:D3:5F:F3:50:BF:F4:EB:9D
X509v3 Authority Key Identifier:
keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0a:d7:96:50:63:66:53:00:81:c3:b4:e1:9c:bd:f5:90:cb:
79:87:0d:5c:20:59:37:07:3b:69:c0:66:9b:34:91:9c:25:0a:
40:a5:1d:42:d8:5c:38:c3:29:25:9c:85:e0:bb:18:c5:f1:69:
7d:be:93:c9:0b:d4:a2:01:bf:58:43:91:f5:34:28:f2:ca:78:
1c:5f:2f:c0:a6:49:0a:f9:35:55:b4:aa:9e:69:a3:b7:13:40:
e3:bd:54:d6:a4:04:f3:d6:47:ed:f9:a5:68:2f:96:9f:07:00:
d1:6f:05:dd:72:b7:af:45:c2:89:18:71:29:2a:f7:9f:d4:e7:
02:11:ac:72:c4:74:9a:ea:7e:b8:fc:4a:da:4c:05:24:2d:b6:
78:65:b3:5b:64:b3:ed:2f:75:62:8f:f4:d6:de:f0:4a:ef:59:
a7:71:0b:56:da:1d:fd:fb:af:d8:b0:94:7e:d7:82:5f:d7:a8:
45:0a:25:6b:70:92:3d:90:b5:a2:b0:33:ef:06:74:09:fa:29:
31:25:9f:27:82:ae:84:ee:66:6c:18:15:1c:c1:ee:3c:d0:14:
0b:63:3b:2f:2a:54:fc:45:d4:54:80:f8:47:0b:61:f9:55:df:
b7:9b:6e:15:f4:24:32:a9:70:9c:81:f1:74:35:f5:8b:f0:be:
0a:53:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:07 2025 by rpki-client