This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
File: C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft (raw, json)
Hash identifier: 8bxHDYcAI+SLcnH9G3d3oTrG8ahxspQuT8YZaXfs6po=
Subject key identifier: 2E:12:E1:40:E0:D7:43:00:B0:F7:3D:0B:9C:1B:6B:D9:31:13:4F:A5
Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
Certificate issuer: /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Certificate serial: 0F6F0A114CE654B5F1A4CD3CF3D72C4DF8C07FBF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
Manifest number: 04CF
Signing time: Tue 02 Dec 2025 16:51:47 +0000
Manifest this update: Tue 02 Dec 2025 16:46:47 +0000
Manifest next update: Fri 05 Dec 2025 23:23:47 +0000
Files and hashes: 1: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: mHuAtsMxpsqqYgVgU/J4GaS+obKCkf5RQ02z88MxYFk=)
2: C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl (hash: oU4pGHpFgyrYbydzEjcAHS3YUi1dVb29k3pYQTWtMtw=)
3: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: OKNkVEc7P0U9abUfRQ+kpCtkFiEHCA5wN5OYP+3DpYM=)
4: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: GBrLCHtlb2Jafhwmf0ULsw2VIcKkSNSTUpaf2LZdkT0=)
5: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: KHtiEx3W38SvszbKHvX80D8vQUAYBT6FDdynUOoUkpY=)
6: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: Yue0OeY9zNd13c9ik6Jsx2eyurp8CzVN+CzOusZXP3E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 23:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6f:0a:11:4c:e6:54:b5:f1:a4:cd:3c:f3:d7:2c:4d:f8:c0:7f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Validity
Not Before: Dec 2 16:46:47 2025 GMT
Not After : Dec 5 23:23:47 2025 GMT
Subject: CN=2E12E140E0D74300B0F73D0B9C1B6BD931134FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:d8:19:b7:db:cd:45:7f:e3:8e:2d:b6:88:
27:c3:d2:29:5d:34:e7:30:a4:81:e3:67:38:67:53:
70:74:a8:1e:f7:e4:7b:d7:13:19:7e:2c:f4:62:82:
f0:4a:55:1b:84:f3:fd:60:eb:fc:46:87:6a:91:31:
7e:0e:05:eb:a8:16:7c:a3:54:20:66:ce:1a:36:e7:
df:5f:cf:c1:9b:9e:d6:98:dc:5b:d8:ef:03:e1:3a:
96:03:4a:fc:2e:75:03:51:d0:ec:e8:11:38:09:11:
ad:d3:9e:0a:aa:19:f0:ea:50:c6:f9:06:2c:5f:5f:
f6:ae:fb:68:84:eb:3e:db:e2:aa:5a:c9:54:98:f1:
f2:51:c6:4d:60:1d:e7:fc:19:b4:52:d7:0e:e9:e9:
5c:51:c6:07:75:2b:c8:72:76:06:54:0d:c1:7f:c5:
69:10:8d:c6:41:d9:6b:e5:04:a7:22:1c:e6:da:26:
d5:b2:82:5e:88:9e:c2:9a:c3:be:a9:14:58:96:76:
a6:0d:13:f6:4e:94:3d:ce:34:2e:66:ed:4a:f5:a1:
cf:a5:e4:c0:0c:13:26:e9:87:96:53:f6:b1:a9:c2:
68:a5:6b:d1:27:16:af:c1:8a:f7:48:95:26:a9:ce:
83:d0:57:1f:8e:1c:0f:22:69:72:89:58:df:39:d9:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:E1:40:E0:D7:43:00:B0:F7:3D:0B:9C:1B:6B:D9:31:13:4F:A5
X509v3 Authority Key Identifier:
keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ab:a1:48:64:45:55:6e:fe:fb:8a:f8:78:1d:af:1f:20:b9:
1a:56:5b:01:c9:bc:c2:8e:68:6e:6d:c6:90:2a:71:65:03:0f:
ec:2c:e4:f4:9c:1e:1a:f9:97:07:76:3f:d8:1e:1c:1c:14:ae:
48:74:c6:21:07:55:b4:51:0d:ca:0a:e0:4d:f0:53:b8:b1:41:
4f:e8:d6:87:66:f2:f9:3b:9e:33:9e:c6:3a:57:58:2f:d0:ff:
54:a5:1a:25:85:5d:d1:3e:ff:65:7d:c7:ee:ca:30:18:45:50:
59:db:19:85:1a:27:7e:86:be:b8:ef:ec:4c:2f:0b:e8:44:6a:
a8:b5:74:34:fa:ce:10:5e:dc:f2:b7:70:40:22:c4:71:cf:8c:
7d:c5:a1:32:dd:25:65:ec:c6:f0:3e:a7:61:51:90:9a:20:c6:
19:66:f5:93:52:da:8c:cf:c7:a6:0a:ba:b6:9c:81:b4:ca:94:
7a:df:c6:e7:77:4c:ca:d1:50:b5:9d:e0:f6:18:86:81:cb:e7:
a1:39:e1:47:0a:49:98:e2:6c:fd:11:d9:e1:70:a2:aa:6b:72:
c3:23:76:27:66:31:9f:b6:63:8a:0b:c1:bd:aa:1f:18:f7:57:
ab:f4:83:f5:ac:97:6f:56:14:6b:f3:ef:00:c3:2d:a3:2a:16:
6d:bc:8b:c7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD28KEUzmVLXxpM0889csTfjAf78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5
NThERUZGNzAeFw0yNTEyMDIxNjQ2NDdaFw0yNTEyMDUyMzIzNDdaMDMxMTAvBgNV
BAMTKDJFMTJFMTQwRTBENzQzMDBCMEY3M0QwQjlDMUI2QkQ5MzExMzRGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6tgZt9vNRX/jji22iCfD0ild
NOcwpIHjZzhnU3B0qB735HvXExl+LPRigvBKVRuE8/1g6/xGh2qRMX4OBeuoFnyj
VCBmzho2599fz8GbntaY3FvY7wPhOpYDSvwudQNR0OzoETgJEa3TngqqGfDqUMb5
BixfX/au+2iE6z7b4qpayVSY8fJRxk1gHef8GbRS1w7p6VxRxgd1K8hydgZUDcF/
xWkQjcZB2WvlBKciHObaJtWygl6InsKaw76pFFiWdqYNE/ZOlD3ONC5m7Ur1oc+l
5MAMEybph5ZT9rGpwmila9EnFq/BivdIlSapzoPQVx+OHA8iaXKJWN852Z91AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULhLhQODXQwCw9z0LnBtr2TETT6UwHwYDVR0j
BBgwFoAUxipUHHMj9s0jj1SbH4c27ZWN7/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Nzc0ODU2Zi03NDUzLTRkMDItYmMzNS0zNDgyZWI1NjQ2YTIvMC9DNjJBNTQxQzcz
MjNGNkNEMjM4RjU0OUIxRjg3MzZFRDk1OERFRkY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5NThE
RUZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj
MzUtMzQ4MmViNTY0NmEyLzAvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2
RUQ5NThERUZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJKroUhkRVVu/vuK+Hgdrx8guRpWWwHJvMKO
aG5txpAqcWUDD+ws5PScHhr5lwd2P9geHBwUrkh0xiEHVbRRDcoK4E3wU7ixQU/o
1odm8vk7njOexjpXWC/Q/1SlGiWFXdE+/2V9x+7KMBhFUFnbGYUaJ36Gvrjv7Ewv
C+hEaqi1dDT6zhBe3PK3cEAixHHPjH3FoTLdJWXsxvA+p2FRkJogxhlm9ZNS2ozP
x6YKuracgbTKlHrfxud3TMrRULWd4PYYhoHL56E54UcKSZjibP0R2eFwoqprcsMj
didmMZ+2Y4oLwb2qHxj3V6v0g/Wsl29WFGvz7wDDLaMqFm28i8c=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:26 2025 by rpki-client