This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json)
Hash identifier: MQgKzGecrMiay1YN7NnNoAGZ6xtiGoXFxvlDt1IjAw4=
Subject key identifier: C9:F9:06:0C:2C:F6:4B:39:4B:91:5C:23:44:59:AC:1C:8E:FF:7E:F1
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial: 7B40DA4D4DA2A15E3B9BC57C48FBE23BE308879E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
Manifest number: 052B
Signing time: Tue 02 Dec 2025 06:41:45 +0000
Manifest this update: Tue 02 Dec 2025 06:36:45 +0000
Manifest next update: Fri 05 Dec 2025 10:17:45 +0000
Files and hashes: 1: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=)
2: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=)
3: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=)
4: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: luIb3Katkl53H88jh1KDrwH8LB+YQlASHa80Z9NVzZc=)
5: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 10:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:40:da:4d:4d:a2:a1:5e:3b:9b:c5:7c:48:fb:e2:3b:e3:08:87:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Validity
Not Before: Dec 2 06:36:45 2025 GMT
Not After : Dec 5 10:17:45 2025 GMT
Subject: CN=C9F9060C2CF64B394B915C234459AC1C8EFF7EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:00:06:df:d7:f3:fe:ac:06:87:51:eb:40:
40:53:82:4b:04:30:01:71:b5:8d:f4:ce:f0:3f:42:
d7:55:7b:be:3f:38:2a:77:f4:cd:ea:bc:ad:7d:b3:
f4:3e:4e:94:d6:02:eb:04:2e:d2:32:1e:9d:27:49:
64:d6:f4:02:e1:9d:d2:39:f8:15:7d:90:2d:22:dc:
ca:21:39:a0:71:83:e5:e1:b1:e0:6e:8a:58:c0:e6:
93:bf:2b:4b:cc:15:41:d5:3e:ea:02:63:10:ba:3c:
94:ce:5e:8f:40:15:db:72:63:da:c2:e6:a0:33:36:
e3:9e:eb:66:24:fc:80:23:29:61:0a:6b:28:8f:93:
4c:41:f7:a4:60:03:bf:85:86:8e:1f:e7:b5:28:5f:
3a:6f:87:4e:79:18:92:1d:1a:6b:1b:9e:c1:5b:d0:
f6:d1:5d:e1:20:21:da:55:11:cc:f8:74:fe:b9:a0:
8f:f6:db:e7:a8:e6:61:ba:a1:09:a6:f8:75:ae:43:
24:6c:90:93:d9:fa:45:ed:c5:11:62:9a:d3:74:c4:
00:b4:58:26:ac:59:d4:85:39:72:f1:ed:9d:0c:a4:
6d:48:c5:7c:ab:bd:5a:da:63:ca:4e:7e:6d:2d:3c:
91:d6:03:34:55:65:16:b7:46:4c:d5:20:43:aa:6a:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:06:0C:2C:F6:4B:39:4B:91:5C:23:44:59:AC:1C:8E:FF:7E:F1
X509v3 Authority Key Identifier:
keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:64:d1:8b:b9:88:3d:15:55:b2:5b:c1:e2:d5:1b:06:ea:4f:
c0:61:99:92:1b:d1:47:95:cb:58:1e:7d:9f:67:3f:3a:40:72:
1f:18:e9:42:3d:b1:d5:72:40:36:42:8c:e8:db:80:d3:91:82:
c2:92:78:d9:89:90:94:54:ba:b5:11:63:ee:aa:98:84:7f:59:
af:d3:7e:11:1b:0f:f5:bd:dc:e3:16:30:ad:57:13:1e:34:eb:
63:ea:3f:6b:0e:5d:82:1d:dc:0f:a6:2e:1d:63:a7:90:18:de:
a5:9a:26:71:12:d7:26:d4:7c:fe:b1:44:9e:ca:41:da:ac:05:
59:bb:e0:a0:8a:9a:29:90:3f:4a:28:96:14:c2:7c:2e:47:92:
cb:69:12:a6:cb:0c:9b:a8:b1:ad:b8:6e:9b:bd:15:6f:c6:a8:
dd:53:8f:eb:b6:d5:05:9c:29:f6:1e:88:be:88:01:ab:73:ce:
43:78:55:0f:51:4c:4e:00:c6:bf:0a:66:88:1d:f7:fd:a7:56:
1b:4c:79:15:df:3e:7e:ca:55:34:59:c3:52:b5:e9:f4:a8:c7:
ba:3f:39:83:2c:97:a7:df:1f:fe:f8:30:d1:30:97:1b:a5:88:
6b:cd:8e:af:fe:50:ce:9e:4f:3e:4c:ef:51:5f:78:51:ca:c8:
da:5a:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:52 2025 by rpki-client