This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
File: F137C794398E5F88909A244EC978EA476CCF76CC.mft (raw, json)
Hash identifier: fmAKy0Emjsz7J6gX09CFnLHDKrAekbU0gBBlGqlkxZg=
Subject key identifier: 75:20:C4:C4:B1:EF:BE:39:BB:A1:D1:2C:2C:FC:AE:A6:9D:D8:03:EA
Authority key identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC
Certificate issuer: /CN=F137C794398E5F88909A244EC978EA476CCF76CC
Certificate serial: 1EEA8876A5C426FB60A2586247A41CB8934CC538
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
Manifest number: 01E2
Signing time: Tue 02 Dec 2025 22:22:01 +0000
Manifest this update: Tue 02 Dec 2025 22:17:01 +0000
Manifest next update: Sat 06 Dec 2025 02:50:01 +0000
Files and hashes: 1: F137C794398E5F88909A244EC978EA476CCF76CC.crl (hash: zMp5s6Md75nua+WIa+JPp9BIa9vI+UehYNLi0+EzjDI=)
2: 3130332e35352e3232342e302f32332d3234203d3e20313530343832.roa (hash: bYXObqHIEuwgYntbLAkXiZDYp6ozXDo0Cjhn/uYq1JU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl
rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 02:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ea:88:76:a5:c4:26:fb:60:a2:58:62:47:a4:1c:b8:93:4c:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F137C794398E5F88909A244EC978EA476CCF76CC
Validity
Not Before: Dec 2 22:17:01 2025 GMT
Not After : Dec 6 02:50:01 2025 GMT
Subject: CN=7520C4C4B1EFBE39BBA1D12C2CFCAEA69DD803EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:31:f2:fb:99:46:ce:3f:7f:52:cf:67:9e:
25:0d:f0:e0:ba:46:05:bf:80:e9:a5:40:ce:5c:cc:
ed:07:40:94:30:a3:e2:c1:5c:39:9e:fc:18:23:10:
67:92:f3:a8:5b:84:cd:fd:fe:22:79:ba:60:08:24:
db:c5:76:90:d7:4d:c2:23:ee:31:14:3a:3f:9b:99:
3b:f9:1d:40:75:32:6f:0b:27:60:63:0c:f1:b5:98:
53:17:2d:99:fc:4c:0c:c0:b9:00:ba:a5:ab:b2:0c:
da:54:73:9d:69:19:a4:88:bb:69:c6:08:43:bb:b7:
fa:2c:9d:97:b8:f8:34:71:80:3b:1b:02:1b:b6:e7:
e0:72:e5:64:b3:34:95:55:b9:34:72:75:dd:76:f2:
cf:c5:c3:ae:15:ad:7c:c6:cb:06:29:3b:db:1a:e9:
05:6d:d4:05:35:45:3b:a7:8c:39:19:bd:82:da:94:
d7:c0:c6:94:b7:75:3b:0f:9b:30:3f:07:f5:29:96:
82:2d:6a:c4:8b:22:85:ad:9c:99:fb:0f:bb:9e:1c:
7f:97:81:76:0e:b9:6d:c1:84:4a:50:eb:75:e6:59:
8a:e5:46:e5:64:89:e7:b6:55:a8:b5:a6:04:c4:9b:
a2:84:62:7b:3b:7d:d5:27:20:28:91:3a:e1:f0:f9:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:20:C4:C4:B1:EF:BE:39:BB:A1:D1:2C:2C:FC:AE:A6:9D:D8:03:EA
X509v3 Authority Key Identifier:
keyid:F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:41:d0:d9:bf:e2:0b:49:d7:4c:40:ec:1f:ee:53:16:a9:0a:
d1:eb:a3:c8:34:5e:5d:e3:c2:57:14:e0:0b:49:3c:d3:dc:85:
a3:1e:28:aa:c8:f2:4a:86:3a:b3:72:2e:4a:59:ad:a0:f6:3d:
67:3d:80:b0:2e:4f:f7:bc:cb:f2:60:9c:cb:2e:42:a4:3c:44:
e0:8d:04:8b:ef:70:31:3e:9f:ce:ee:cb:40:af:b4:a7:6f:7d:
64:2a:d2:e0:62:da:0d:b9:22:ee:ab:63:58:e8:ad:b1:2a:db:
43:a0:82:56:b2:97:02:7c:9b:2e:42:2c:39:0f:98:1b:3d:d6:
17:7f:73:23:cd:75:b7:c8:de:68:f6:d0:91:99:a5:8a:95:e8:
ed:10:7c:9b:35:fd:34:84:65:81:b5:4f:6e:45:66:5b:97:01:
c2:ce:f9:b5:b1:2e:44:8c:23:e7:5a:a9:ab:f3:20:cf:c8:6b:
b5:4a:28:0a:a2:f8:c4:97:d6:7f:fa:ee:63:87:a6:fd:b5:7c:
a0:2b:d4:61:c3:2a:c2:03:d8:8b:9c:b9:1f:89:ee:ae:fc:ce:
df:67:19:9c:ae:aa:c8:72:59:0b:fe:ca:e5:97:eb:39:d9:40:
7c:0e:86:f3:b3:35:64:89:de:09:38:0b:7d:fb:e1:53:05:ce:
af:34:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:32 2025 by rpki-client