This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
File: 7E9242F2F0756C1DB232479261838C3701005D48.mft (raw, json)
Hash identifier: VpK5nQk17sWvFgG4wrHvJO4Q2G2uphBkLjHX/yAjv4M=
Subject key identifier: 61:46:23:BA:FE:F8:95:BB:38:27:53:09:E9:8D:76:35:52:47:60:37
Authority key identifier: 7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48
Certificate issuer: /CN=7E9242F2F0756C1DB232479261838C3701005D48
Certificate serial: 351B3620113CAB0DE1B3D6849E1D372EE9E1555E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
Manifest number: 025C
Signing time: Thu 18 Dec 2025 18:42:13 +0000
Manifest this update: Thu 18 Dec 2025 18:37:13 +0000
Manifest next update: Sun 21 Dec 2025 23:48:13 +0000
Files and hashes: 1: 7E9242F2F0756C1DB232479261838C3701005D48.crl (hash: BcGmXJ9l/RRF5tV6W3Skk5DuPHBTSYhHxEMqxxYpLIs=)
2: 3130332e3138352e34382e302f32332d3234203d3e203538383230.roa (hash: 4jQNco8yphk6G6ao8AcbPz+Ne3AU3S09XO4RxcSoB0A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl
rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 23:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1b:36:20:11:3c:ab:0d:e1:b3:d6:84:9e:1d:37:2e:e9:e1:55:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E9242F2F0756C1DB232479261838C3701005D48
Validity
Not Before: Dec 18 18:37:13 2025 GMT
Not After : Dec 21 23:48:13 2025 GMT
Subject: CN=614623BAFEF895BB38275309E98D763552476037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:76:5a:dc:76:35:82:36:a7:1c:35:65:ba:
94:66:f7:90:b0:20:76:74:cb:e3:ac:1d:c3:a8:ae:
99:61:b9:a1:ce:c9:fb:2e:30:f1:b1:82:aa:c0:7a:
9b:0a:bf:53:cd:c1:af:86:58:5b:d8:7e:b9:9e:f8:
a6:34:d8:1d:a2:84:da:59:98:bd:54:16:e4:3f:db:
18:2e:fe:16:c3:e4:6e:11:92:41:82:8b:5e:b9:9d:
45:f4:10:9c:a5:d5:06:cd:46:3d:d7:89:6a:cc:e5:
dd:71:59:a4:a1:6a:46:bd:b7:bb:03:d7:8d:ae:35:
62:67:83:9e:62:a6:79:3d:18:72:64:d4:63:42:0c:
1d:6e:9c:8a:35:f8:8c:67:af:7e:e2:bb:cc:a6:20:
c7:6d:c2:a9:91:c3:fe:86:7d:c4:e3:df:57:90:5c:
75:3b:16:c2:6e:34:11:76:3d:b2:56:4b:77:23:ff:
d8:c0:0d:8c:8f:ee:6a:cc:3f:ec:54:06:24:64:ce:
e4:31:19:71:b2:e8:52:c7:9b:49:19:d6:a1:a9:22:
0f:5b:4d:ec:d1:45:5b:87:12:4b:2e:bf:1d:c0:b8:
b5:a7:03:ec:d3:4a:fb:92:e3:c6:2a:f0:82:38:a7:
43:10:41:64:72:2e:af:e1:f8:97:17:dd:f3:e5:75:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:46:23:BA:FE:F8:95:BB:38:27:53:09:E9:8D:76:35:52:47:60:37
X509v3 Authority Key Identifier:
keyid:7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0e:fd:7f:0e:70:b1:c1:87:62:ab:dd:82:84:0a:f5:07:a3:
f8:55:1b:91:db:b9:d8:d9:9e:bd:69:75:e2:5e:26:ef:d1:58:
46:72:ca:e3:2c:ee:07:6d:cc:de:e0:3c:e7:1e:a6:1e:f5:a0:
eb:92:5b:d9:61:0a:9f:09:15:07:28:3f:78:b3:15:11:63:6a:
5e:a1:56:32:eb:f1:6c:7a:22:be:a5:9d:7e:5d:f7:4c:20:09:
c7:60:45:56:dd:77:75:fa:c8:e6:01:03:10:7a:3d:a7:a1:19:
41:8a:23:e5:42:5f:c1:e4:98:62:f6:36:ee:f6:f8:a4:e5:17:
49:34:9f:6a:ba:1d:fa:15:da:bb:b9:a2:7c:70:48:98:ab:ee:
7b:40:7a:7c:01:56:b5:00:b2:5b:85:cb:8c:fc:34:83:9c:40:
fd:e6:c2:8e:a0:91:b3:39:43:3a:8d:5a:e3:5e:44:d8:c9:ef:
7f:12:fc:a5:eb:28:c1:cd:d5:d0:d7:b7:83:77:65:7c:d0:a4:
ae:00:36:f2:33:62:38:9d:c2:61:2f:dc:ba:c3:ad:9c:e5:86:
37:4b:77:9f:38:4b:2a:dd:45:61:1a:85:d0:d2:72:ea:52:a8:
93:b4:32:f5:de:d9:81:09:40:ec:38:e7:c6:ec:e3:22:b2:c8:
8d:96:0f:f2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNRs2IBE8qw3hs9aEnh03LunhVV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcw
MTAwNUQ0ODAeFw0yNTEyMTgxODM3MTNaFw0yNTEyMjEyMzQ4MTNaMDMxMTAvBgNV
BAMTKDYxNDYyM0JBRkVGODk1QkIzODI3NTMwOUU5OEQ3NjM1NTI0NzYwMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LnZa3HY1gjanHDVlupRm95Cw
IHZ0y+OsHcOorplhuaHOyfsuMPGxgqrAepsKv1PNwa+GWFvYfrme+KY02B2ihNpZ
mL1UFuQ/2xgu/hbD5G4RkkGCi165nUX0EJyl1QbNRj3XiWrM5d1xWaShaka9t7sD
142uNWJng55ipnk9GHJk1GNCDB1unIo1+Ixnr37iu8ymIMdtwqmRw/6GfcTj31eQ
XHU7FsJuNBF2PbJWS3cj/9jADYyP7mrMP+xUBiRkzuQxGXGy6FLHm0kZ1qGpIg9b
TezRRVuHEksuvx3AuLWnA+zTSvuS48Yq8II4p0MQQWRyLq/h+JcX3fPldS9nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYUYjuv74lbs4J1MJ6Y12NVJHYDcwHwYDVR0j
BBgwFoAUfpJC8vB1bB2yMkeSYYOMNwEAXUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OTk2ODhhOS1lNzhkLTRhYmEtODNiYy01MTc4Njc5MTIwYWQvMC83RTkyNDJGMkYw
NzU2QzFEQjIzMjQ3OTI2MTgzOEMzNzAxMDA1RDQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcwMTAw
NUQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5Njg4YTktZTc4ZC00YWJhLTgz
YmMtNTE3ODY3OTEyMGFkLzAvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhD
MzcwMTAwNUQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEwO/X8OcLHBh2Kr3YKECvUHo/hVG5HbudjZ
nr1pdeJeJu/RWEZyyuMs7gdtzN7gPOceph71oOuSW9lhCp8JFQcoP3izFRFjal6h
VjLr8Wx6Ir6lnX5d90wgCcdgRVbdd3X6yOYBAxB6PaehGUGKI+VCX8HkmGL2Nu72
+KTlF0k0n2q6HfoV2ru5onxwSJir7ntAenwBVrUAsluFy4z8NIOcQP3mwo6gkbM5
QzqNWuNeRNjJ738S/KXrKMHN1dDXt4N3ZXzQpK4ANvIzYjidwmEv3LrDrZzlhjdL
d584SyrdRWEahdDScupSqJO0MvXe2YEJQOw458bs4yKyyI2WD/I=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:22:49 2025 by rpki-client