This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
File: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json)
Hash identifier: d2Ey+F5pu/TGw0G4Qtlavj0ltlfnTmqtU84ZbFxPMG8=
Subject key identifier: 23:A7:DB:7E:51:1B:0D:75:2F:73:19:12:1F:79:0E:A6:5F:9C:43:E7
Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04
Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004
Certificate serial: 4DC53E15BAFFE250A44C8FEB5D5FF06C3F8E0284
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
Manifest number: 0484
Signing time: Wed 03 Dec 2025 11:01:11 +0000
Manifest this update: Wed 03 Dec 2025 10:56:11 +0000
Manifest next update: Sat 06 Dec 2025 20:06:11 +0000
Files and hashes: 1: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: jBIk4wkVgGjloIIg6NRqp4zTN00kP4U3bTVDo1uJLy4=)
2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: kXJhf8bjfIsjZr7MyRalHajFn6WxrxEgkOVjsPKw9mY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl
rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c5:3e:15:ba:ff:e2:50:a4:4c:8f:eb:5d:5f:f0:6c:3f:8e:02:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004
Validity
Not Before: Dec 3 10:56:11 2025 GMT
Not After : Dec 6 20:06:11 2025 GMT
Subject: CN=23A7DB7E511B0D752F7319121F790EA65F9C43E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:ee:e7:f5:74:02:77:29:34:e7:58:4f:81:
09:79:05:57:7e:ea:9c:57:ed:d2:f6:5c:03:06:72:
4c:9b:34:ee:bc:87:2b:2e:b6:61:be:bc:32:e7:16:
52:fe:68:96:58:f5:1d:83:75:a7:87:54:a8:09:ff:
b9:98:2a:2e:73:41:8b:61:86:f2:0b:8c:71:17:d3:
27:c0:02:46:85:c7:65:13:8e:7a:2e:03:30:da:79:
e0:e8:cb:be:4f:d1:45:fe:c5:88:78:62:98:dc:ec:
db:18:5c:de:55:4d:ae:9a:91:2a:f0:f9:00:0c:a5:
df:b2:5b:bb:4a:e5:08:69:cd:d5:fb:c4:65:01:95:
ff:72:02:01:5e:d3:45:1a:3e:da:82:b3:94:8c:df:
96:b4:0c:9f:4f:3a:e7:2e:38:4b:27:22:ab:de:4f:
9e:59:c7:da:94:92:50:e4:08:8b:8e:ca:b8:c8:e0:
09:f3:f4:d8:a8:3b:00:70:10:46:8f:3b:d2:1a:1e:
1d:65:50:fb:e0:25:51:af:3d:11:69:d8:30:26:de:
a5:41:26:67:c1:ec:d2:26:98:27:65:fb:f6:82:09:
72:60:8a:37:cd:2d:4c:91:f0:2a:a7:74:bb:0e:ed:
7f:d4:75:bc:cd:8a:7f:8e:12:ea:19:ad:b4:f6:67:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:DB:7E:51:1B:0D:75:2F:73:19:12:1F:79:0E:A6:5F:9C:43:E7
X509v3 Authority Key Identifier:
keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1c:23:ce:8d:b4:82:e9:66:d7:0a:08:c3:a6:85:bf:e2:73:
69:f5:a8:92:cf:35:61:15:64:2c:a5:90:01:6a:f9:ff:68:46:
72:d1:ed:28:0e:6c:38:e6:8c:76:47:64:37:40:63:a2:60:4d:
38:dc:2e:f9:ed:c6:ba:35:4b:94:eb:b6:aa:33:f3:25:c9:56:
df:e7:8f:e0:70:02:84:c2:41:8f:18:a8:45:fc:55:2c:0f:a4:
41:7c:5a:3a:c8:55:0d:8e:78:c7:5d:2a:3f:6c:99:b0:06:e4:
ac:05:17:b3:8f:b9:11:1f:03:99:de:cf:97:d7:6c:e1:8b:9b:
47:3b:b4:a6:b1:f7:fb:c9:9a:79:a7:0c:f6:1c:2e:dd:21:58:
23:45:c7:b2:f4:3e:ab:84:8c:50:78:91:ba:93:33:1a:50:21:
a0:c0:ad:3b:eb:d5:2e:e8:35:2e:22:9b:42:e1:73:89:92:ad:
c5:0f:99:f1:ef:58:bf:dd:fd:17:29:dc:e2:4c:d0:a9:1f:27:
18:a4:ae:7a:9e:74:1b:b7:37:f0:ba:72:ca:02:0e:7c:8f:c3:
c7:1f:f6:5e:02:77:76:48:89:26:c2:94:a5:a6:c9:b1:34:13:
9c:e3:b4:22:e8:fb:c7:d5:d1:b9:a9:2d:70:6c:cc:c2:5b:ff:
91:9f:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:35 2025 by rpki-client