This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
File: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json)
Hash identifier: vb46dqgrqMI4XZz/4mPTISxpsQsvNAYIAUdCJ3Qsjps=
Subject key identifier: B1:37:17:EE:B2:B2:85:59:1B:87:07:97:4E:9B:27:1D:93:96:FD:43
Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94
Certificate issuer: /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
Certificate serial: 3109E13EC5C533C6BD6132CF6B02BEACF134E53E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
Manifest number: 0493
Signing time: Wed 03 Dec 2025 08:50:49 +0000
Manifest this update: Wed 03 Dec 2025 08:45:49 +0000
Manifest next update: Sat 06 Dec 2025 10:51:49 +0000
Files and hashes: 1: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: gcM2jLl0WN7AaDA/EzDP3nEggBqALNWMx9d4cFz7B8A=)
2: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl
rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 10:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:09:e1:3e:c5:c5:33:c6:bd:61:32:cf:6b:02:be:ac:f1:34:e5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
Validity
Not Before: Dec 3 08:45:49 2025 GMT
Not After : Dec 6 10:51:49 2025 GMT
Subject: CN=B13717EEB2B285591B8707974E9B271D9396FD43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:6f:97:af:41:46:a8:84:15:38:b6:c1:29:
19:b3:7e:c7:04:6e:dd:b9:bc:cb:90:25:36:5b:15:
d7:14:26:a8:a1:98:12:42:b8:ea:88:f3:8b:7d:9e:
8f:85:a1:c2:f2:e5:e1:96:76:80:e9:96:95:48:f6:
4c:76:11:41:18:d3:01:17:11:52:3d:5a:75:01:ce:
a3:a1:e1:73:1c:48:37:d8:02:e0:92:92:92:4e:3f:
58:15:f4:9e:c3:d8:70:cf:f8:35:1a:10:8b:1b:e2:
ed:c3:91:c9:1f:e3:5e:80:7f:31:f5:5d:57:3a:20:
8c:24:18:ba:6a:6f:c2:a4:bc:0b:4e:f2:8a:7f:95:
ed:5a:7e:3e:79:34:eb:6a:cb:b8:c7:47:41:30:56:
2d:66:14:fb:5b:04:38:71:24:dc:e6:ee:62:d9:93:
a5:01:3d:f5:49:db:5f:a8:1d:b0:0d:57:68:8b:1f:
02:34:b0:83:5f:18:45:10:e7:45:49:5e:bf:14:80:
e0:dd:4d:e4:e9:4c:91:6f:82:17:ab:c1:cc:9c:03:
41:52:fb:c2:27:00:f7:0e:4c:1e:c4:1e:3c:7f:96:
bb:23:a7:6c:9b:e2:58:82:a8:ba:9c:8d:2d:92:99:
91:de:8a:62:54:ba:c6:fe:cf:b2:26:87:7a:8a:9f:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:37:17:EE:B2:B2:85:59:1B:87:07:97:4E:9B:27:1D:93:96:FD:43
X509v3 Authority Key Identifier:
keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:57:b9:b4:42:86:ca:52:05:50:5d:07:4f:01:29:e3:65:07:
59:22:25:66:c4:b2:10:c3:a4:27:95:91:8f:a3:95:58:94:a7:
38:63:0f:78:7a:62:20:4b:70:5e:c1:ae:78:fb:d7:6a:b8:04:
05:cf:55:6d:48:3c:0d:96:54:03:1a:b9:b8:7a:66:fa:7d:36:
81:9f:cc:fe:ce:5f:8c:54:73:09:c0:f3:c8:37:33:df:be:60:
97:45:6a:16:45:aa:7e:30:00:f3:6c:08:3f:01:83:9d:d1:a1:
5b:49:61:5a:4f:37:d7:b5:af:e8:c1:6b:03:48:e1:a5:6e:62:
bd:80:4c:f0:6a:35:ea:ed:e4:86:05:78:1c:6f:07:3c:93:24:
90:45:10:1a:74:a8:eb:ab:1b:b2:3d:2d:c8:4e:40:8d:41:23:
46:47:7d:4c:1a:2b:4c:4a:9c:89:f1:bc:4e:a1:51:ee:f1:ab:
70:04:0a:c3:1e:2a:d0:19:49:f2:ff:32:53:a0:4e:29:1c:89:
e0:c1:de:1b:d8:ca:e8:39:87:83:1d:37:f6:bf:ce:db:cc:56:
b1:85:a2:64:16:ae:64:77:b8:2e:3a:e9:1f:e0:8f:42:f7:c9:
8d:33:9c:8a:55:0e:fa:7c:44:26:0e:be:9a:05:d8:1a:4c:7c:
95:48:88:53
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMQnhPsXFM8a9YTLPawK+rPE05T4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFD
MUE3Njc5NDAeFw0yNTEyMDMwODQ1NDlaFw0yNTEyMDYxMDUxNDlaMDMxMTAvBgNV
BAMTKEIxMzcxN0VFQjJCMjg1NTkxQjg3MDc5NzRFOUIyNzFEOTM5NkZENDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/G+Xr0FGqIQVOLbBKRmzfscE
bt25vMuQJTZbFdcUJqihmBJCuOqI84t9no+FocLy5eGWdoDplpVI9kx2EUEY0wEX
EVI9WnUBzqOh4XMcSDfYAuCSkpJOP1gV9J7D2HDP+DUaEIsb4u3Dkckf416AfzH1
XVc6IIwkGLpqb8KkvAtO8op/le1afj55NOtqy7jHR0EwVi1mFPtbBDhxJNzm7mLZ
k6UBPfVJ21+oHbANV2iLHwI0sINfGEUQ50VJXr8UgODdTeTpTJFvgherwcycA0FS
+8InAPcOTB7EHjx/lrsjp2yb4liCqLqcjS2SmZHeimJUusb+z7Imh3qKnwKxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsTcX7rKyhVkbhweXTpsnHZOW/UMwHwYDVR0j
BBgwFoAUMWsNeBWof1qgfsng2PyFmsGnZ5QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MWNhOTQzNS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMC8zMTZCMEQ3ODE1
QTg3RjVBQTA3RUM5RTBEOEZDODU5QUMxQTc2Nzk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFDMUE3
Njc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1
MWItYzFiNDJlYjBlMmY3LzAvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1
OUFDMUE3Njc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFxXubRChspSBVBdB08BKeNlB1kiJWbEshDD
pCeVkY+jlViUpzhjD3h6YiBLcF7Brnj712q4BAXPVW1IPA2WVAMaubh6Zvp9NoGf
zP7OX4xUcwnA88g3M9++YJdFahZFqn4wAPNsCD8Bg53RoVtJYVpPN9e1r+jBawNI
4aVuYr2ATPBqNert5IYFeBxvBzyTJJBFEBp0qOurG7I9LchOQI1BI0ZHfUwaK0xK
nInxvE6hUe7xq3AECsMeKtAZSfL/MlOgTikcieDB3hvYyug5h4MdN/a/ztvMVrGF
omQWrmR3uC466R/gj0L3yY0znIpVDvp8RCYOvpoF2BpMfJVIiFM=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:10 2025 by rpki-client