This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json)
Hash identifier: UwVbRdOOXVeCEtXMDFs3TWsuUPwVHIxU3DeOyjjFIJ4=
Subject key identifier: 6F:7F:11:9E:88:3A:8F:70:42:83:AB:BB:4B:8A:23:7C:DB:80:80:12
Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F
Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F
Certificate serial: 30C1C8DA322C72025BC9F94F4B381672F86A43DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
Manifest number: 0142
Signing time: Tue 02 Dec 2025 22:40:00 +0000
Manifest this update: Tue 02 Dec 2025 22:35:00 +0000
Manifest next update: Sat 06 Dec 2025 06:22:00 +0000
Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: vbYUm9HzZG+FPUhVdhg7k3q9lhlbHaId8IfTXytPRsg=)
2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl
rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 06:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c1:c8:da:32:2c:72:02:5b:c9:f9:4f:4b:38:16:72:f8:6a:43:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F
Validity
Not Before: Dec 2 22:35:00 2025 GMT
Not After : Dec 6 06:22:00 2025 GMT
Subject: CN=6F7F119E883A8F704283ABBB4B8A237CDB808012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:e4:5e:2d:59:f1:58:b2:2d:12:d3:38:46:
15:88:c1:f2:6d:e6:6d:b3:0d:3b:9c:e8:ba:27:52:
31:de:70:f5:6a:84:b5:b9:78:94:bf:37:82:95:10:
85:70:30:a5:87:69:46:03:bb:37:17:d6:51:3b:3b:
ff:c3:a9:2a:d6:41:99:ee:89:1b:5e:22:47:83:06:
0e:7f:14:fb:e6:bf:16:27:a5:00:a9:03:7f:ce:e0:
27:9d:9f:69:db:18:13:b4:34:e2:a7:4d:cd:1e:34:
6d:56:6a:ef:a5:70:82:25:fb:b7:72:c4:e8:5b:bb:
40:4f:51:14:d1:c8:0f:58:e3:d6:5f:81:70:e1:ec:
43:0b:4f:67:e7:12:c0:0a:8c:36:b4:28:5a:e1:74:
bf:89:46:30:b5:d7:62:17:85:94:42:fd:f1:4a:a2:
5a:81:f6:59:07:8e:73:e6:a8:fb:ad:94:c0:f2:61:
6c:49:2d:c6:0a:28:bb:b6:71:bf:a7:aa:83:d7:cd:
f6:69:89:c8:13:5f:e7:03:f1:5c:fd:dd:3b:b9:6c:
e1:67:5d:4c:56:47:f3:cc:5d:00:02:09:80:b9:3f:
79:ca:ce:51:e5:14:2c:41:43:c9:b7:ed:33:ed:18:
55:a6:a2:0b:b2:57:f6:89:ef:30:21:c6:55:15:10:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7F:11:9E:88:3A:8F:70:42:83:AB:BB:4B:8A:23:7C:DB:80:80:12
X509v3 Authority Key Identifier:
keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:95:52:7e:4e:e5:d5:ff:b3:71:a3:62:3f:cb:70:c2:52:90:
86:22:ca:63:45:54:4d:48:87:52:3b:e4:ff:ed:38:63:8f:9e:
38:b3:b5:05:77:9f:dd:76:75:4b:5e:94:65:c1:8e:4b:88:15:
ac:bb:e6:63:5b:6d:9c:45:8f:cb:b2:90:a5:b1:b1:da:2e:0f:
63:8c:fc:e7:1d:8e:46:2a:e5:73:e4:32:34:6b:05:d7:58:9d:
9d:16:95:d0:24:db:b3:52:bc:87:ba:a0:e2:de:37:8f:0b:ca:
fb:82:4f:ae:65:78:5b:e1:3e:ce:85:bf:67:ba:95:a7:ae:ae:
06:32:e6:de:95:4d:54:a0:81:55:8d:be:ee:8a:e7:35:89:63:
39:ec:05:fb:3e:5b:17:1f:6d:e7:fa:fe:d5:e6:de:09:18:1c:
d6:01:cb:c7:7b:9a:1b:53:6c:0d:3c:b4:a2:20:ed:2a:1d:97:
b0:2e:17:6f:a4:80:6d:0b:59:06:9c:d3:00:72:e5:48:54:b1:
34:ec:18:26:0f:b6:f4:79:0b:ce:99:a3:9f:12:05:c4:63:c6:
55:22:4b:58:0b:bf:88:39:f2:75:ee:06:db:40:da:dd:d0:ae:
8c:9e:d0:1b:f1:4f:5c:67:92:85:a7:d1:d5:76:c8:1f:92:56:
7b:a3:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:59:52 2025 by rpki-client