This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json)
Hash identifier: 4SkVDX3wQT7cPW6VlnuuKsZ+S51LC3k8A1DeurJ4eCo=
Subject key identifier: 35:EC:FE:16:C4:E9:32:A2:F8:E1:21:61:A5:6B:C3:6D:56:BA:E7:B7
Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Certificate serial: 4B89EC37E2D3A0FD42DD247D8170E848D5634029
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
Manifest number: 0533
Signing time: Mon 01 Dec 2025 12:51:19 +0000
Manifest this update: Mon 01 Dec 2025 12:46:19 +0000
Manifest next update: Thu 04 Dec 2025 14:33:19 +0000
Files and hashes: 1: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: OowGJ2/0UoPPY1EZaxt31UF9ad39Dlb2sALANKY7cqA=)
2: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=)
3: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=)
4: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=)
5: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=)
6: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=)
7: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=)
8: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl
rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 14:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:89:ec:37:e2:d3:a0:fd:42:dd:24:7d:81:70:e8:48:d5:63:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Validity
Not Before: Dec 1 12:46:19 2025 GMT
Not After : Dec 4 14:33:19 2025 GMT
Subject: CN=35ECFE16C4E932A2F8E12161A56BC36D56BAE7B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:01:9b:ab:45:34:72:52:d8:1c:d1:c6:8a:
27:d1:2f:06:b8:b5:50:6d:96:69:c7:ab:ba:d2:3c:
b8:6e:1e:34:dd:2a:b2:54:2d:7b:80:06:b1:7e:42:
92:fc:28:8b:4e:f8:a3:6b:d2:3c:43:b2:d3:7d:6c:
2d:4a:47:98:69:3b:81:ff:9c:b7:57:2f:3e:b4:fc:
f6:15:85:1f:a5:9a:53:96:52:04:ea:18:0d:e3:30:
a2:22:1a:a3:5c:e4:30:12:fa:0d:99:88:2a:dc:70:
cd:b1:bd:0f:08:63:a6:50:7e:71:2d:6f:04:de:91:
61:43:0c:bd:83:4d:d8:d3:7f:31:1e:f5:9a:88:ca:
36:db:b4:4a:e6:c9:56:a8:4e:f6:ce:91:fd:5f:6a:
85:66:11:91:8b:f8:97:8d:d8:59:c0:40:a5:76:c9:
d1:46:b5:c2:9d:81:10:2c:e6:1a:4b:18:29:00:4a:
07:c8:88:96:e1:22:de:94:69:f7:ea:7c:0a:09:5b:
9c:2b:43:99:50:3b:80:22:4d:ea:bf:e5:c7:7a:fe:
5a:c5:69:d3:56:36:9d:7b:4b:c5:8f:57:60:14:3a:
8c:ae:0b:6c:75:d4:8e:4f:a0:d0:72:e8:2a:e0:b9:
68:9c:88:61:1f:e5:89:22:eb:c6:6f:93:0b:83:9c:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EC:FE:16:C4:E9:32:A2:F8:E1:21:61:A5:6B:C3:6D:56:BA:E7:B7
X509v3 Authority Key Identifier:
keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4b:cd:20:5c:ce:21:8c:19:54:fc:88:81:13:26:55:87:23:
58:12:e0:9e:ee:80:2b:f0:b7:50:76:74:60:fd:dd:bb:2d:7a:
24:8b:1f:b7:58:64:bc:07:e3:37:92:e4:1a:ff:9a:06:a8:4e:
15:71:92:f8:eb:68:12:33:64:66:87:10:83:01:0f:0d:bb:fc:
40:93:a6:84:0a:53:bc:55:ec:c1:a9:b8:92:40:fa:cf:d1:8c:
6c:7c:18:62:70:bf:e3:07:bb:7d:e8:d3:40:d6:9d:84:c4:05:
82:63:1d:95:e7:18:a2:62:0a:68:48:09:60:07:67:65:92:63:
b2:cd:0b:40:b4:67:6e:1a:49:8b:1f:bf:6b:bc:69:11:6f:39:
9c:df:5d:a0:54:86:3a:97:07:ff:48:d5:e0:1e:2c:47:2e:ed:
65:59:9b:50:c1:5b:d2:ff:a8:b3:e9:93:e1:9a:6f:4e:4d:c7:
6f:e2:53:f2:28:1e:08:1e:0c:32:45:e8:98:18:e6:ae:3e:cf:
1b:d3:50:aa:02:53:1a:42:01:9c:c8:5b:0d:ee:6e:51:be:72:
58:f1:62:a1:2e:1e:56:99:1e:93:a5:1b:d6:41:35:34:1e:34:
45:c8:e3:a1:c7:c1:da:d3:ff:ca:b8:bb:d5:95:4d:16:5a:b8:
86:3f:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:35 2025 by rpki-client