This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
File: 0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json)
Hash identifier: MHG52/ealciKM+tiw9j5H87GdSWCg/hGdO9Etv7Up1s=
Subject key identifier: 4A:32:28:A6:C2:D4:B7:93:06:83:B9:BC:D6:8A:13:8B:00:C4:B7:06
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial: 45A1D254D91E9289B0491CD8094AE3F2C927B892
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
Manifest number: 039C
Signing time: Tue 02 Dec 2025 12:32:29 +0000
Manifest this update: Tue 02 Dec 2025 12:27:29 +0000
Manifest next update: Fri 05 Dec 2025 22:01:29 +0000
Files and hashes: 1: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: keDZ5dqo7QpwKbY9EEgBghaBvUKpvyvuxTWbyrg58Eo=)
2: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: KL228cga7a1bNEm7kb6XRXWsbns4cTt5gKwQ/DSxWzM=)
3: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: 3F5ryh384+w3GpvdHsyBJS1AxEbRZUnJ/gwprNobPkU=)
4: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: PwS8ZteZSgPMYr/+U7TBWB1NbbKeXLIctaDRv9tMXAw=)
5: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: fYJfmsjf+SULVX6dy88bE8cQRoUB/HUNHP8Mc9BU5Es=)
6: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: AljrwxcXPRJV2CeaxgkjeFz1mPYn0NpdJRkpDNeohWs=)
7: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: L9UqHBOT0KM8Y3HKq7TuZiV7NwWM18YFSbtkcApuAS0=)
8: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: neHLBe/fEcPkBE3oSjIGkPPuzPFnKvLrnK1gADqMmBU=)
9: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: F5F4og+0ANkMp2eyG+y4uSqqLHGppY2rxvIFdOjz0YY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a1:d2:54:d9:1e:92:89:b0:49:1c:d8:09:4a:e3:f2:c9:27:b8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Validity
Not Before: Dec 2 12:27:29 2025 GMT
Not After : Dec 5 22:01:29 2025 GMT
Subject: CN=4A3228A6C2D4B7930683B9BCD68A138B00C4B706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:ed:f8:1c:ae:f5:b5:13:7f:b2:48:88:b4:
a7:c1:f8:40:eb:7d:95:7f:ae:1f:f9:e7:9a:20:8e:
38:ab:1b:73:b1:71:a4:5f:31:76:ba:28:31:37:7a:
53:ab:b8:1e:e7:2b:0a:08:d9:eb:06:f9:ed:f9:17:
09:de:99:87:3b:29:40:5d:8a:9e:5c:4b:b6:89:c1:
09:77:e3:7c:fb:b7:57:9b:19:77:82:c8:90:b7:50:
93:a3:df:bf:ec:69:f3:20:e8:cb:b9:3b:39:f0:0f:
38:c8:32:13:b9:08:e2:02:35:0f:15:6e:b4:31:c0:
94:5a:f7:5b:2d:c8:61:28:35:44:79:06:c0:59:5b:
b2:80:91:ab:10:8d:ad:b7:b9:41:6f:79:91:3a:05:
9e:f3:76:7c:df:27:13:f1:94:b4:b3:28:c9:8b:cb:
ce:6f:70:83:0f:d5:48:db:68:d0:db:3d:62:c7:75:
24:a1:79:02:9e:0b:84:25:64:91:de:57:ee:55:f1:
d2:09:a2:8a:fc:23:f5:9e:67:79:50:74:f0:a9:95:
3d:13:ba:21:5d:a8:8e:cb:f8:c1:be:e3:fd:9c:96:
79:19:00:98:6c:27:df:39:60:4e:c6:ac:49:82:d4:
5b:41:5e:a9:1c:e1:d5:d8:51:52:a0:0d:c6:d6:46:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:32:28:A6:C2:D4:B7:93:06:83:B9:BC:D6:8A:13:8B:00:C4:B7:06
X509v3 Authority Key Identifier:
keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e3:6a:fe:07:61:d4:ff:b4:54:bc:00:c0:aa:33:3b:19:86:
0b:55:99:63:09:a9:cc:04:3e:12:80:50:52:ad:49:15:5d:9e:
32:12:4b:62:d7:f6:e1:fb:55:59:3e:6c:28:de:c3:24:62:fc:
93:94:51:0f:84:f8:51:58:9c:67:59:df:96:e4:c5:b3:fc:1a:
ae:18:45:8c:87:bd:33:e2:91:37:a0:c8:f5:5e:f5:4b:41:d0:
6a:68:6e:ec:3f:80:1a:16:bb:26:48:bb:d1:e6:e3:67:91:7f:
1e:99:a9:6f:e3:ae:dd:6a:e6:ae:64:dc:a6:b0:8f:09:82:48:
11:ca:76:fd:c6:da:5a:b5:8e:54:c0:48:ec:90:50:65:ce:13:
bf:2d:6e:34:fd:c5:8d:01:4c:91:e4:88:38:39:b6:7b:92:ed:
47:e0:f8:8e:c2:1c:3b:40:97:24:dd:d1:c7:6d:56:cf:7b:da:
e8:f9:79:65:3a:cb:ce:c0:11:04:89:e2:81:23:59:ed:1d:78:
b3:da:d9:33:22:22:09:0c:dd:f6:71:16:21:c0:fe:62:57:4c:
2e:c9:bd:20:71:8c:ef:b5:04:a9:a2:9f:ea:f7:a9:37:32:7f:
e6:68:1f:9d:bc:00:04:f9:7c:ee:a3:66:c7:67:0c:20:84:9c:
5b:a5:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:42 2025 by rpki-client