This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json)
Hash identifier: xxCM0u5a5Ka2oifPtdeXSmdLcHr4JMFQI/ARxewqbPc=
Subject key identifier: D6:01:07:50:12:EF:C0:C0:06:31:6C:70:A0:E2:F0:FA:86:B9:C5:9E
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial: 676F598F2DF09CF4DC4F0444584130B840808160
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
Manifest number: 04E6
Signing time: Mon 01 Dec 2025 20:40:55 +0000
Manifest this update: Mon 01 Dec 2025 20:35:55 +0000
Manifest next update: Fri 05 Dec 2025 08:03:55 +0000
Files and hashes: 1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: gZ/47btYmAwNaKTb4QuVPehADmDq/9ekijz8mc4RaPo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 08:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6f:59:8f:2d:f0:9c:f4:dc:4f:04:44:58:41:30:b8:40:80:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Validity
Not Before: Dec 1 20:35:55 2025 GMT
Not After : Dec 5 08:03:55 2025 GMT
Subject: CN=D601075012EFC0C006316C70A0E2F0FA86B9C59E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:62:f8:63:26:9c:1a:8c:58:87:40:ab:3b:
39:6e:3d:0d:31:c4:9c:e8:86:27:83:e3:41:ca:7e:
ee:77:ff:d5:80:b6:cd:bd:1c:ed:5d:ff:eb:f1:ff:
35:1a:d3:96:8b:08:84:48:23:c8:95:6d:dc:0d:c4:
98:5a:18:75:a3:91:46:92:e8:06:41:d2:d6:05:57:
e4:a7:09:b5:04:dc:f6:12:4f:e2:7b:43:23:80:f8:
71:5b:87:d7:a5:d8:62:9e:83:a9:44:ba:52:5e:79:
02:68:52:47:93:11:97:8b:06:ec:a7:b6:bc:39:e7:
a1:a2:6e:ae:ed:bb:3a:00:68:75:27:93:43:c0:1a:
a4:fa:69:65:79:c7:96:3d:3f:63:f1:6d:d5:26:4e:
cc:f2:67:6b:b6:a5:42:a8:1c:da:12:e4:27:44:22:
62:f6:01:7b:d7:82:93:66:1b:9f:c9:9b:78:cb:98:
82:91:2f:b2:cc:bf:6d:bf:65:3b:3a:ba:42:93:07:
86:48:59:f8:08:49:a5:14:df:c1:b0:39:f5:83:83:
93:8f:f5:e7:cf:24:d2:94:d9:56:f0:4e:90:a0:ff:
4f:e7:7b:b1:42:40:f9:cc:94:e2:9c:32:65:6c:5a:
26:cc:29:ef:1c:0b:d3:12:2d:e9:1f:2b:13:b5:58:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:01:07:50:12:EF:C0:C0:06:31:6C:70:A0:E2:F0:FA:86:B9:C5:9E
X509v3 Authority Key Identifier:
keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:db:ac:3f:56:f3:94:ca:89:d6:c7:9a:b0:48:9d:4f:97:78:
c8:85:6c:1d:98:d7:47:0f:67:3c:e3:e3:ed:0b:85:da:41:ee:
60:29:2f:59:d9:09:b7:0f:19:73:23:68:0f:be:89:e8:a4:de:
68:17:c1:24:71:ae:90:c4:17:69:66:b6:df:5b:c1:a5:36:1a:
a3:40:98:a8:41:aa:d2:8f:6e:7d:05:13:74:80:b0:56:e7:30:
21:7a:0d:78:19:ec:cd:3e:a7:6d:61:92:65:74:57:db:80:32:
62:84:66:30:35:4e:2d:bb:4b:8f:11:49:e7:65:8e:ed:ba:d1:
97:23:e7:e7:d9:76:69:a1:ff:31:73:99:a9:26:6b:79:a6:4e:
4d:39:56:e7:e9:12:e9:32:a0:a1:ff:19:72:51:ba:7f:74:31:
48:07:4f:37:b5:25:cb:52:23:14:ba:56:e9:70:f4:47:a8:04:
5e:2b:2c:dc:e3:bf:4d:60:41:a1:b1:fb:be:eb:d2:c6:66:9e:
3c:fc:b5:92:74:58:ae:ff:81:f0:b4:97:c1:00:2d:4b:67:24:
9e:de:17:82:03:75:55:76:fe:08:76:be:01:3f:3c:76:1a:9c:
bf:5f:53:d8:a1:25:a8:9b:19:a9:6c:b7:50:8b:78:83:ec:28:
46:45:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:52 2025 by rpki-client