This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft
File: 802B50E70791398C3EA43DDCECAA739EA01A638B.mft (raw, json)
Hash identifier: Yf1gP6rFxG6dLuPPX5kzTxTFBMS/mlsiZJxIT9h+gqA=
Subject key identifier: 75:AE:D6:BA:D2:86:44:05:F4:41:44:A4:FB:B5:D5:61:4D:A7:24:24
Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B
Certificate issuer: /CN=802B50E70791398C3EA43DDCECAA739EA01A638B
Certificate serial: 5A8E8B51D2F2192A7A9F6C28C5AE414F43BD7FC1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft
Manifest number: 4C
Signing time: Wed 17 Dec 2025 13:41:48 +0000
Manifest this update: Wed 17 Dec 2025 13:36:48 +0000
Manifest next update: Sat 20 Dec 2025 20:27:48 +0000
Files and hashes: 1: 802B50E70791398C3EA43DDCECAA739EA01A638B.crl (hash: hFYBppXLmjAq4s+AkYHsIyV0FcHIJOoce+yAywXj8Mw=)
2: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: 7lyU4ARZl0iZzxpjuPYTjPexrJrOA5CaL9sS8oYLAAQ=)
3: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: +fO5TDM3co6TWyHEak4qQLIrEN8/2YmZcoMcyUXp4Tk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl
rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 20:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8e:8b:51:d2:f2:19:2a:7a:9f:6c:28:c5:ae:41:4f:43:bd:7f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B
Validity
Not Before: Dec 17 13:36:48 2025 GMT
Not After : Dec 20 20:27:48 2025 GMT
Subject: CN=75AED6BAD2864405F44144A4FBB5D5614DA72424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:6b:2b:a5:f5:0b:90:4b:9c:7f:9e:39:53:
ca:2f:01:34:f8:7e:16:53:17:bb:b9:1d:24:f2:98:
2e:bf:1d:2c:b5:b2:c0:82:89:89:b8:6d:05:f2:9a:
9a:55:3a:ca:dc:3e:72:3d:a5:b4:17:4e:0e:14:b2:
45:28:f7:52:6d:d8:9d:ab:ed:b5:d9:58:db:a3:cd:
dd:c6:b7:ab:66:08:0f:c5:b5:ff:c8:68:e5:15:38:
3b:2e:7d:5f:db:9f:2a:ff:46:06:d5:79:71:ac:e9:
94:93:c8:72:cb:3e:e5:0b:22:f1:2f:c9:1c:30:1c:
67:03:68:ce:5a:55:c3:4f:83:e6:a2:42:56:37:50:
96:7d:8d:a8:af:33:8b:e6:c7:b2:70:b7:d7:bc:7b:
bd:6e:05:1a:16:df:45:4e:25:67:d4:9a:ca:27:7b:
2c:60:8f:cc:5c:96:2d:eb:83:7a:b1:28:49:f2:c0:
27:9d:a3:28:68:6c:6d:49:e0:c9:50:1f:b6:2e:55:
d3:bb:a4:c6:3f:bc:91:54:c4:d6:b5:8b:6f:2e:d2:
bf:2f:97:2f:a8:39:e0:1e:d2:d1:35:c8:d3:a7:4b:
f9:d9:ff:45:e5:60:31:36:f3:ae:44:ea:1b:b3:c0:
f2:c9:91:aa:b4:41:e0:50:dd:bd:dc:b0:be:b6:fa:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:D6:BA:D2:86:44:05:F4:41:44:A4:FB:B5:D5:61:4D:A7:24:24
X509v3 Authority Key Identifier:
keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:a8:e4:0c:32:bf:bb:09:50:01:22:73:da:80:14:51:c2:
af:7a:8d:2b:92:ec:e2:69:d5:31:7a:41:cc:cc:d7:f9:6a:26:
9a:c6:7e:0a:0c:f7:f7:3e:26:72:fd:72:70:89:c3:73:1d:95:
0f:a5:0f:94:de:60:2b:c3:9c:b8:71:0e:ff:95:f0:60:7f:a6:
ba:5c:a3:85:d3:d7:49:eb:c8:06:cb:40:6d:78:8e:8b:cc:23:
b8:c4:2e:cb:c5:ff:c8:3b:4c:67:0f:7e:c4:db:17:a2:d9:88:
6f:27:f1:47:20:9f:80:9a:f9:09:f7:5d:da:40:11:99:2c:dd:
c3:74:9b:9d:44:e6:45:b9:31:c9:28:ac:f6:14:01:0d:12:22:
1a:81:37:2b:e7:8d:a1:46:d0:28:a9:e0:4d:2c:f5:32:2b:18:
f9:f7:35:40:8f:86:f4:86:fa:db:82:19:5e:01:0e:ea:89:5f:
d9:17:fe:e5:11:e5:2d:5a:ad:40:bc:32:4e:89:03:05:27:7a:
b8:f3:19:30:86:97:5f:1d:42:19:f2:72:41:2c:59:ec:a0:0a:
cf:17:1b:3a:13:47:6c:01:eb:16:79:d5:19:6e:dc:8d:46:00:
66:9a:1e:6a:3f:e2:10:bc:69:3b:a3:13:07:2c:a1:7e:6d:76:
d9:48:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:46:18 2025 by rpki-client