This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft
File: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft (raw, json)
Hash identifier: evHTLLN7n7lIbaRy+xoUPJaDTn5k2GL6frBvciBYo2A=
Subject key identifier: D4:D8:27:E5:5E:10:C1:89:A4:12:EA:D5:A0:0F:A1:3A:19:4B:94:F7
Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41
Certificate issuer: /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441
Certificate serial: 20453DB9C0D2503A40042CA0DAB66783044A3D35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft
Manifest number: A7
Signing time: Sun 07 Dec 2025 15:21:57 +0000
Manifest this update: Sun 07 Dec 2025 15:16:57 +0000
Manifest next update: Wed 10 Dec 2025 18:57:57 +0000
Files and hashes: 1: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: wkYiZl4OD2/WIQUb3uhI0STi5SwbOPkvcCiktl/4DZc=)
2: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl (hash: eLVLLewkflXD7jR6f2dPujfc5KBJ0ntzMomLpsW1FG0=)
3: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: xK1cySsZG++2I6rCYVHEbww86m1izKvQx6hrvB42kz0=)
4: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: zf1MaGLqV/tw8WvNNhputR/GL/ayDucvUD33jfoZSO8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl
rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:45:3d:b9:c0:d2:50:3a:40:04:2c:a0:da:b6:67:83:04:4a:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441
Validity
Not Before: Dec 7 15:16:57 2025 GMT
Not After : Dec 10 18:57:57 2025 GMT
Subject: CN=D4D827E55E10C189A412EAD5A00FA13A194B94F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:3d:7d:49:41:c9:8f:16:55:00:96:73:3c:
39:d9:2e:01:83:90:b1:1f:67:cc:90:cf:74:57:aa:
fb:91:dd:3f:83:69:37:2b:5f:bf:35:bc:f2:aa:05:
03:c0:16:81:21:d1:ea:f8:52:2b:fc:31:9c:28:a8:
83:9b:ab:1b:db:33:92:a7:e5:1b:32:ff:c1:e1:0e:
86:99:0c:61:75:62:0f:35:82:59:c2:e8:db:f5:08:
d6:ed:7a:81:dd:79:b5:d7:9f:b9:4e:27:eb:bc:4e:
eb:2a:05:43:69:10:a3:06:bf:9b:86:04:a3:1d:43:
df:85:5a:66:a9:d4:31:a2:10:99:c7:25:57:5a:c7:
83:3d:a4:bc:51:51:85:c1:a1:cf:44:be:e4:5b:0e:
a4:c4:4d:91:ef:18:94:1e:49:e1:ba:2e:c8:ae:47:
1e:60:4a:da:32:85:9b:21:62:32:cf:d8:f9:75:4e:
c9:e7:c6:d7:b7:99:d5:60:70:e6:34:59:84:1a:30:
ca:3e:cb:ac:12:b3:66:41:f7:53:a5:5e:bd:e7:fe:
df:19:8d:1e:76:de:4a:f2:51:37:78:14:08:7f:90:
1c:81:e2:b5:67:2e:52:5a:b3:a0:ff:60:69:25:cb:
7b:30:69:65:12:d3:53:66:1e:04:44:41:3b:82:a8:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:27:E5:5E:10:C1:89:A4:12:EA:D5:A0:0F:A1:3A:19:4B:94:F7
X509v3 Authority Key Identifier:
keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:60:7d:c5:3a:c9:2a:db:d5:5d:d0:66:54:98:0c:97:2b:e7:
58:68:3a:fc:4d:17:40:93:58:6c:ef:b6:63:f6:bf:a2:69:3d:
57:6b:43:e3:cf:56:39:c6:6b:42:e4:a9:64:7d:3a:0a:0d:96:
14:6f:c2:68:5f:9a:ed:e2:ef:27:52:c6:b4:8c:d6:64:79:d1:
5d:ce:c3:93:20:1f:f7:8e:b5:8c:f6:b6:63:a9:62:5c:8d:cd:
42:5b:0e:a8:20:60:2b:16:0b:89:45:5e:65:46:65:e5:ab:be:
f1:c6:f8:37:31:2a:b7:e3:7b:25:a8:39:5f:bd:04:d3:96:7d:
12:96:ba:71:23:de:92:de:83:af:49:1b:77:0c:c8:f5:23:95:
f7:f5:d1:55:8f:c8:43:4e:04:70:ef:bf:db:b6:8d:1a:4c:07:
bd:bc:ad:2b:43:51:b3:ac:d1:69:5d:ea:7a:5e:0a:b6:ce:b5:
94:74:e6:f3:e1:fb:a5:31:43:f9:83:f6:36:2f:4a:59:3c:1c:
97:a4:ec:68:bd:41:3d:2f:f0:f4:5e:71:17:07:fd:45:e5:52:
e3:85:57:2a:ee:f3:58:27:77:ca:22:24:8f:d7:9c:62:2d:f3:
df:a1:65:51:bf:a1:0f:38:12:18:b5:10:ae:ac:63:b2:40:c3:
53:1e:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:52:29 2025 by rpki-client