This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json)
Hash identifier: pjeJbNpRCGKuecYqhovS4ZFL5GrEgUb+3ipegTppPzY=
Subject key identifier: 09:FB:39:A3:40:99:27:8A:F9:30:B7:38:B9:A7:A2:E4:CD:86:69:1F
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial: 5E46B045E339C84AA7B38210A6981E1B0D031806
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
Manifest number: 0533
Signing time: Fri 12 Dec 2025 11:50:43 +0000
Manifest this update: Fri 12 Dec 2025 11:45:43 +0000
Manifest next update: Mon 15 Dec 2025 17:54:43 +0000
Files and hashes: 1: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=)
2: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=)
3: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=)
4: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: q7MYVDe8tru1sB0FUffGKEEgrSD4NEm9dGcmwtBqg/c=)
5: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=)
6: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 17:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:46:b0:45:e3:39:c8:4a:a7:b3:82:10:a6:98:1e:1b:0d:03:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Validity
Not Before: Dec 12 11:45:43 2025 GMT
Not After : Dec 15 17:54:43 2025 GMT
Subject: CN=09FB39A34099278AF930B738B9A7A2E4CD86691F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:38:f7:8a:48:5d:e8:dd:f1:7f:ed:dd:9d:
3d:fc:28:e8:7a:ef:79:b7:cc:59:ef:16:d8:88:5a:
1d:a8:2a:87:e1:46:cb:1f:ed:88:d2:9a:8d:b1:81:
f1:65:61:b8:64:1c:d8:2d:85:dc:20:d9:bf:31:e8:
32:43:02:1c:96:1d:30:1c:2d:57:a2:68:67:dd:81:
25:a8:71:9e:e2:40:73:23:dc:09:67:6f:f4:35:1b:
0b:74:b3:7a:17:60:14:6f:a2:2d:0e:c3:12:2e:b5:
74:89:d5:15:92:98:28:72:af:ad:17:d2:9f:18:58:
37:69:0c:b2:f4:32:d8:f7:2a:d5:c0:fc:16:bd:73:
b2:fd:24:fa:35:2b:01:1d:e6:42:69:3f:4d:f0:38:
1f:73:59:7f:7b:73:5e:9a:1b:b9:44:12:06:5c:16:
8c:02:1b:8d:d6:48:da:9b:12:01:72:3b:5d:56:0a:
2d:bc:55:90:27:ae:e3:12:64:60:9e:ba:ba:e7:e4:
a0:40:46:22:9c:b9:b1:2e:9d:45:02:e2:0d:a3:90:
f7:f6:5b:23:b3:e9:78:6e:20:85:d6:b3:6c:01:6f:
50:26:0a:9b:d8:31:9e:e5:6a:c5:aa:0c:c3:ed:b0:
53:19:6b:a7:56:52:8f:09:80:3b:2c:16:50:8e:4f:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FB:39:A3:40:99:27:8A:F9:30:B7:38:B9:A7:A2:E4:CD:86:69:1F
X509v3 Authority Key Identifier:
keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:01:37:38:1f:54:57:01:21:ac:a1:ea:f8:2f:d3:c4:ef:e0:
3a:cd:5d:06:ff:9e:a9:2f:84:d9:ef:eb:91:52:51:6f:52:59:
cf:72:d5:13:8d:74:6d:88:05:99:61:54:75:38:40:57:a6:5c:
99:9b:b7:a0:86:b7:93:c3:f8:6c:c1:3c:86:bd:0c:08:55:e0:
e2:45:bd:ff:4a:c7:92:e5:2e:01:f2:95:fd:0d:36:d7:51:76:
75:27:4f:4b:3e:35:19:13:fb:3e:4d:d6:00:db:40:8d:e1:30:
51:6e:2a:0d:33:ed:a1:69:77:5b:06:af:54:9d:f9:6b:66:f8:
23:79:2b:04:49:2a:f0:65:43:86:10:a3:60:ff:76:af:30:40:
db:ee:93:d7:d8:30:b8:70:4c:42:4c:0c:26:a0:05:26:fe:96:
29:c1:6d:28:af:aa:62:f4:ff:ed:9e:db:0a:70:45:4c:a3:1a:
91:51:3b:61:39:2b:e7:0a:ed:f3:65:4b:85:23:78:d0:fa:33:
ef:fa:23:2a:e1:aa:d7:e0:05:b4:e0:39:b2:2d:40:25:d2:12:
d6:d9:73:d3:f6:e4:eb:c2:9f:04:d0:68:53:73:12:03:2c:4c:
21:68:2d:3f:01:ee:f5:b4:39:c9:8f:e3:8c:dd:5a:4c:2f:5c:
6f:7e:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:57:07 2025 by rpki-client