This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json)
Hash identifier: DNPobFKL9uItQcGMw1A5OayaAoNg515PvPVRMKlKuAk=
Subject key identifier: DB:E7:2A:85:AF:44:F3:C1:45:2B:A7:53:E5:1C:3C:A8:13:A0:0B:30
Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2
Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
Certificate serial: 034B38752940AF271E53E36BAD2E79D439952A34
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
Manifest number: F2
Signing time: Wed 03 Dec 2025 08:51:11 +0000
Manifest this update: Wed 03 Dec 2025 08:46:11 +0000
Manifest next update: Sat 06 Dec 2025 12:15:11 +0000
Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: lefrwOabQU10d0NZgStVGpYKJwJPe6RM8jE+OrXv3Qo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl
rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4b:38:75:29:40:af:27:1e:53:e3:6b:ad:2e:79:d4:39:95:2a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
Validity
Not Before: Dec 3 08:46:11 2025 GMT
Not After : Dec 6 12:15:11 2025 GMT
Subject: CN=DBE72A85AF44F3C1452BA753E51C3CA813A00B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:64:a6:46:90:fa:ca:d9:f9:66:af:1c:0f:
bc:ff:b6:38:a6:11:88:7d:75:26:5d:6e:3f:b3:a1:
47:01:7e:61:e2:5f:47:b9:5d:3b:8f:37:3d:73:5b:
0d:b2:37:21:60:79:bd:e2:21:ad:26:1d:7f:8c:e2:
ff:52:d6:d4:1a:9e:6b:66:93:71:10:b6:6e:6f:d0:
a6:5b:1a:5d:90:af:42:e1:f7:70:1f:2b:34:7d:b8:
96:9a:42:fd:76:da:e6:5d:27:5b:12:f8:46:ff:76:
14:8b:18:da:b5:91:2e:8c:4b:52:48:50:7d:55:e4:
52:55:f7:7b:1d:88:b3:dd:ac:ee:a7:5a:70:8b:b7:
fa:31:14:48:ee:38:4b:57:67:2e:60:a6:84:3f:bc:
25:1e:67:30:a7:3b:31:fd:5f:54:c3:00:e1:06:f6:
56:ab:5c:7f:3d:20:14:63:72:88:88:39:67:0d:06:
70:6f:75:36:33:26:a6:d3:24:73:79:0c:78:22:93:
98:a9:7d:29:c2:96:44:c1:e3:37:8c:32:37:a0:61:
7d:91:4d:34:e3:72:b7:cf:63:4d:8f:52:26:de:3e:
68:c4:7c:c7:5f:8d:c2:c0:89:e0:bb:45:86:fa:07:
51:13:6c:75:11:7b:38:38:b3:f1:1f:a8:27:8c:eb:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E7:2A:85:AF:44:F3:C1:45:2B:A7:53:E5:1C:3C:A8:13:A0:0B:30
X509v3 Authority Key Identifier:
keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:31:52:0a:a0:8e:57:9a:1e:2c:f5:3a:d7:1a:bd:20:6f:17:
8a:d2:fa:7e:0c:4c:80:9a:ec:8f:fc:fd:f7:29:92:56:8f:9d:
77:7a:54:16:fb:cd:01:81:1e:5d:a2:76:ba:e6:45:86:6c:e5:
5d:cf:91:ca:8a:2e:37:f9:9e:44:6e:71:fa:4d:f3:02:cb:be:
1f:18:78:e1:7e:c7:d2:71:51:4a:65:09:34:4c:87:c7:29:95:
39:b1:c9:1a:06:42:36:6c:48:3a:64:e0:8b:8e:29:cd:de:19:
24:53:4a:72:72:74:3e:c1:c9:6c:32:22:e4:37:1a:9e:ab:a5:
48:87:c9:25:77:73:f9:ff:5d:d3:59:25:3c:dd:7e:ff:19:83:
8c:f6:a2:52:7a:08:35:3f:23:9b:9e:3e:7c:c3:bf:a7:07:16:
3a:55:f2:ae:86:4e:2d:9e:6a:8b:fd:13:6b:e9:88:0f:f3:5d:
56:3a:f4:62:35:b0:4d:a6:61:96:3f:15:37:b4:7e:e6:b5:ff:
11:dd:69:c6:f3:60:58:ba:95:59:e5:61:b9:13:24:b8:df:b9:
e6:4f:62:e2:00:b4:3c:da:3e:45:61:dc:04:4b:01:dc:f2:be:
c6:8a:17:aa:2f:ed:14:37:55:63:ca:b0:fd:ae:c8:78:99:bb:
9f:10:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:40:16 2025 by rpki-client