This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File: F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier: 1DNvFzSMelonNo1uUt98EOxtxgSwjcO7rQqmiGzry9E=
Subject key identifier: 04:E4:EF:58:81:CE:C2:DA:F5:45:A7:11:E2:23:3A:BF:65:05:20:00
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial: 21926F6B12DBE8ADD4E76EFFF11E9A3D6B7DACED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number: 054B
Signing time: Mon 01 Dec 2025 21:41:15 +0000
Manifest this update: Mon 01 Dec 2025 21:36:15 +0000
Manifest next update: Fri 05 Dec 2025 06:17:15 +0000
Files and hashes: 1: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=)
2: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: pNO6VKgYOFBfCTuOxpIDOCnnHE32ICoM4NCQBRB/OH0=)
3: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=)
4: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=)
5: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=)
6: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=)
7: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=)
8: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=)
9: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=)
10: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=)
11: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=)
12: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=)
13: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 06:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:92:6f:6b:12:db:e8:ad:d4:e7:6e:ff:f1:1e:9a:3d:6b:7d:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Validity
Not Before: Dec 1 21:36:15 2025 GMT
Not After : Dec 5 06:17:15 2025 GMT
Subject: CN=04E4EF5881CEC2DAF545A711E2233ABF65052000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:71:f5:df:cb:8b:c5:55:3e:33:c0:dd:dd:
95:17:f1:aa:36:72:e7:7f:80:a6:37:c7:3b:19:1a:
77:97:3f:4d:82:fd:d9:1d:da:6a:11:cf:c6:2d:42:
c7:15:03:fe:14:b4:c5:91:bb:4e:67:36:29:a3:8e:
4c:95:cf:a1:71:63:13:7b:be:b1:5a:ca:08:6e:07:
e2:46:9f:2a:9d:ed:aa:42:80:b6:a9:9a:58:52:37:
0f:0c:ae:ee:ed:0e:36:7c:28:05:e6:26:5c:55:12:
a4:99:cc:ec:27:0b:79:ec:6b:b8:f9:91:e0:fc:8a:
be:50:c4:74:f8:ae:1c:18:c2:5f:27:d6:12:f9:20:
1f:f8:6b:fb:4a:9b:5e:2a:5d:b2:a7:9f:83:ac:b0:
85:37:91:8b:9e:d1:77:cd:89:23:57:0a:e9:17:0c:
43:9f:43:2f:54:42:6f:d3:98:76:04:c5:1c:e2:87:
94:04:26:b1:22:45:a6:d8:8a:29:24:e0:f7:41:84:
bd:cd:67:b9:0d:8a:56:e8:49:41:76:22:43:88:ed:
1f:fa:05:cc:d8:90:51:c4:28:0c:58:c8:56:8a:66:
fd:c5:a8:48:bf:60:41:24:8b:96:37:00:b5:5d:a1:
a1:d2:ae:9c:df:39:91:d0:d0:34:da:2d:1b:6e:75:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E4:EF:58:81:CE:C2:DA:F5:45:A7:11:E2:23:3A:BF:65:05:20:00
X509v3 Authority Key Identifier:
keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c3:bd:2b:ed:f4:4c:9a:fc:70:1b:77:61:64:18:1d:5f:81:
88:60:cf:bd:a4:1b:18:40:4f:68:41:18:d0:2e:ea:cf:4c:11:
53:64:73:76:49:c4:b0:ca:e4:48:74:00:78:71:17:c9:e3:67:
d3:2f:1f:f5:ad:88:37:aa:cb:a1:5e:45:f2:1f:51:5c:42:7a:
f1:c8:11:32:76:00:67:da:d5:a2:18:48:c8:25:89:f4:43:7d:
fb:68:64:5a:36:f4:d9:62:15:9a:3a:3e:02:e2:b5:0f:31:74:
22:64:94:a0:4c:0e:1a:51:90:ff:3e:cd:86:ba:95:a0:8f:ae:
f9:3a:a5:51:17:be:4d:71:31:e3:78:4d:9d:5e:26:c2:2b:a1:
8d:57:13:e6:18:15:db:ff:86:94:74:f1:d7:77:74:bc:5f:47:
71:85:2b:4b:54:3d:e3:89:d8:e1:6d:d3:00:6f:ab:8f:1f:4e:
5d:6f:0d:d2:a8:2a:75:f0:fd:69:d9:1c:f5:b8:2f:27:d9:6e:
4e:bd:b1:36:89:2d:83:12:ce:94:d7:72:3c:36:10:25:d5:b7:
16:f4:e0:06:f9:03:1f:35:4f:89:59:76:63:7a:c6:05:79:b3:
a6:2f:d2:d4:9f:22:85:c0:ac:62:6d:d4:92:4c:4a:3f:a3:65:
09:a5:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:59:49 2025 by rpki-client