This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft
File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json)
Hash identifier: 171o2zx9lRhEZj3kJtQDMcdc/Ia+2e6jjrovsfJ3Ih8=
Subject key identifier: 54:8A:DE:92:06:18:37:9F:D1:CE:3C:70:7A:89:01:AA:43:78:BF:2A
Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD
Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD
Certificate serial: 46A9F85A8F1C0F1949DBDE7461178DA7F095E348
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft
Manifest number: FA
Signing time: Sun 07 Dec 2025 12:12:14 +0000
Manifest this update: Sun 07 Dec 2025 12:07:14 +0000
Manifest next update: Wed 10 Dec 2025 13:49:14 +0000
Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=)
2: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: 337cK3dG89LoExp9oaoFCGPvadJ8jS5RVLqXoTUKVfI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl
rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a9:f8:5a:8f:1c:0f:19:49:db:de:74:61:17:8d:a7:f0:95:e3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD
Validity
Not Before: Dec 7 12:07:14 2025 GMT
Not After : Dec 10 13:49:14 2025 GMT
Subject: CN=548ADE920618379FD1CE3C707A8901AA4378BF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:48:2c:47:af:18:be:13:cd:72:a6:fc:07:
9b:25:25:39:93:17:82:aa:17:7e:fa:c5:73:46:ba:
0d:14:27:44:1e:23:b1:b2:45:9b:55:f0:ca:41:09:
d4:db:9b:96:f2:c4:39:5e:75:83:e8:55:bb:0e:00:
3a:29:8d:63:cb:2c:e8:49:9c:1e:06:3c:dd:fe:bf:
c5:17:13:b5:b5:f0:d7:2b:07:7b:44:ea:bc:bb:80:
a0:40:9e:9b:38:f8:9c:3c:1a:9b:68:82:5d:9d:97:
2d:85:8e:9e:b1:69:64:e2:6b:cb:4b:39:0b:f0:1b:
2c:81:ed:92:da:5a:4e:34:5a:dc:74:39:6c:4f:9d:
5a:fd:35:4b:89:8a:c6:22:53:9d:f8:2b:63:a8:ef:
ad:d9:c9:af:47:c3:7f:37:42:25:26:84:09:f2:50:
24:b0:96:71:ad:9a:11:8f:9b:f2:24:e0:a3:01:02:
52:26:0b:36:b3:5d:ac:14:b5:f5:9f:7f:38:e7:e5:
30:97:75:3f:a3:5a:18:bb:ad:6e:5b:61:af:0b:d4:
f9:3b:45:3e:01:47:e9:e2:60:c0:74:49:bf:04:8d:
96:f2:99:62:47:76:26:c0:d2:d3:0c:85:c3:91:16:
f4:60:47:34:74:09:d8:d0:e8:8e:f5:c8:5b:b2:d3:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:DE:92:06:18:37:9F:D1:CE:3C:70:7A:89:01:AA:43:78:BF:2A
X509v3 Authority Key Identifier:
keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:09:c2:32:75:5c:42:93:27:a1:7f:12:1c:18:43:2b:28:
6e:37:11:03:cc:c5:fa:02:ad:67:c0:b2:fe:45:36:b8:05:bb:
08:95:83:99:e4:9a:95:5f:aa:f8:ac:fa:5a:68:34:4a:86:82:
8b:6f:ab:53:df:87:d7:d8:5b:47:b2:fe:59:d6:1e:42:fc:f8:
e7:3f:2d:88:c2:ff:0a:a3:4b:ed:3b:4d:7a:56:ab:a0:75:4f:
8f:9d:e0:3e:2f:59:a8:c3:b4:0a:7d:d9:77:6f:c5:c9:98:8d:
53:07:66:f1:ea:55:08:c6:95:de:fc:88:d7:82:64:b2:f8:c8:
cb:29:13:1d:10:cc:ad:c4:77:63:e0:f5:9a:bb:47:db:cd:1a:
72:8b:eb:58:6f:95:84:9c:0e:81:09:cb:ae:a8:bd:c6:33:7e:
c5:45:ed:6e:dc:67:67:14:61:47:d1:f9:0b:74:33:2b:15:bd:
b8:3e:f9:d8:dc:99:38:bc:f0:45:8b:c1:bc:1f:99:7e:48:8c:
98:18:ea:07:c5:61:ec:ba:ec:b2:20:53:9b:a6:bb:f3:a4:a8:
e4:7b:86:12:ef:da:85:24:38:89:56:7b:44:d7:6c:e3:34:8a:
91:dd:56:3c:15:2c:d4:75:41:ad:ba:f0:ca:c4:6b:d7:14:ba:
68:f8:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:46:51 2025 by rpki-client