This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft
File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json)
Hash identifier: /Ux0oTik1VuAvx7ZceD5SV/VGRhHWlNOG5LWLDRJ3hY=
Subject key identifier: 05:8C:42:20:D4:09:52:3E:CB:2C:DC:7B:FF:9B:93:50:83:67:6B:8C
Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53
Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53
Certificate serial: 76757F299B9116A7F9CC70C67712C89274707B25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft
Manifest number: 0537
Signing time: Mon 01 Dec 2025 16:01:37 +0000
Manifest this update: Mon 01 Dec 2025 15:56:37 +0000
Manifest next update: Thu 04 Dec 2025 16:49:37 +0000
Files and hashes: 1: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: Z5+uNWUf96970QClR9BPMdc27gS6j7yhVrlhFjZhEWY=)
2: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: 0iUl5gyc5nPjieK0b5gpWu+2O6NGoar+7v5RG79uizo=)
3: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys=)
4: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o=)
5: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: RKs88Pa9U5kYqNiJBgdcINbl38riDMLK7OKBJbDZxoU=)
6: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: DmcCHOdkx3USZG6nT+Rc5blkIExAEZyaMmWiGcolYxw=)
7: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: mRC3mdea6qCpcytvftKPOZzFacOZPZuXTr1Zl+8d16Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl
rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 16:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:75:7f:29:9b:91:16:a7:f9:cc:70:c6:77:12:c8:92:74:70:7b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53
Validity
Not Before: Dec 1 15:56:37 2025 GMT
Not After : Dec 4 16:49:37 2025 GMT
Subject: CN=058C4220D409523ECB2CDC7BFF9B935083676B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:fa:31:9a:64:bf:80:6a:e8:62:b2:3e:37:
29:e5:55:7e:7c:e2:b0:4e:30:b5:e8:d9:6d:c6:0d:
56:26:e8:65:48:20:15:c5:bc:8a:e8:2b:c6:f6:e8:
c6:1d:28:f6:22:e8:a5:53:ac:20:38:c5:5d:59:8b:
5d:34:87:e5:e2:43:3e:97:de:33:e3:f1:4c:82:ec:
ed:14:d1:39:20:6d:ed:52:84:c6:86:85:6f:ff:e9:
4e:64:72:51:fc:aa:ae:9e:84:48:38:64:a4:99:9d:
70:9e:92:a1:3e:e7:20:22:8d:70:f5:64:b6:45:6a:
78:8f:12:28:29:ce:2e:8b:25:17:e7:56:0d:e0:36:
ca:4e:6f:81:5c:95:59:72:2d:02:15:a4:b2:ae:91:
1e:35:9b:a5:8b:59:25:42:6e:e8:4f:55:e4:00:5c:
cd:bb:6c:cf:38:d8:fd:5a:06:91:2f:06:29:6f:67:
fe:0d:a2:0b:e9:1e:bb:fd:fb:22:63:4c:7e:30:6b:
d0:55:4d:3f:3d:c6:34:2e:8a:b2:f2:ce:3c:fd:ca:
4f:4a:d9:45:e2:1d:11:85:58:d6:bf:ba:4d:89:f5:
bf:0b:11:9a:b9:97:7c:a1:8c:56:20:5f:ad:93:67:
e2:02:fc:90:f2:46:28:31:70:77:b8:a2:44:59:c1:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8C:42:20:D4:09:52:3E:CB:2C:DC:7B:FF:9B:93:50:83:67:6B:8C
X509v3 Authority Key Identifier:
keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:dc:59:c7:c7:50:95:48:df:10:aa:4f:90:ad:07:e3:da:ca:
f5:79:b5:36:92:46:2d:99:95:2c:a2:5e:8b:d5:cd:12:8e:fe:
8f:22:36:3c:13:12:4e:0c:12:9d:f7:d5:e4:74:9e:a4:6d:ee:
a4:3c:7b:4f:0b:36:7a:ec:19:ca:21:8c:7c:b2:1a:4b:23:32:
8d:6e:54:a7:58:ab:46:0c:ed:ed:bc:ad:ab:8d:98:18:49:5f:
e0:52:02:e3:a7:cf:bf:1c:3f:ad:85:67:8b:4d:e8:0f:f3:ae:
ff:1f:3b:f5:43:3f:f3:7d:5f:e1:c9:37:0c:01:19:e2:cb:14:
0f:5e:59:f1:e9:81:5f:0f:38:04:0d:7a:a9:b5:ba:2b:61:a3:
ca:9d:18:28:14:6f:88:65:cc:d5:c9:05:e4:0a:bc:36:9c:29:
a4:26:84:c8:d7:5c:cf:76:e0:8a:95:6a:ca:4b:25:4d:c2:54:
c4:25:1f:71:54:fe:18:a2:93:ba:12:55:04:06:7d:2d:68:97:
21:45:78:be:66:4d:30:53:04:b1:8d:f8:40:c8:08:65:1d:63:
09:3b:0a:d2:e3:61:5c:27:1f:52:d2:7c:55:3c:cd:df:08:54:
87:4d:87:c5:dc:1e:3d:83:d8:4b:02:4f:8a:36:ee:91:35:81:
9c:29:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:00 2025 by rpki-client