This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json)
Hash identifier: 0THEb1NAk+3t8Lax86mUoKcLf419m/kb2ydCoBSfjlo=
Subject key identifier: 68:26:3D:54:41:EA:FC:C1:35:08:07:F5:0C:E0:19:93:91:79:33:F2
Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F
Certificate serial: 18824D422CC8200576087C468DF5E568E40E9737
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
Manifest number: 03AE
Signing time: Tue 09 Dec 2025 07:12:00 +0000
Manifest this update: Tue 09 Dec 2025 07:07:00 +0000
Manifest next update: Fri 12 Dec 2025 15:38:00 +0000
Files and hashes: 1: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: KQ1CtoZzUqs1WGhGErQT00oHh/NmVh2wqt5h0E258xQ=)
2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 15:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:82:4d:42:2c:c8:20:05:76:08:7c:46:8d:f5:e5:68:e4:0e:97:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F
Validity
Not Before: Dec 9 07:07:00 2025 GMT
Not After : Dec 12 15:38:00 2025 GMT
Subject: CN=68263D5441EAFCC1350807F50CE01993917933F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:ba:0c:d8:fe:c0:88:df:89:57:6c:57:d6:
71:b4:c4:9a:15:3a:4b:ab:49:4b:19:e0:c4:00:65:
2b:90:00:a6:28:e1:93:07:91:cc:02:01:9d:00:48:
41:ea:d4:d2:fa:b6:50:1c:b6:40:6a:2c:26:78:9c:
77:14:b5:2e:8c:4a:c3:e6:ce:8b:46:49:42:9f:04:
ae:08:69:4e:2f:bc:4b:6a:b8:d7:de:12:d5:c2:69:
5b:bb:04:94:0e:f4:77:cc:8c:01:f6:0e:27:a9:55:
15:d3:f0:98:fa:ac:6d:0a:e7:7c:93:0c:5e:26:37:
74:0e:43:01:c8:30:e7:c9:f0:94:1c:65:d0:65:9d:
20:5c:41:4a:0c:6d:50:7a:ec:da:3b:44:26:27:8e:
48:ed:f9:c8:e6:d3:5b:3c:09:36:fc:0c:99:c8:a3:
02:5a:53:49:bf:ae:63:86:2e:a0:0f:77:42:6d:04:
a1:49:e2:16:c4:56:a7:ba:52:08:ae:a2:e8:83:c8:
d6:36:d3:f5:ce:29:ad:8c:be:46:46:5f:ac:65:ec:
7f:2b:66:a6:87:44:35:20:59:7b:c5:e8:4c:67:fe:
1a:ed:e8:11:64:8a:14:22:43:79:15:72:29:18:09:
b7:b4:c5:e6:d6:4f:0e:a9:8c:1e:d6:4d:b3:46:af:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:26:3D:54:41:EA:FC:C1:35:08:07:F5:0C:E0:19:93:91:79:33:F2
X509v3 Authority Key Identifier:
keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0e:6f:ab:2c:9f:0e:3a:b4:60:c7:f4:8e:78:02:41:ee:90:
e9:d6:9c:53:63:dc:14:f7:9d:4a:b0:86:f7:be:e6:23:d6:11:
73:30:9b:38:ac:9f:04:03:36:ae:01:f6:7a:75:d8:96:8e:ea:
5d:35:93:47:fd:b8:eb:6d:88:45:96:43:57:96:a3:83:d8:bd:
55:c0:39:12:3c:52:2f:28:71:46:34:2a:b5:10:94:d6:bf:53:
93:c9:0c:b8:7c:de:67:85:bc:c5:92:60:a4:49:94:de:dd:9f:
e9:c2:1c:60:5b:37:1e:de:0b:1f:6f:39:af:16:f0:6f:f8:9a:
7b:5b:5a:60:85:6b:68:cb:5d:cc:c6:6c:b0:87:5d:77:dd:61:
54:71:20:92:37:1a:d2:de:ff:91:4c:02:9c:cb:ee:34:d2:89:
7d:5c:7e:31:10:9f:08:b0:c4:76:f7:ff:f7:64:dd:8b:93:bf:
ff:c4:6d:f1:58:32:0e:ab:ad:06:b3:36:b6:15:80:42:4e:72:
3a:a8:46:47:f7:bf:ab:24:95:ad:4d:3a:7d:84:65:63:5a:ae:
59:ac:b8:1a:04:75:7d:6b:fb:23:3b:1a:6c:10:de:2b:07:2b:
b6:1e:9e:07:fd:d4:9a:3b:43:db:e0:46:bb:d2:b8:40:e6:ad:
fa:97:37:0f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGIJNQizIIAV2CHxGjfXlaOQOlzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE
MDMyRDQyRjAeFw0yNTEyMDkwNzA3MDBaFw0yNTEyMTIxNTM4MDBaMDMxMTAvBgNV
BAMTKDY4MjYzRDU0NDFFQUZDQzEzNTA4MDdGNTBDRTAxOTkzOTE3OTMzRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw97oM2P7AiN+JV2xX1nG0xJoV
OkurSUsZ4MQAZSuQAKYo4ZMHkcwCAZ0ASEHq1NL6tlActkBqLCZ4nHcUtS6MSsPm
zotGSUKfBK4IaU4vvEtquNfeEtXCaVu7BJQO9HfMjAH2DiepVRXT8Jj6rG0K53yT
DF4mN3QOQwHIMOfJ8JQcZdBlnSBcQUoMbVB67No7RCYnjkjt+cjm01s8CTb8DJnI
owJaU0m/rmOGLqAPd0JtBKFJ4hbEVqe6UgiuouiDyNY20/XOKa2MvkZGX6xl7H8r
ZqaHRDUgWXvF6Exn/hrt6BFkihQiQ3kVcikYCbe0xebWTw6pjB7WTbNGrzdPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaCY9VEHq/ME1CAf1DOAZk5F5M/IwHwYDVR0j
BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz
NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy
RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1
MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy
NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEYOb6ssnw46tGDH9I54AkHukOnWnFNj3BT3
nUqwhve+5iPWEXMwmzisnwQDNq4B9np12JaO6l01k0f9uOttiEWWQ1eWo4PYvVXA
ORI8Ui8ocUY0KrUQlNa/U5PJDLh83meFvMWSYKRJlN7dn+nCHGBbNx7eCx9vOa8W
8G/4mntbWmCFa2jLXczGbLCHXXfdYVRxIJI3GtLe/5FMApzL7jTSiX1cfjEQnwiw
xHb3//dk3YuTv//EbfFYMg6rrQazNrYVgEJOcjqoRkf3v6skla1NOn2EZWNarlms
uBoEdX1r+yM7GmwQ3isHK7Yengf91Jo7Q9vgRrvSuEDmrfqXNw8=
-----END CERTIFICATE-----
Generated at Wed Dec 10 05:23:04 2025 by rpki-client