This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json)
Hash identifier: x3XvwnDhvPtTDMk2dq7NqFtUrDjIGmslPEje35fZThs=
Subject key identifier: C7:DC:53:74:C4:BB:A7:90:9D:3D:53:DE:4D:0F:84:23:5C:11:01:A1
Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB
Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB
Certificate serial: 395D41CAAD98DEC4BBF54F135F253D262CF127B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
Manifest number: 04BB
Signing time: Tue 02 Dec 2025 11:41:34 +0000
Manifest this update: Tue 02 Dec 2025 11:36:34 +0000
Manifest next update: Fri 05 Dec 2025 17:42:34 +0000
Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: LfJdUDvzZzkIvM8BW7y5Nc//Kh/tgGqzGMvNM9JxMkM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl
rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 17:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5d:41:ca:ad:98:de:c4:bb:f5:4f:13:5f:25:3d:26:2c:f1:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB
Validity
Not Before: Dec 2 11:36:34 2025 GMT
Not After : Dec 5 17:42:34 2025 GMT
Subject: CN=C7DC5374C4BBA7909D3D53DE4D0F84235C1101A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:95:b1:03:8b:9c:a0:6a:81:1c:17:6b:56:00:
55:79:f5:d4:f2:6b:5a:92:61:c8:4d:0e:62:ec:39:
f4:d4:1d:dd:3b:4e:a3:26:61:be:2d:04:1a:e3:5d:
44:c7:38:06:4e:c7:5b:e4:5c:9d:d7:31:75:04:9c:
04:4f:81:22:dc:3f:c1:75:0c:e6:25:2f:ba:ea:1a:
6d:35:3a:50:6f:54:36:0f:e3:5c:c7:5b:3f:d0:ec:
c9:18:59:3d:32:13:91:f3:c2:0e:3a:52:66:1c:35:
95:ca:16:99:91:66:71:0f:b9:37:8b:79:ad:a1:dc:
8a:3c:74:cf:a7:e7:e0:2d:38:b6:a3:76:6a:b4:9d:
ad:5d:9e:d6:6b:2c:6f:98:b4:75:6b:ba:a9:71:ac:
72:65:50:14:73:78:c0:86:9d:03:c0:e4:0b:20:c3:
ce:18:64:8a:79:cd:ea:27:dc:23:8f:ad:ba:cb:3c:
c9:99:f6:a2:ef:ae:a5:8e:37:53:72:df:8a:fa:ac:
df:51:67:94:1c:2c:6d:72:5f:93:2c:fe:c7:4f:86:
19:7d:c7:d6:76:de:0f:de:1a:22:85:d6:82:e9:e2:
17:76:e4:f9:51:db:bd:fc:a1:05:14:81:dc:19:7b:
43:79:17:9b:7f:ca:b2:fe:b5:f6:ff:1b:54:2e:d7:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DC:53:74:C4:BB:A7:90:9D:3D:53:DE:4D:0F:84:23:5C:11:01:A1
X509v3 Authority Key Identifier:
keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:30:3e:b6:ec:03:20:62:91:2d:c6:43:c8:64:5d:36:03:73:
0e:de:68:81:ba:7e:e3:2c:ff:3a:ec:41:51:5f:91:9b:df:c8:
f5:80:f1:21:50:be:a2:83:35:f6:34:19:8e:1e:ed:78:df:be:
c3:45:ea:2d:6b:d2:90:bf:c4:12:77:41:25:e1:c2:b3:bc:b3:
d3:75:fe:9a:e0:6b:bb:90:b7:04:87:b8:5f:00:14:4e:d4:36:
bd:13:80:9c:d7:5e:60:a3:63:ee:8e:3b:62:88:a5:f0:f5:dc:
e4:8a:82:fb:53:74:d1:7d:c6:4f:72:55:27:f1:3c:ec:c6:d6:
f2:63:8c:61:2b:11:0b:30:ea:3b:fc:85:20:ac:c8:9f:a8:c1:
f0:77:be:22:e2:1d:c4:f1:b8:4d:dc:d7:30:86:2c:f1:be:c8:
50:7d:20:04:e4:ac:4d:e8:f2:d6:b7:97:9d:3d:78:45:a8:72:
fc:6c:17:b8:4e:c2:36:93:96:5a:40:09:cc:c3:7b:1a:df:02:
e6:b7:2d:ba:c3:31:de:88:7b:aa:cc:77:1d:bb:85:76:51:ab:
47:b1:67:62:1b:e9:76:39:49:65:5b:5e:de:67:d3:d2:93:0c:
84:e2:0c:e4:92:42:ce:00:b8:a2:69:46:fc:90:ab:92:c6:c4:
28:31:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:55 2025 by rpki-client