This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json)
Hash identifier: t4w0ukOrifNEX//9pLbKygOEX/lgIMBUSZkAbs4m02E=
Subject key identifier: 30:E2:0D:F3:EA:A8:D4:0F:07:12:98:36:9C:22:12:9F:8D:72:D4:6E
Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374
Certificate serial: 47AE9BA31D4DAC7DE275E43A09822CFC9F958B4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
Manifest number: F4
Signing time: Fri 12 Dec 2025 00:01:27 +0000
Manifest this update: Thu 11 Dec 2025 23:56:27 +0000
Manifest next update: Mon 15 Dec 2025 06:36:27 +0000
Files and hashes: 1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=)
2: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: g25oTIMltXG6IxSw+B4SGCsemI0utItCtFcir+hXzxI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl
rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 06:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ae:9b:a3:1d:4d:ac:7d:e2:75:e4:3a:09:82:2c:fc:9f:95:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374
Validity
Not Before: Dec 11 23:56:27 2025 GMT
Not After : Dec 15 06:36:27 2025 GMT
Subject: CN=30E20DF3EAA8D40F071298369C22129F8D72D46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:73:ac:74:c8:d7:12:98:01:73:30:9b:72:
a0:15:e4:22:53:f3:d6:ea:2f:9b:49:66:21:d1:fd:
ef:2a:8f:83:06:c6:32:f9:91:96:18:e6:d2:8a:52:
ee:56:49:2a:dd:bc:e4:c9:04:33:b1:51:3d:1f:16:
fc:a0:1b:c7:40:6c:01:9c:67:34:7b:bc:df:89:ed:
e1:a1:c2:1b:83:a4:37:81:ab:38:08:fa:67:4d:db:
bb:10:45:44:84:49:3b:ee:9f:b2:94:ed:73:a0:b5:
de:31:ae:5e:c0:a3:64:df:40:cd:93:57:35:e5:e9:
d5:7a:06:19:7a:54:8b:0f:fc:e8:3b:0c:4a:d3:46:
53:1e:52:6e:7d:dd:97:97:82:cc:c5:98:e0:c3:35:
d9:ca:e6:41:6f:9c:bf:d1:7b:13:20:15:e8:11:04:
6e:ec:d7:5e:59:a0:9f:0c:b2:b9:31:06:3b:00:fb:
5d:33:20:50:10:53:b5:fb:d7:a3:6f:f8:c3:84:43:
40:3d:8d:42:8b:a6:e2:ce:1a:4d:4a:51:7e:8e:bf:
14:1c:3f:3a:87:af:75:9f:76:39:4b:ce:0c:07:74:
b0:5b:58:b3:63:be:96:d2:e0:a7:40:59:3c:1c:15:
62:f3:cd:70:c9:e9:e6:ce:99:a9:e3:aa:75:9a:f0:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:0D:F3:EA:A8:D4:0F:07:12:98:36:9C:22:12:9F:8D:72:D4:6E
X509v3 Authority Key Identifier:
keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8b:fa:43:6a:91:e2:8f:da:99:6a:4f:d4:01:7c:61:7b:c6:
e5:24:d5:ba:46:09:24:4c:49:a0:86:6b:24:4f:30:62:da:f4:
8f:4f:8b:56:7a:d0:b4:8f:30:25:f3:bf:27:73:7a:47:27:e9:
b4:f8:5d:6b:48:16:96:6a:11:d5:bf:f9:f0:86:75:57:61:5b:
fa:0c:6b:0d:43:6c:91:c6:93:6c:0b:73:4e:98:ba:68:a4:fe:
07:9b:4c:26:96:1f:bb:be:4c:9b:e8:eb:54:ff:12:3d:50:b4:
f7:d3:08:a6:be:31:d4:62:66:eb:26:60:8c:fb:d0:3c:7f:a1:
89:8f:1f:80:e1:a2:fa:e8:89:72:3a:b9:46:21:8f:3c:a1:05:
ce:55:2c:7b:d0:58:32:6f:63:76:b8:eb:f9:e6:f8:cc:d4:d6:
e7:3c:45:25:ed:1f:ac:67:42:27:03:df:d2:30:0c:0d:84:39:
18:69:95:36:21:0b:7b:0f:f9:1a:eb:f2:29:bc:e3:fd:40:99:
0f:25:3e:25:00:0b:31:33:f4:92:6c:e9:a8:57:ae:73:01:5e:
90:c0:74:27:8a:d9:63:ac:5a:5c:16:1a:f9:05:75:cc:54:d0:
fb:ea:61:3d:5c:a3:ae:ac:50:aa:52:8e:78:ee:62:99:6a:ec:
59:39:e3:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUR66box1NrH3ideQ6CYIs/J+Vi0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0
QTQzMTM3NDAeFw0yNTEyMTEyMzU2MjdaFw0yNTEyMTUwNjM2MjdaMDMxMTAvBgNV
BAMTKDMwRTIwREYzRUFBOEQ0MEYwNzEyOTgzNjlDMjIxMjlGOEQ3MkQ0NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEXOsdMjXEpgBczCbcqAV5CJT
89bqL5tJZiHR/e8qj4MGxjL5kZYY5tKKUu5WSSrdvOTJBDOxUT0fFvygG8dAbAGc
ZzR7vN+J7eGhwhuDpDeBqzgI+mdN27sQRUSESTvun7KU7XOgtd4xrl7Ao2TfQM2T
VzXl6dV6Bhl6VIsP/Og7DErTRlMeUm593ZeXgszFmODDNdnK5kFvnL/RexMgFegR
BG7s115ZoJ8MsrkxBjsA+10zIFAQU7X716Nv+MOEQ0A9jUKLpuLOGk1KUX6OvxQc
PzqHr3WfdjlLzgwHdLBbWLNjvpbS4KdAWTwcFWLzzXDJ6ebOmanjqnWa8DbPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMOIN8+qo1A8HEpg2nCISn41y1G4wHwYDVR0j
BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw
MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz
MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4
M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2
Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH+L+kNqkeKP2plqT9QBfGF7xuUk1bpGCSRM
SaCGayRPMGLa9I9Pi1Z60LSPMCXzvydzekcn6bT4XWtIFpZqEdW/+fCGdVdhW/oM
aw1DbJHGk2wLc06Yumik/gebTCaWH7u+TJvo61T/Ej1QtPfTCKa+MdRiZusmYIz7
0Dx/oYmPH4DhovroiXI6uUYhjzyhBc5VLHvQWDJvY3a46/nm+MzU1uc8RSXtH6xn
QicD39IwDA2EORhplTYhC3sP+Rrr8im84/1AmQ8lPiUACzEz9JJs6ahXrnMBXpDA
dCeK2WOsWlwWGvkFdcxU0PvqYT1co66sUKpSjnjuYplq7Fk54x0=
-----END CERTIFICATE-----
Generated at Sun Dec 14 00:08:03 2025 by rpki-client