This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json)
Hash identifier: KcqsG8XnQSltJRgqLwnhY0A3E6vG2VlCZBflj/prpDw=
Subject key identifier: FA:1C:28:AD:57:0A:C4:37:03:AB:17:72:76:89:C2:4F:D8:E3:8A:18
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial: 482D019CE6FD3E017FB462031D4F870A06557BBE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
Manifest number: 01A6
Signing time: Wed 17 Dec 2025 01:20:43 +0000
Manifest this update: Wed 17 Dec 2025 01:15:43 +0000
Manifest next update: Sat 20 Dec 2025 12:57:43 +0000
Files and hashes: 1: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: 0iOHDZJkWGBQjj763JUGZZwgfK7YXlzXdNrWBoBFPDE=)
2: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: jruW/AUePdWFgbuv5StGivVVFVpHpBSL3kjIWCplc4g=)
3: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: O7uhBUEz+z1Q2GX4lPzEa5VOca0EqQ+u9YYJDNTn8wg=)
4: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: IoIh0X1wtCWoeOPeFilpjxljpSISulJCU4DOxkNVruE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 12:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2d:01:9c:e6:fd:3e:01:7f:b4:62:03:1d:4f:87:0a:06:55:7b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Validity
Not Before: Dec 17 01:15:43 2025 GMT
Not After : Dec 20 12:57:43 2025 GMT
Subject: CN=FA1C28AD570AC43703AB17727689C24FD8E38A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:6f:9a:0d:65:2a:7c:23:b3:92:42:1e:f2:
61:52:29:44:e6:ff:a7:e8:32:e1:13:60:b1:44:e4:
2e:51:f9:24:78:31:1d:75:f8:3a:f9:a7:a9:07:8c:
9a:6f:18:88:51:01:96:ba:71:08:6f:e9:a2:a8:c6:
a2:98:02:7f:c9:8c:7f:6c:cd:f5:24:7b:09:bd:37:
37:b7:44:a0:7c:1a:a0:2c:d5:6a:65:f2:70:d3:49:
04:9e:da:99:4f:84:99:82:c3:a9:59:6c:f3:10:0c:
31:5f:4f:2c:04:1e:6c:f1:9d:8e:0b:d0:53:df:b0:
1b:68:a0:33:a0:09:37:27:91:b0:2e:74:b2:37:59:
5c:c1:db:84:46:5e:da:fb:c2:98:55:bb:a1:f3:d6:
80:52:d3:21:39:88:d2:c1:45:1a:fe:83:71:52:1d:
14:9b:09:42:52:1f:15:bb:fa:bd:f1:94:66:88:8b:
59:7a:96:9a:d9:bd:89:b3:b5:5a:b6:72:e7:49:01:
81:6a:65:dd:77:58:42:6d:0f:61:8f:ed:43:02:f4:
70:ff:4f:20:7f:f2:ff:e7:ee:3b:5e:93:e5:43:92:
3d:ea:20:07:b8:5d:9c:9a:06:c2:82:31:80:8d:ba:
28:f0:ef:69:8a:47:24:79:2e:4e:1e:a0:b6:5f:4d:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:28:AD:57:0A:C4:37:03:AB:17:72:76:89:C2:4F:D8:E3:8A:18
X509v3 Authority Key Identifier:
keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cd:fd:18:49:02:03:ab:88:11:cc:1c:35:62:89:e8:f3:d6:
69:85:bd:3a:df:d3:d0:82:58:13:da:90:e8:a0:4b:51:36:ef:
ee:50:a7:3f:8f:25:4c:c6:d8:73:de:0f:a3:9c:e1:43:ef:f0:
14:88:af:47:86:67:5f:fa:2a:a5:51:b0:0a:50:5d:30:6c:ea:
cd:52:04:c4:38:ee:7b:43:a3:2f:c2:5b:f5:a4:63:f0:02:23:
68:8b:ca:a0:6d:c9:85:78:2e:3a:56:7e:3c:39:e2:c2:70:3b:
b6:18:f1:69:cc:df:b8:0f:32:47:43:56:c1:ff:82:bb:f3:38:
7a:17:5a:30:c4:6c:cd:c0:11:13:e9:e0:0c:7d:97:05:6e:88:
1e:80:df:a8:bd:10:35:72:e9:2f:d6:ed:ff:c4:9b:fe:c1:96:
07:f8:09:0a:2a:93:3f:2e:0e:c4:35:db:ac:4f:cd:08:83:39:
e6:53:36:e3:c3:7d:4b:3c:ff:0c:ee:75:f0:02:1b:20:5e:a8:
42:07:74:46:48:f1:e8:0b:88:17:2e:f8:aa:1e:bb:84:5d:97:
50:d8:98:f0:19:5b:99:b5:58:58:d2:16:58:16:80:eb:ee:e7:
ff:b4:36:9c:34:7b:89:5b:ca:93:71:b3:f0:e0:7d:9c:3c:cb:
dd:67:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:22:15 2025 by rpki-client