This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json)
Hash identifier: aT/WUdFAPm43ixCzSY5qjvHtha5FaqDjxqIWkU20TbU=
Subject key identifier: C1:DF:51:6D:C8:67:A9:D3:86:C9:06:78:A3:BB:7C:E4:8C:13:32:19
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial: 2D0C476D82F5651EB21E1B220D35697DF7C5191A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
Manifest number: 0484
Signing time: Mon 22 Dec 2025 13:21:25 +0000
Manifest this update: Mon 22 Dec 2025 13:16:25 +0000
Manifest next update: Thu 25 Dec 2025 20:25:25 +0000
Files and hashes: 1: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=)
2: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=)
3: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=)
4: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=)
5: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=)
6: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: F4KKHHBQtRhFkfO8ziC7JVv7jseUa/0jDVjvOujLbhk=)
7: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=)
8: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=)
9: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0c:47:6d:82:f5:65:1e:b2:1e:1b:22:0d:35:69:7d:f7:c5:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Validity
Not Before: Dec 22 13:16:25 2025 GMT
Not After : Dec 25 20:25:25 2025 GMT
Subject: CN=C1DF516DC867A9D386C90678A3BB7CE48C133219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:9f:97:fb:b9:41:86:b3:90:1a:22:07:1e:
51:ae:f2:d1:14:be:ce:9e:3f:b8:ee:d6:5d:10:19:
c1:21:56:0f:0c:47:7f:de:50:ca:46:6b:96:4e:a9:
82:7f:2c:2b:1f:d5:28:6a:85:bf:fe:25:0f:5a:18:
12:fe:07:76:bb:17:7d:3a:43:33:ff:7f:1e:d0:83:
d4:3e:4b:43:f5:3a:46:ff:fe:02:b7:7c:b3:64:da:
78:1a:2c:6c:c4:d6:35:57:cc:d7:29:63:3d:9b:a1:
35:a8:1d:72:fa:16:01:cf:52:72:5d:2a:fa:bb:a6:
09:83:6e:1b:be:35:a3:69:2c:9c:54:32:32:2b:5c:
6d:72:09:f1:ed:b7:32:66:99:82:a2:03:c3:47:f7:
77:c5:1e:7e:4b:21:a8:eb:75:65:a6:b7:cb:7b:06:
fd:87:3b:3a:94:e6:a7:ff:27:b6:a4:3f:58:08:9d:
dc:0d:23:99:07:5c:e6:03:31:2f:f5:84:da:20:03:
fc:64:cd:e2:dc:f6:52:27:1f:cb:df:d7:d2:7c:d7:
6e:e1:ad:61:ac:1e:91:74:bb:bc:50:0b:8c:a5:e9:
64:69:94:e5:79:9a:75:e4:ec:bf:bd:ef:eb:40:49:
36:7c:47:5f:1b:5b:08:69:14:db:4d:14:1b:4f:7a:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:51:6D:C8:67:A9:D3:86:C9:06:78:A3:BB:7C:E4:8C:13:32:19
X509v3 Authority Key Identifier:
keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:26:d0:4f:2a:a6:e9:c5:a1:b7:be:8b:3b:4e:53:49:f3:37:
e6:dd:14:03:f9:da:87:a9:29:70:e9:6d:aa:fc:32:a5:90:70:
4e:fd:d7:47:77:3e:5e:39:d2:2d:c0:90:86:96:0a:6d:5d:2f:
3d:8f:61:00:e3:59:97:a5:d6:66:02:d4:65:af:0b:83:52:de:
8b:1d:14:0c:92:f1:37:b1:35:e2:28:83:3a:74:c9:8b:14:7a:
6f:c4:38:82:21:34:a4:ac:03:37:32:60:79:04:5d:05:60:9e:
dd:52:9c:4d:ed:2a:fb:ca:99:57:2e:45:f1:0b:bb:0f:64:1e:
a1:07:7b:85:48:fc:54:06:09:17:5a:6f:0e:a2:f4:9c:73:4f:
64:58:92:70:51:b9:fb:69:63:5b:89:0d:50:a0:0a:a3:3c:17:
0d:6d:fb:5e:43:e4:2d:7b:bf:c6:78:73:f2:c8:5d:80:ca:4b:
46:cd:1c:e2:eb:a8:98:d8:0c:fa:5d:f3:7f:81:40:4f:b5:fa:
3e:30:78:81:ad:1f:fc:87:5a:1a:01:bc:9c:9d:7b:8e:a1:71:
2f:a0:9b:d2:29:c2:d6:9f:68:f7:82:71:90:4b:53:14:dd:e6:
29:4b:c7:a0:8d:0f:e3:31:12:1e:d0:88:fc:d9:85:97:6e:46:
1e:82:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:22:14 2025 by rpki-client