This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft
File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json)
Hash identifier: u7tIWsBmmuF4QoUq6fu5qQgPsMK3Yiz/zD5Fqf39Q4I=
Subject key identifier: 95:41:14:74:D5:5F:13:A4:01:98:07:9D:12:67:1B:1B:20:99:F6:A0
Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6
Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6
Certificate serial: 789B4426FBDAA19155544E2E9BC965934A1FE2A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft
Manifest number: 022B
Signing time: Mon 01 Dec 2025 11:32:17 +0000
Manifest this update: Mon 01 Dec 2025 11:27:17 +0000
Manifest next update: Thu 04 Dec 2025 15:45:17 +0000
Files and hashes: 1: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: d4E/dHbew/ID/YpwpcpxQtTpE9+amKRl9tbhVQjM9NA=)
2: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: P2JGQjJlh0X8PPnIYvpO+iKqp7Ecvs49iVh/XO+bX5A=)
3: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: LI13Oiwos27NH9fZ9uCjsrTtT/ALoh094BdiKflNCjg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl
rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 15:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9b:44:26:fb:da:a1:91:55:54:4e:2e:9b:c9:65:93:4a:1f:e2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6
Validity
Not Before: Dec 1 11:27:17 2025 GMT
Not After : Dec 4 15:45:17 2025 GMT
Subject: CN=95411474D55F13A40198079D12671B1B2099F6A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:09:13:81:68:f8:32:18:30:ff:e4:56:af:
91:68:29:59:9d:0c:a2:d4:22:69:8d:b8:6e:41:19:
79:6c:d6:f9:6a:ef:ba:3a:2d:c1:69:80:05:b6:de:
af:ef:01:08:ee:5f:b2:3c:4f:99:33:d9:80:d5:d0:
55:f5:68:d3:50:36:07:c0:46:cd:2f:17:2d:49:7f:
2f:0d:77:b8:6c:08:53:77:17:35:f0:4b:00:7d:e3:
87:69:ff:d8:2d:1c:42:24:cb:73:db:2e:10:93:65:
b5:0b:bb:52:a2:e1:b3:7f:95:0c:2a:d3:6f:83:98:
13:0a:25:7b:50:8d:08:1e:7c:40:6f:9a:ec:cd:5c:
13:f6:5c:32:0b:6c:c3:83:a6:4e:95:2a:61:70:44:
2f:7d:36:16:51:ff:5f:6d:32:43:cc:e6:59:07:07:
16:60:3f:a5:b4:97:49:d2:e1:5c:5e:68:2a:1d:df:
41:1d:8e:20:d3:e2:73:55:48:0c:32:94:c0:56:d1:
fa:a7:59:2a:e3:40:30:80:c2:6d:74:b3:aa:df:49:
49:6c:fb:ff:ee:b0:66:e9:31:eb:1d:13:d6:3b:3d:
5c:72:17:17:cc:21:11:f6:ff:59:a8:a7:98:4a:28:
f3:3c:14:4c:39:e1:d9:89:ca:15:4f:82:b4:57:fe:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:41:14:74:D5:5F:13:A4:01:98:07:9D:12:67:1B:1B:20:99:F6:A0
X509v3 Authority Key Identifier:
keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:93:3e:1a:f5:40:e4:71:be:58:31:ca:58:7d:0c:34:23:11:
73:73:85:04:f2:b9:2c:35:39:6e:8e:36:89:4d:f4:89:ed:59:
d0:71:3c:2c:4c:72:98:94:eb:49:26:62:61:01:ff:bd:5a:27:
62:bd:9f:13:10:9f:ed:ec:ef:1a:2a:75:81:1f:60:f7:41:13:
64:f2:a4:ac:f2:98:78:5b:f2:b6:02:9b:de:86:f3:4f:5a:57:
31:e9:7c:c3:ed:12:72:1f:67:88:53:14:c1:c9:be:87:68:1e:
83:cf:9c:fa:37:96:b6:bf:e6:44:73:ce:e6:f7:90:f3:23:61:
05:b1:dd:e2:98:81:e4:bb:87:84:f6:89:44:3d:b4:27:0f:77:
77:71:64:8e:9a:3a:31:c0:ca:93:25:e4:f1:af:4f:5c:61:ea:
8e:43:60:20:73:60:89:84:bb:61:56:54:50:28:87:14:11:99:
4a:a1:85:7b:96:92:f2:02:6d:45:56:b9:af:41:07:a9:2f:47:
64:99:22:73:da:c6:b7:d7:7a:6b:05:f9:b5:d3:38:b0:25:ad:
3d:36:c5:9e:a4:40:55:f2:4e:2e:6f:9c:b4:d6:78:80:1e:bf:
09:87:f4:56:5f:61:16:75:71:e2:ab:ac:cf:e4:f4:7d:6c:ff:
58:fa:35:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeJtEJvvaoZFVVE4um8llk0of4qAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYz
OUZCNEZGNjAeFw0yNTEyMDExMTI3MTdaFw0yNTEyMDQxNTQ1MTdaMDMxMTAvBgNV
BAMTKDk1NDExNDc0RDU1RjEzQTQwMTk4MDc5RDEyNjcxQjFCMjA5OUY2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeQkTgWj4Mhgw/+RWr5FoKVmd
DKLUImmNuG5BGXls1vlq77o6LcFpgAW23q/vAQjuX7I8T5kz2YDV0FX1aNNQNgfA
Rs0vFy1Jfy8Nd7hsCFN3FzXwSwB944dp/9gtHEIky3PbLhCTZbULu1Ki4bN/lQwq
02+DmBMKJXtQjQgefEBvmuzNXBP2XDILbMODpk6VKmFwRC99NhZR/19tMkPM5lkH
BxZgP6W0l0nS4VxeaCod30EdjiDT4nNVSAwylMBW0fqnWSrjQDCAwm10s6rfSUls
+//usGbpMesdE9Y7PVxyFxfMIRH2/1mop5hKKPM8FEw54dmJyhVPgrRX/vjRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlUEUdNVfE6QBmAedEmcbGyCZ9qAwHwYDVR0j
BBgwFoAU4xy95cbzPa48qXoBHqT05jn7T/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YzAyMDFlMy04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC9FMzFDQkRFNUM2
RjMzREFFM0NBOTdBMDExRUE0RjRFNjM5RkI0RkY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYzOUZC
NEZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl
MTQtOTk5OTQ5MzZkNDkxLzAvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0
RTYzOUZCNEZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ+TPhr1QORxvlgxylh9DDQjEXNzhQTyuSw1
OW6ONolN9IntWdBxPCxMcpiU60kmYmEB/71aJ2K9nxMQn+3s7xoqdYEfYPdBE2Ty
pKzymHhb8rYCm96G809aVzHpfMPtEnIfZ4hTFMHJvodoHoPPnPo3lra/5kRzzub3
kPMjYQWx3eKYgeS7h4T2iUQ9tCcPd3dxZI6aOjHAypMl5PGvT1xh6o5DYCBzYImE
u2FWVFAohxQRmUqhhXuWkvICbUVWua9BB6kvR2SZInPaxrfXemsF+bXTOLAlrT02
xZ6kQFXyTi5vnLTWeIAevwmH9FZfYRZ1ceKrrM/k9H1s/1j6NYk=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:30 2025 by rpki-client