This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
File: EA364B048B6B5A81F887F07FDB60499024CE8C94.mft (raw, json)
Hash identifier: v6k0ganChM6A6c0Qam3uY+0S5oFXxSG3kitlKLf69Xs=
Subject key identifier: F9:BB:30:DF:69:91:FE:39:53:BA:B6:80:C4:05:76:52:04:55:B3:10
Authority key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
Certificate issuer: /CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Certificate serial: 5D456E043EB4A1E46368D465EEDF6B9908E1ECD5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
Manifest number: 01D2
Signing time: Tue 02 Dec 2025 19:01:21 +0000
Manifest this update: Tue 02 Dec 2025 18:56:21 +0000
Manifest next update: Sat 06 Dec 2025 01:01:21 +0000
Files and hashes: 1: 3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (hash: 1tRc3T5eoYylfxzpb+5valfa2TuOC31+xj6WFfqujf8=)
2: EA364B048B6B5A81F887F07FDB60499024CE8C94.crl (hash: 2k05MQ5JlHqUH8gI/VW5fr6f6xwCdQ0KGgoE+Pn80ls=)
3: 3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (hash: xlKKXnljJ3PSbbQl/T6kQz4TyDiPxS/om+wNRGRU4B8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl
rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:45:6e:04:3e:b4:a1:e4:63:68:d4:65:ee:df:6b:99:08:e1:ec:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Validity
Not Before: Dec 2 18:56:21 2025 GMT
Not After : Dec 6 01:01:21 2025 GMT
Subject: CN=F9BB30DF6991FE3953BAB680C40576520455B310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:82:29:63:6e:08:e4:f7:eb:d7:b6:fb:71:b0:
36:c6:80:3e:d5:b2:12:66:75:28:5a:4f:bd:d8:eb:
ac:82:8a:b9:07:dc:20:9a:c0:6d:e5:d2:07:bf:9b:
7a:c3:03:61:d1:0a:e1:8e:61:70:9b:ff:f5:cf:68:
6c:72:48:90:b2:2f:c3:8b:67:11:8f:e3:09:54:bf:
6b:ff:77:c9:f5:11:01:bd:b2:3c:80:10:e7:30:05:
ea:81:76:59:bc:cc:6c:a7:9a:a7:41:f0:08:00:12:
6f:8d:c2:de:d1:80:46:cb:f9:45:88:92:bb:3d:2c:
d8:9b:2d:d4:af:23:cd:29:1b:2b:12:09:d0:f3:30:
0a:df:bd:9a:02:03:f6:9b:f4:33:76:15:18:ef:0c:
3e:ee:24:74:0a:03:bf:08:0d:59:32:87:31:d9:15:
ad:0b:d5:92:15:e1:e1:5b:b1:72:0f:2c:ea:66:ed:
31:3b:c7:aa:41:a5:9b:e4:87:5b:fd:0d:17:ec:fb:
0b:88:1a:89:af:5b:54:45:be:78:08:92:68:e6:39:
07:44:d7:b4:a9:de:21:bf:9e:04:5a:9f:5d:5a:96:
0b:ec:30:f5:83:36:f4:aa:cb:c6:74:dc:3b:19:5b:
52:7d:74:61:33:8a:d7:72:d2:27:cc:b3:7c:82:85:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:30:DF:69:91:FE:39:53:BA:B6:80:C4:05:76:52:04:55:B3:10
X509v3 Authority Key Identifier:
keyid:EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f7:9e:41:f5:21:57:ed:11:c0:7d:08:d5:3d:d9:6d:fe:09:
4a:84:2a:ab:0f:bc:68:ba:71:4b:eb:60:a9:89:68:7f:a3:b9:
c0:da:e7:66:a9:ce:f0:35:c1:c7:27:64:f7:16:48:66:8e:81:
63:92:93:60:d4:84:09:71:b5:76:6d:29:d5:4e:b3:71:86:6d:
01:d7:3c:0f:54:7a:86:cd:97:5f:82:a5:72:f7:6f:60:8f:3c:
b7:e3:88:a3:cc:86:ff:57:99:c9:04:d0:e5:f9:21:06:e9:e4:
bb:69:23:66:36:95:80:13:9f:1d:47:03:d6:5d:4a:cc:0d:63:
91:f5:51:fc:95:b5:16:15:88:3e:1e:2d:31:f7:55:3a:f8:73:
5d:77:14:32:7b:14:2a:54:eb:35:a3:6d:dd:22:e6:66:ff:57:
c5:db:34:ae:fc:35:bf:41:a5:b0:31:1e:b6:cb:49:fb:81:cc:
05:1a:75:d6:17:a5:ca:1f:de:c8:0f:2c:40:da:29:75:5d:ed:
b9:bf:d8:44:6e:9b:ae:4c:9d:04:39:38:e0:95:60:ac:22:36:
db:d4:dc:86:e4:6c:fa:24:f0:82:df:79:43:1a:7d:20:50:ba:
c2:4e:81:79:17:03:19:dd:21:a9:4d:15:02:f0:ba:3c:82:1c:
b5:3a:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 12:41:34 2025 by rpki-client