This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier: fyrIhDQPi6t3CVwvAS/aGWRSjsYQTm1ire8tTrnczno=
Subject key identifier: 67:D4:F7:45:11:88:3E:5B:09:86:81:5C:4D:B9:42:9A:DA:43:91:BE
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial: 27EABCB2D0C522C6C76EF661E2F64A5CD6C71EC1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number: 0529
Signing time: Mon 01 Dec 2025 06:30:01 +0000
Manifest this update: Mon 01 Dec 2025 06:25:01 +0000
Manifest next update: Thu 04 Dec 2025 13:17:01 +0000
Files and hashes: 1: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=)
2: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=)
3: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=)
4: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: zEBOwaUGWVoT054CF6kcpr/laRS17wIvwZdLYmVZOqY=)
5: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=)
6: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=)
7: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=)
8: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=)
9: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=)
10: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 13:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ea:bc:b2:d0:c5:22:c6:c7:6e:f6:61:e2:f6:4a:5c:d6:c7:1e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Validity
Not Before: Dec 1 06:25:01 2025 GMT
Not After : Dec 4 13:17:01 2025 GMT
Subject: CN=67D4F74511883E5B0986815C4DB9429ADA4391BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:02:f1:5a:44:f8:1e:0c:a4:79:90:35:9e:
34:25:b9:98:7e:c2:5c:71:a4:c7:2d:f5:4e:74:35:
56:75:59:f9:2f:fb:c1:87:81:48:3f:88:0b:e0:c8:
a8:1a:75:87:5e:a6:9b:7d:42:7c:a8:49:b6:eb:eb:
7a:be:11:80:56:0c:48:2a:82:94:4e:3d:31:15:ac:
6e:04:0e:e5:c5:d2:8f:e4:49:19:2c:05:97:84:08:
0d:0a:75:48:41:d9:da:ac:ac:cb:07:41:ed:5e:f3:
de:7c:d0:ca:0a:50:fb:65:27:29:b8:7f:bc:e0:f0:
3c:e5:ec:3f:63:d9:fb:4d:71:f9:e2:35:e1:7d:28:
97:fd:f3:56:9c:71:e4:79:39:af:e9:78:e0:a0:0e:
7a:6d:7c:ee:50:e6:d0:58:02:29:06:5d:81:32:d5:
9b:2a:50:4a:9a:c1:be:85:8f:fa:d0:ce:4f:ca:da:
f5:90:d9:12:71:4d:5f:e8:89:16:21:67:0e:5f:ae:
c7:2b:a5:6d:6c:2c:52:51:e8:0f:17:0f:ab:ef:e3:
46:5a:71:f6:52:e6:d5:ee:a7:d7:62:c7:6e:20:fe:
f2:dd:76:ae:80:b8:9c:b1:10:2e:e7:58:6c:37:2c:
e0:6f:19:e9:ac:6c:f7:57:a8:34:ac:85:1f:a1:99:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:F7:45:11:88:3E:5B:09:86:81:5C:4D:B9:42:9A:DA:43:91:BE
X509v3 Authority Key Identifier:
keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:93:a8:f8:1d:98:a5:50:db:05:37:4a:47:17:c5:58:84:0c:
f9:ac:a9:16:52:e1:c4:a4:36:77:c2:e5:52:74:b0:c0:01:23:
59:87:c7:2e:f4:2e:0f:fe:f3:3e:4b:e4:0b:cb:fd:85:26:57:
cc:b5:1c:ec:8f:bf:3a:f0:65:24:4f:24:d4:07:8e:31:b6:8d:
38:28:b5:c0:89:a4:4c:23:51:e4:6c:9d:4a:c6:dd:89:d4:51:
ed:01:01:67:77:84:81:92:b3:02:4d:74:c3:f1:61:1b:88:2c:
75:62:74:99:1a:d8:eb:30:88:69:6e:2d:2a:bf:52:92:29:7c:
86:76:ea:5a:a3:20:98:a6:de:62:ad:f6:1c:fb:30:db:18:74:
39:3b:94:ba:3d:59:cb:09:d0:52:e0:a7:6c:4b:e0:20:01:83:
1f:cc:ab:c9:78:ce:1f:fd:60:8b:01:1c:ab:0d:2e:4e:e7:db:
d6:bb:d0:95:10:ff:5a:65:f8:0c:27:98:b0:40:0f:46:bf:d2:
49:bb:84:79:a2:0f:b7:b2:e5:b4:b3:90:cf:45:d9:46:5c:bf:
35:00:d0:72:c2:da:3d:ba:bd:5e:99:64:da:07:c1:a3:fa:06:
b7:57:94:bd:0b:c2:50:ea:5a:e0:b3:6d:1d:a0:4a:01:58:8c:
67:63:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:59:55 2025 by rpki-client