This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
File: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft (raw, json)
Hash identifier: TZgVcc0LEGzDL9kUrUKXwXtALFBS9Ctg8A71BtVTH4s=
Subject key identifier: 6D:D6:6C:A1:54:16:B2:DC:05:FC:8C:E5:A2:77:9A:5F:A1:38:A0:C9
Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Certificate issuer: /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Certificate serial: 218B82B3F8531486F26F0C81CCC037910E5FAD7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
Manifest number: 02AA
Signing time: Wed 17 Dec 2025 04:40:57 +0000
Manifest this update: Wed 17 Dec 2025 04:35:57 +0000
Manifest next update: Sat 20 Dec 2025 07:09:57 +0000
Files and hashes: 1: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: pb2t7SBeTp32K0Tjh6odZI2irDPZNgzYkTCAyS4mxhU=)
2: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl (hash: zW3620fVH7PQJS6W/08s520tA+w7tI1VQueqL/LcSpQ=)
3: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: gQUi+SSlZWbgtxREEtY9XyZ6mEDQwkMmGKLNXyWWZlc=)
4: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: bgLc0wXOVn9w5v/YbQRRsK2+epF0KGKuwlh4tr4ebCY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 07:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:8b:82:b3:f8:53:14:86:f2:6f:0c:81:cc:c0:37:91:0e:5f:ad:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Validity
Not Before: Dec 17 04:35:57 2025 GMT
Not After : Dec 20 07:09:57 2025 GMT
Subject: CN=6DD66CA15416B2DC05FC8CE5A2779A5FA138A0C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:71:ce:20:64:87:30:17:a8:74:69:04:f6:
bd:23:c7:df:db:de:b8:76:da:96:a7:b6:76:56:a7:
4c:d7:ad:49:6e:49:e5:2f:86:1c:96:7e:0d:3e:96:
17:a4:94:f6:77:0d:6e:a5:a7:2e:bc:17:13:98:a0:
46:21:66:5a:49:b1:03:f1:a1:9d:c1:3c:70:09:75:
2c:48:c5:db:05:89:2d:47:18:e9:dc:bc:c7:37:a7:
a5:7e:e3:95:9a:37:46:f4:3c:34:3f:7d:5c:51:7e:
1b:95:da:06:39:be:c1:6a:6e:fe:ce:16:77:0a:79:
55:9c:3d:c3:a3:f5:ea:7e:f7:a5:c3:59:57:54:bb:
58:54:e9:fd:37:28:8f:33:44:ff:04:74:55:7a:71:
97:58:9c:f6:e5:13:99:b6:29:d2:5d:54:1a:7f:28:
e9:67:02:1a:75:8d:09:29:da:89:0e:73:37:72:35:
e4:c5:72:95:95:3e:90:37:bd:69:75:fa:30:55:f7:
15:4f:f4:7c:88:87:00:82:f3:68:b9:37:84:f0:d0:
36:df:33:f7:97:35:d9:e3:a1:22:81:54:d5:71:47:
3a:4b:6d:49:9a:1a:4f:9a:cd:5f:00:8a:6b:47:9a:
24:5b:e5:e4:41:fe:61:4c:bc:cd:2c:8f:fe:fb:38:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D6:6C:A1:54:16:B2:DC:05:FC:8C:E5:A2:77:9A:5F:A1:38:A0:C9
X509v3 Authority Key Identifier:
keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:49:fd:fb:a2:de:16:77:7c:08:d0:51:99:89:49:b5:c4:
37:73:9b:ae:e8:6d:c8:5c:67:82:65:89:2d:e0:6c:3a:98:bb:
ac:98:ba:28:69:df:fd:25:f0:0c:b9:21:be:1b:ab:ea:98:71:
ed:d5:f5:63:e9:8a:c3:81:f2:94:50:77:91:fb:2c:1f:09:1f:
6f:b8:9d:ec:b8:16:64:d1:c1:18:00:ba:43:00:37:fe:7c:18:
65:d2:63:b7:4b:9b:53:c6:1b:82:a8:19:db:35:3e:b6:bd:0d:
20:57:28:9f:83:90:a0:77:cf:03:de:dd:eb:36:3d:83:da:80:
e9:06:60:01:8a:4b:f5:22:45:07:09:00:9d:a0:80:28:6a:9c:
25:b5:ee:ee:c7:16:63:b1:57:e1:23:a2:c7:c9:1f:ea:95:41:
67:55:dd:ab:2a:19:0e:2f:4b:1b:19:4a:6d:9e:c6:70:e1:fb:
7e:cb:f4:51:71:d2:1e:4a:89:4f:95:f7:4a:ce:63:93:67:dd:
16:92:97:5a:1a:3b:41:9b:72:fc:19:e5:71:e3:b1:95:50:85:
f9:1a:c5:42:89:3f:f9:7e:a5:31:af:12:2f:b0:15:66:57:af:
4a:72:eb:40:47:e1:cc:dd:c7:af:c7:ed:d9:e4:d0:8c:71:1c:
3c:39:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:06:47 2025 by rpki-client