This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json)
Hash identifier: olLhCEQkjsmULM2Fo9kdF7AvU9p+m71cdFM7OVBoz5o=
Subject key identifier: 15:C3:DC:04:FA:51:5C:B5:4C:23:40:F0:43:34:14:04:30:FE:08:C4
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial: 7BA48E0AE834EBE24744B6161F3500B63F61D467
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
Manifest number: 01F5
Signing time: Tue 02 Dec 2025 14:01:12 +0000
Manifest this update: Tue 02 Dec 2025 13:56:12 +0000
Manifest next update: Sat 06 Dec 2025 01:20:12 +0000
Files and hashes: 1: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: 6MS+hpY8AAAW2vT3UGxha7ncda+Mv46TSI1kZZNVt4E=)
2: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: o9JWChuMppyDlwbbP2wl7a1BlqxO7U1pMNyySwQnepQ=)
3: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: q2HyhqMcqNKr/1kOvWeC7Bv0LZJy34QkHpHUyM3pSpc=)
4: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: D5/nCPHdYPg4x0EsuFKIju0GbogWnKrQBKCIoI/i2JE=)
5: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 2I1hpf1XM01hpFE4apAQaCDZ2SJv/6pMmkxZHdmPTWg=)
6: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: Pkdf7SsfkpbiJuE6kdJ40FkL/ss5mA3yBuB75QVgOO8=)
7: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=)
8: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: CFppjbu+j9vN8xa/dDTxQelhICtYUCoA83bushfIr2o=)
9: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 01:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a4:8e:0a:e8:34:eb:e2:47:44:b6:16:1f:35:00:b6:3f:61:d4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Validity
Not Before: Dec 2 13:56:12 2025 GMT
Not After : Dec 6 01:20:12 2025 GMT
Subject: CN=15C3DC04FA515CB54C2340F04334140430FE08C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:ff:e1:ce:e9:66:05:5d:42:4b:98:4e:37:
66:a7:03:22:ab:e5:cc:c7:ad:31:a8:54:01:b4:c1:
02:2b:90:a4:b1:3c:cb:22:d3:6c:c0:ca:d2:87:54:
17:98:be:2a:4f:a4:76:f7:a1:11:1a:70:e1:74:01:
a4:a7:73:94:ca:2f:16:f9:26:76:3d:70:ce:e7:41:
b2:48:e0:5b:53:89:0a:41:04:d4:d7:b2:6f:a0:dd:
2f:92:83:98:9d:1b:21:ff:80:d7:11:86:cf:b2:ef:
83:78:c2:bb:d2:32:10:77:e7:aa:f7:a2:a6:4e:85:
c5:4c:5b:48:06:59:c9:55:40:13:ef:fc:71:23:07:
eb:0d:aa:8c:cd:21:d2:af:72:db:8f:2a:7d:48:e9:
17:13:bc:ff:5a:e1:b6:6f:f0:9b:3e:c5:c6:28:e9:
b8:4b:d5:01:84:54:6c:12:60:a6:0c:c6:5f:c5:80:
5d:63:7c:5a:f3:9f:af:cf:9e:dd:19:0f:03:ed:db:
54:25:0e:fe:59:43:db:1d:35:8c:26:5e:c0:78:d1:
e5:b5:d2:e9:48:d1:f1:20:70:fd:7f:70:f6:68:1d:
89:9c:eb:df:a5:e1:c4:cd:84:8c:e4:49:c4:b9:20:
72:4f:df:a9:08:5d:ef:be:c1:5a:89:08:4c:ef:a8:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:DC:04:FA:51:5C:B5:4C:23:40:F0:43:34:14:04:30:FE:08:C4
X509v3 Authority Key Identifier:
keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:45:6c:b9:63:fa:cb:09:a1:5b:00:22:d4:35:37:1a:57:b4:
d2:df:b7:56:af:b8:b2:d7:cc:e9:a4:a1:4d:e1:ca:e4:17:d0:
fc:af:e7:79:0e:a0:60:94:98:53:45:7f:29:43:78:bf:2f:3a:
b6:20:98:40:9c:4a:a4:d7:ae:a8:b1:c8:62:40:84:46:07:91:
49:7e:97:7e:88:75:ee:16:ed:ee:85:72:11:b6:8d:b9:7d:5a:
1d:d0:1d:47:60:f6:d7:ee:62:00:8d:0e:b4:29:39:27:14:c9:
84:d9:76:ae:bd:23:92:3d:b0:50:ef:61:34:c5:ae:a9:11:a8:
a4:d3:aa:55:7a:45:64:10:44:58:aa:21:37:73:56:2c:6d:61:
ba:98:b2:ac:6b:bb:8f:70:18:6d:bf:f0:96:1e:1e:df:4a:af:
30:08:b7:40:27:1d:58:a1:5f:5b:a7:8e:81:98:9f:31:a3:ec:
f0:a8:fe:0d:c7:05:7a:e8:3c:d2:3a:e6:b7:a2:49:1c:f3:63:
64:31:11:46:2a:7e:de:f0:fb:df:75:57:38:53:83:73:d9:44:
5c:f3:38:c9:0f:c5:72:0b:6a:8b:f8:c1:26:80:9e:cc:3d:25:
a2:85:80:ed:da:6f:9d:49:67:00:97:e6:34:d2:51:82:a3:09:
ce:43:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:55:10 2025 by rpki-client