This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json)
Hash identifier: 5TCgFGkWEQTfxVr2GFEPC0xhTX2i0kMzctn5+VYyrbk=
Subject key identifier: 36:2C:6C:BF:B7:A3:79:9F:F0:A6:57:88:1E:03:17:C9:C3:FA:81:3A
Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77
Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977
Certificate serial: 626605078034993674A001046902BD8D05085C73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
Manifest number: 052E
Signing time: Sat 13 Dec 2025 04:21:17 +0000
Manifest this update: Sat 13 Dec 2025 04:16:17 +0000
Manifest next update: Tue 16 Dec 2025 12:30:17 +0000
Files and hashes: 1: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=)
2: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: jdmCG+zrE0JXau/3jvGDbNx3cvZvdjqo1cKjbSPU4ZQ=)
3: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=)
4: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl
rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 12:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:66:05:07:80:34:99:36:74:a0:01:04:69:02:bd:8d:05:08:5c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977
Validity
Not Before: Dec 13 04:16:17 2025 GMT
Not After : Dec 16 12:30:17 2025 GMT
Subject: CN=362C6CBFB7A3799FF0A657881E0317C9C3FA813A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:b5:87:86:56:cc:65:37:f1:bb:0d:fc:17:
58:0e:38:2a:68:78:4a:a8:b1:66:ea:6d:8b:c2:4a:
08:34:3d:99:07:93:e7:11:d7:55:3c:bc:f7:f9:80:
36:23:97:37:0e:ab:ca:c6:35:06:93:5b:74:87:ac:
8b:b6:a7:ad:fa:cb:2b:8a:2e:3b:09:18:08:77:13:
9c:7f:cd:2f:ab:0c:64:1f:a1:fb:7f:14:d9:c5:3d:
a1:7c:7b:51:69:8d:84:09:37:8d:26:6d:ac:95:05:
71:32:96:fc:66:be:11:2a:b1:15:35:2a:9c:91:5a:
17:28:69:30:06:65:c6:64:32:81:40:fd:c7:98:23:
49:34:2b:68:10:d6:17:ba:99:2b:e8:e1:23:49:ab:
c0:b5:80:d9:4d:99:79:b8:6b:b8:ea:e8:a7:e5:d6:
8a:10:44:06:48:69:d5:43:5d:b8:81:5f:03:11:f7:
70:0c:f0:bd:e9:f5:f6:8b:8a:4f:4d:83:78:c9:3b:
92:b6:2e:78:90:af:52:50:aa:0e:9e:50:2d:95:06:
f5:27:20:a8:17:96:89:6b:d0:94:60:bd:8f:de:cc:
d4:6c:89:12:2a:ac:ae:d3:e0:15:7a:85:3c:79:4d:
0c:37:1b:55:95:07:d2:d6:ad:0a:19:5b:65:78:3e:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:6C:BF:B7:A3:79:9F:F0:A6:57:88:1E:03:17:C9:C3:FA:81:3A
X509v3 Authority Key Identifier:
keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:2f:45:ee:3a:30:fe:1a:75:e0:59:c1:dd:a2:4b:6d:c8:
65:f5:db:89:ea:ce:15:63:bf:fa:fb:0e:b0:6f:34:ef:39:c1:
37:ad:35:05:94:6a:8f:ef:64:e6:74:96:c7:0c:5e:f4:99:7b:
63:cd:44:c3:02:3e:76:fb:9c:49:29:bb:67:01:04:e9:28:55:
a1:87:98:d5:56:80:93:1b:10:d8:d1:15:28:a6:58:3c:a7:9e:
9d:39:44:6d:78:92:13:e8:c9:89:45:b4:f1:3d:03:1e:71:9c:
07:53:ba:b6:b9:f8:a9:02:11:d4:3b:e4:bd:e5:11:81:0e:4d:
bc:f4:fd:26:dd:fb:c8:0d:07:77:32:64:5f:b2:88:24:23:ef:
42:dc:47:24:c6:08:9e:fe:ab:52:df:c9:2f:d6:8a:c6:a7:f8:
04:5f:7b:0f:8e:4c:2e:04:fb:d3:80:99:2b:b2:a8:3f:3f:ae:
d3:ae:cd:da:95:3e:45:49:33:30:a8:93:4c:23:18:b0:38:e1:
71:0a:d6:e4:08:3e:05:fc:78:36:06:5f:0b:16:20:fc:d6:a8:
61:1e:88:79:20:78:f4:81:46:8b:a4:38:d1:47:81:93:d3:de:
ff:44:2f:54:26:02:a3:19:35:7d:69:ea:20:37:27:50:53:19:
38:03:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:17:18 2025 by rpki-client