This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
File: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft (raw, json)
Hash identifier: Wq3KvosDLxF9TDKEwWk+/y21orW3q2+P0xU4ueL7VB8=
Subject key identifier: 28:78:6B:22:7F:84:81:85:79:A5:A8:8D:2D:4F:45:98:17:F3:2B:98
Authority key identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10
Certificate issuer: /CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10
Certificate serial: 20A72D700D7C1BDE884F85E239D2B47EDFDD0171
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
Manifest number: 03C4
Signing time: Mon 01 Dec 2025 14:50:39 +0000
Manifest this update: Mon 01 Dec 2025 14:45:39 +0000
Manifest next update: Thu 04 Dec 2025 23:35:39 +0000
Files and hashes: 1: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: oUBWXXStIDyPZSiCAParv1979xKJJMQyaI/tmorNEfQ=)
2: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl (hash: mUCZ5+L4Nb/9We5SChUmSc4Zo785LMZCwyMcYFcEh1s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl
rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 23:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a7:2d:70:0d:7c:1b:de:88:4f:85:e2:39:d2:b4:7e:df:dd:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10
Validity
Not Before: Dec 1 14:45:39 2025 GMT
Not After : Dec 4 23:35:39 2025 GMT
Subject: CN=28786B227F84818579A5A88D2D4F459817F32B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:fd:48:04:c2:d3:2c:52:2f:79:6f:c7:87:
1c:cc:07:02:ba:63:91:1a:24:fa:fd:1e:a3:6e:08:
43:0b:36:88:b6:b7:1a:55:44:46:cd:6e:47:d3:91:
8c:93:2f:10:b6:aa:e8:16:81:74:a9:37:f2:c5:9a:
4d:01:83:01:f3:24:2f:39:8e:ac:d7:d9:cc:fd:70:
65:28:e6:db:2a:e2:8b:ed:9c:68:f2:d1:fc:ca:8e:
76:0a:36:e5:08:53:21:f3:f9:f5:15:a1:7d:ec:6e:
62:5d:70:e1:51:f3:91:6c:49:88:65:96:01:66:aa:
b9:02:40:8c:f1:83:29:9b:c7:12:72:e5:81:dc:4b:
45:7e:c5:3f:04:99:e9:88:5a:d0:30:4f:14:15:5a:
b5:f9:07:2b:e1:b9:2a:6f:35:a2:52:4f:04:fa:d3:
a7:13:c5:62:2b:6f:73:9d:d7:69:b4:4a:bb:4d:a2:
79:37:f7:a1:aa:36:19:1e:9b:79:a1:6f:54:d0:53:
73:4a:42:0c:13:a6:15:3e:70:a8:a4:a5:e1:9a:e2:
94:b4:1f:a8:19:1f:b6:33:6b:6c:03:f5:c9:39:e1:
dd:4d:47:bb:1f:a7:4d:2a:fc:54:02:88:87:1a:02:
a8:a9:82:5f:c6:70:06:f1:55:4c:25:b8:b3:cb:12:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:6B:22:7F:84:81:85:79:A5:A8:8D:2D:4F:45:98:17:F3:2B:98
X509v3 Authority Key Identifier:
keyid:07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:b9:fd:c0:38:01:eb:dd:4f:dc:1c:6f:5b:18:b4:87:96:
7c:3e:e9:b9:5a:18:90:49:63:0a:59:77:18:6f:75:0a:8e:1c:
54:df:17:21:45:51:19:93:ff:b2:01:a5:3c:86:23:0f:f2:2f:
bf:78:ff:60:35:6e:ba:ae:c8:17:5d:83:48:0e:b2:0d:64:cb:
ab:10:34:c6:b2:9c:21:bf:08:95:15:e8:40:2e:42:38:bd:d2:
ca:53:67:c9:bf:18:88:cc:ac:2e:c3:98:fb:4c:a5:06:a7:7c:
04:7b:de:e2:37:cf:37:5b:61:28:aa:45:2c:42:9c:b9:9e:a3:
b2:00:b0:02:6e:b0:0f:70:b4:fe:5f:67:e1:9b:d8:4c:83:56:
fd:b4:0a:89:3c:07:64:0a:56:75:30:33:fc:df:2b:82:db:1c:
ad:17:1e:81:33:94:31:d7:75:6f:16:be:ed:06:b8:87:e2:4b:
e2:6b:c4:3d:d0:0b:6f:8e:c1:78:93:f0:6b:0e:58:3c:7f:18:
5d:f6:5b:1a:4f:b0:aa:ea:f0:d0:23:97:9b:ce:c9:63:59:15:
4a:9d:e8:f3:23:e1:91:c5:b9:22:7f:9f:25:ad:6c:61:70:ec:
f6:b2:52:a1:37:be:50:d1:99:be:f8:4d:64:86:26:13:8e:a8:
e6:ff:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:46 2025 by rpki-client