This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
File: 94980F009D62A16111BD1186549F0579B0CED71F.mft (raw, json)
Hash identifier: df6PpnNmlXdpHPyU41vqG3XUv6WcuO5r1WURbpclSLk=
Subject key identifier: 7D:FF:38:F3:05:05:B0:D8:5C:A1:A1:08:FD:06:5D:4F:29:08:E3:38
Authority key identifier: 94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F
Certificate issuer: /CN=94980F009D62A16111BD1186549F0579B0CED71F
Certificate serial: 743CAC9FCBF14C2AF91A86BCF8AE301CB612649B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
Manifest number: 04A9
Signing time: Mon 01 Dec 2025 16:21:20 +0000
Manifest this update: Mon 01 Dec 2025 16:16:20 +0000
Manifest next update: Thu 04 Dec 2025 16:52:20 +0000
Files and hashes: 1: 3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa (hash: K/Ew8HGNEEXALuqDZCUg14kFUyIms5Tb1ZdOOrTK4qI=)
2: 94980F009D62A16111BD1186549F0579B0CED71F.crl (hash: dHqzNTGaoflxF2Bn40+DLgGLV2uEKD0zJr7USV7JRzE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.crl
rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 16:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3c:ac:9f:cb:f1:4c:2a:f9:1a:86:bc:f8:ae:30:1c:b6:12:64:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94980F009D62A16111BD1186549F0579B0CED71F
Validity
Not Before: Dec 1 16:16:20 2025 GMT
Not After : Dec 4 16:52:20 2025 GMT
Subject: CN=7DFF38F30505B0D85CA1A108FD065D4F2908E338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:6a:b1:b0:16:8f:9c:6f:49:02:f9:3d:b7:
1f:db:9e:f0:07:11:6f:1d:d0:4e:46:7a:b0:af:f7:
1b:4c:77:71:25:0e:fc:83:28:0a:02:1a:3f:30:6c:
5a:73:b2:89:19:15:88:34:87:4c:1a:1e:5e:ce:45:
13:c0:f8:7e:a8:53:dd:f6:e3:3a:04:a9:d6:45:a5:
69:93:fd:69:18:c4:8d:78:71:42:08:f9:60:08:d5:
f1:ba:39:bf:65:f2:7d:2d:23:c8:f8:05:bd:bc:8d:
b6:f6:c0:1b:fd:4c:c4:4d:1e:b0:98:f6:49:09:71:
fb:ec:96:2e:70:f3:d2:87:5a:8c:5f:8a:dc:d0:f6:
21:53:9a:64:a7:49:97:73:ff:c2:ed:73:44:e0:be:
32:94:04:08:54:b0:f2:c6:a9:d5:ec:1f:ac:d1:c8:
ab:8a:07:b6:39:eb:75:b6:5f:85:38:94:8c:ef:56:
8c:47:54:0d:5c:1b:9c:9a:ae:f2:13:ae:92:ef:ce:
bf:f0:9e:18:e8:79:c2:4c:28:7d:fe:6c:ec:f2:ed:
2d:03:08:01:49:10:a2:d5:f0:0b:31:f0:50:ac:3e:
dd:af:b0:0c:6c:26:66:b9:87:c7:e9:13:63:c7:48:
4a:c2:7b:71:78:b9:35:ae:63:11:c7:1a:53:cd:bd:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FF:38:F3:05:05:B0:D8:5C:A1:A1:08:FD:06:5D:4F:29:08:E3:38
X509v3 Authority Key Identifier:
keyid:94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:61:71:44:11:fa:24:f5:b2:ed:a0:ae:8d:4b:59:38:38:6e:
af:0f:45:cf:3b:92:a6:d1:94:3f:38:54:12:4f:de:33:92:04:
49:ad:b5:8d:25:25:6f:f1:9d:57:7a:2f:8e:87:49:a1:70:f3:
42:56:56:7d:df:ea:d3:60:43:ab:7b:94:cd:e6:3f:01:5b:93:
ef:13:e7:25:61:09:a8:db:f7:74:ce:43:88:0f:db:bf:2c:e8:
76:bb:f3:5e:b3:49:9e:ed:28:05:c2:b8:c3:1e:7d:72:34:cc:
db:9b:89:92:f4:7b:cb:24:50:a7:b9:59:0f:68:eb:29:d8:4a:
bc:9d:3d:54:42:43:7c:e3:33:26:65:fc:45:39:4a:89:b8:40:
41:5c:35:3c:f6:31:52:75:7e:20:02:1a:fd:bf:32:4c:f4:e2:
3d:2a:77:5c:6b:2d:13:09:59:56:32:6b:d8:e5:d1:1f:ed:3b:
59:c4:5a:92:bb:46:47:ff:3a:dd:53:87:c0:75:4a:7a:87:52:
29:06:0f:79:0d:a8:36:d4:a6:f8:88:f8:d9:29:43:16:a7:ba:
6a:6b:0b:3a:2d:f8:64:ee:13:01:bb:12:66:a0:18:16:7a:19:
cc:38:06:b9:13:23:72:22:c0:f7:4d:54:a2:2e:5b:ca:f5:04:
4c:23:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:24 2025 by rpki-client