This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json)
Hash identifier: +JiKSKWRtvJ9Me3bwiBdv435dJ8vzIh3ANwY4mvnjhM=
Subject key identifier: E6:B9:1C:D8:9D:B3:13:D6:5B:FD:C4:F2:54:C2:78:5C:27:1C:F2:CC
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial: 611215FC1330A22010CE0B551C1BEA539FD690C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
Manifest number: 0141
Signing time: Tue 02 Dec 2025 18:41:36 +0000
Manifest this update: Tue 02 Dec 2025 18:36:36 +0000
Manifest next update: Sat 06 Dec 2025 04:28:36 +0000
Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: scls7C55gxeSPYXffcifa7nuci/WJWRpTboWSjm/W/w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 04:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:12:15:fc:13:30:a2:20:10:ce:0b:55:1c:1b:ea:53:9f:d6:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Validity
Not Before: Dec 2 18:36:36 2025 GMT
Not After : Dec 6 04:28:36 2025 GMT
Subject: CN=E6B91CD89DB313D65BFDC4F254C2785C271CF2CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:47:56:bf:9f:d2:cc:c2:47:86:e1:15:56:
b2:1c:d5:18:1f:4a:3b:8a:1d:a4:8c:88:5d:2b:84:
9c:de:03:16:fa:9c:df:6e:53:7b:8b:61:2f:1f:92:
45:17:bb:9c:2c:d2:98:fb:67:01:73:b0:0d:63:f1:
69:bc:d5:2f:56:23:04:42:99:6a:cc:bc:11:04:88:
0b:e7:fe:74:b0:08:74:e4:9d:1d:6e:5e:50:e8:0a:
3e:ea:16:ca:d2:6d:63:d6:64:cd:b3:15:77:4e:76:
4f:84:5b:f5:24:b7:7b:d0:9b:1e:f3:c2:b9:f6:2b:
4e:bc:33:86:83:33:53:6f:c9:96:60:66:47:96:25:
db:7f:80:9e:0a:54:8b:3d:ad:33:34:8c:99:29:85:
61:a4:26:e8:25:f2:b6:f9:0c:a1:39:b3:00:af:fa:
9f:42:3d:2f:54:f5:58:fb:8a:79:1b:3b:8e:99:a6:
09:67:bc:0b:8a:f2:11:07:4b:58:d4:12:0f:67:ad:
54:b5:88:86:0e:e4:da:51:f3:f7:0f:4d:f4:56:f1:
7d:85:92:47:cb:ac:f8:52:96:b8:0c:08:15:51:ae:
0e:81:64:b0:cb:88:f9:fb:0d:fc:61:ce:a1:ec:01:
08:ec:55:72:ee:5e:16:6c:02:03:21:3b:4b:8f:5d:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B9:1C:D8:9D:B3:13:D6:5B:FD:C4:F2:54:C2:78:5C:27:1C:F2:CC
X509v3 Authority Key Identifier:
keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1f:85:5b:06:db:65:f3:93:19:7d:d5:da:e8:80:15:22:bb:
68:34:ac:b2:bd:aa:78:3e:f4:8c:4e:0a:b2:36:14:ba:91:2b:
26:30:53:1b:f7:36:a9:99:b7:c4:95:e0:31:89:85:d3:98:57:
3d:41:61:ed:06:18:a3:bc:68:cd:52:d5:11:62:76:15:be:71:
25:bb:87:c2:c4:b1:e7:c4:96:56:f0:75:87:ff:5d:6a:22:ee:
fc:6f:71:8f:34:81:b5:f3:e3:51:1c:07:a3:06:ef:ba:4d:1d:
98:e6:b4:ad:d8:50:22:43:da:44:81:02:db:69:ef:df:bf:4a:
50:fb:a0:0e:77:7a:92:d0:a0:10:7b:d6:a8:4f:e0:2c:81:a8:
b8:6a:6c:45:e7:bc:c9:ee:14:59:58:46:fc:57:cd:83:73:d8:
60:e3:af:1e:8b:e8:8c:8c:d2:bf:99:c1:fc:07:29:ec:69:e2:
58:6c:fd:6a:4a:bd:7e:b0:ab:ec:77:c3:b9:c1:05:20:fe:50:
23:d0:95:92:87:75:1f:e8:94:e2:5e:00:af:c5:f6:51:73:5b:
6d:e8:3c:cd:11:0c:77:34:83:c6:1f:4a:1b:f2:0f:83:f3:72:
c6:65:66:49:43:fc:4a:a2:91:a8:3c:73:74:6b:25:eb:d9:96:
4f:c4:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:39 2025 by rpki-client