This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
File: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft (raw, json)
Hash identifier: qOzb7TrxdPBq/nf+YfBstf0q1TF813a8UNdqJv2fL4Y=
Subject key identifier: 34:11:C2:7E:F6:F7:61:B5:41:8A:C1:75:D1:49:7E:46:42:4E:E3:DB
Authority key identifier: C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7
Certificate issuer: /CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7
Certificate serial: 4767D10F58AD6BD1346E6ED784D676496B128BFE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
Manifest number: 052A
Signing time: Mon 01 Dec 2025 23:41:38 +0000
Manifest this update: Mon 01 Dec 2025 23:36:38 +0000
Manifest next update: Fri 05 Dec 2025 07:25:38 +0000
Files and hashes: 1: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: zzI9rCP/tfewJ6DIUZ/QCdxSlaG3S+TwyllnR3goWuU=)
2: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: 2U9Zf0sqVfy0Kk4IRyy+SOT0VXzAWAUry3fc1mN2+RE=)
3: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl (hash: L7cvOH+caJ7fqnOe9sCu6UFyrayuPARz2BeUGChE4Z0=)
4: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: 95rrpHgHcYlBddvbgX3RJAAMir/2oNARNGF298XXujg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl
rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 07:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:67:d1:0f:58:ad:6b:d1:34:6e:6e:d7:84:d6:76:49:6b:12:8b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7
Validity
Not Before: Dec 1 23:36:38 2025 GMT
Not After : Dec 5 07:25:38 2025 GMT
Subject: CN=3411C27EF6F761B5418AC175D1497E46424EE3DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:b0:bc:00:d9:65:45:fb:a9:c3:b0:bd:65:
73:27:7a:a6:d6:e4:79:5a:bd:7f:d6:2b:64:30:0b:
f3:71:ab:6c:20:e2:69:88:91:7f:ed:19:35:c8:47:
83:37:ea:81:9f:63:9e:f4:6a:d6:eb:bd:72:83:02:
0d:8f:d0:8b:c3:1d:ac:3d:50:ab:e7:30:17:98:a6:
f0:81:0a:aa:ba:bf:55:e3:53:16:89:43:f2:e0:c3:
f1:c1:62:8c:e0:f4:ea:d3:2b:7f:82:97:71:c5:87:
ff:72:49:e3:b0:67:08:17:d1:e9:1e:d3:4d:94:24:
2f:b5:9a:62:8d:2a:7b:ca:d5:25:b4:60:17:a3:05:
fa:09:82:00:70:1b:3c:f2:1f:7a:cc:d6:67:14:c0:
e5:16:e9:a3:37:1f:03:38:9f:e9:8c:d7:74:5a:25:
e0:a1:bc:b4:d4:8e:bd:b7:43:ac:28:d1:8f:78:74:
c4:7a:b0:13:9d:75:37:1c:69:e4:97:48:06:78:c9:
39:0b:08:eb:16:53:63:08:5e:9c:04:2a:6c:98:43:
c3:45:c1:09:0f:3a:a9:45:71:a7:76:2e:f3:7a:16:
e4:bb:7a:d0:f8:d1:fc:2b:a1:65:20:61:79:52:6a:
a9:51:56:c2:6e:72:de:d4:22:80:7a:fa:5e:fb:1d:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:11:C2:7E:F6:F7:61:B5:41:8A:C1:75:D1:49:7E:46:42:4E:E3:DB
X509v3 Authority Key Identifier:
keyid:C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bd:5b:0e:22:0f:7f:36:5e:17:e6:cc:ef:e7:28:f8:5e:9b:
4c:4e:bc:b0:14:d2:96:0f:1b:fc:8f:a7:7a:bb:e8:69:63:a3:
38:51:df:27:24:9c:80:dd:72:ce:18:57:77:f3:39:ec:bf:00:
72:09:84:d3:04:c2:ac:e0:b4:b6:63:23:c3:17:ce:87:08:c1:
1b:07:68:0a:26:18:e3:b0:a8:40:0b:1d:7e:0a:60:a2:76:b7:
14:ec:20:9a:a8:04:86:96:fb:f8:98:53:89:05:9e:a7:da:fa:
6d:71:7b:88:c0:73:2e:7d:f7:81:35:7f:a1:ae:86:3c:d6:50:
1d:fe:29:4e:23:04:42:ae:db:b9:66:78:08:9a:00:b6:74:66:
ea:2f:89:8b:1f:71:3d:96:da:ec:c1:9f:38:18:c8:cd:06:7c:
14:47:ac:7f:9c:ea:04:19:ed:10:9b:de:ab:d0:1e:38:f1:d4:
8b:88:18:e6:96:64:e1:0e:36:e6:02:ae:4b:0d:e3:73:6a:11:
ab:9c:58:e4:a4:05:d0:ac:bd:eb:55:53:9c:10:f7:1d:b2:19:
ed:f7:13:00:d5:56:80:eb:24:a3:ff:d2:fc:73:77:d2:e4:d4:
fb:d1:82:c5:f5:e1:8a:a2:23:6e:86:31:50:c0:7f:b9:6c:50:
eb:7b:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:31 2025 by rpki-client