This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
File: F1F25C19AB419E370912452242B8B55038581157.mft (raw, json)
Hash identifier: KSFMF73aiH+6bueKpNtnQNvDfTdO7BZqpozQ9hSKJM0=
Subject key identifier: 4A:71:3F:E7:E4:EB:0C:9E:56:1F:6D:63:1F:6F:33:B7:EB:2A:43:10
Authority key identifier: F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
Certificate issuer: /CN=F1F25C19AB419E370912452242B8B55038581157
Certificate serial: 613CD112792E1E6B9C7F6A8E8B40C6CEE0599960
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
Manifest number: 01B0
Signing time: Thu 18 Dec 2025 14:41:24 +0000
Manifest this update: Thu 18 Dec 2025 14:36:24 +0000
Manifest next update: Sun 21 Dec 2025 16:52:24 +0000
Files and hashes: 1: F1F25C19AB419E370912452242B8B55038581157.crl (hash: PpPC92tOAz82Ni1QI2LK+TS3OlWeDBm66Ad3VfBQ0jI=)
2: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: 3rPKYUZalojIRm9OVoB6zRFi27r01gp3XfIoDBOCPmk=)
3: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: jpWaT+oGFZ1feNV4Ontzk7N9Bf3lE1R8kV74EOaQmlQ=)
4: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: Nf1gJItG6184KCSXBcwB3dOHt5qHqt2wOtxt68ogTdg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl
rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 16:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3c:d1:12:79:2e:1e:6b:9c:7f:6a:8e:8b:40:c6:ce:e0:59:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1F25C19AB419E370912452242B8B55038581157
Validity
Not Before: Dec 18 14:36:24 2025 GMT
Not After : Dec 21 16:52:24 2025 GMT
Subject: CN=4A713FE7E4EB0C9E561F6D631F6F33B7EB2A4310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:f3:6c:f0:19:62:54:66:92:a2:7b:ba:4f:
25:5d:fb:e2:08:64:0b:ea:2b:30:21:c7:ef:4a:52:
85:d3:b6:1e:fe:fa:96:d1:42:04:ec:69:28:cf:bc:
58:2f:7a:be:a1:2b:f5:fc:32:19:54:06:7f:cb:72:
b9:9e:b4:ea:1a:f2:95:96:77:08:ed:42:5b:72:a9:
a3:83:e5:8d:93:50:92:52:1a:00:38:8a:f5:16:29:
94:8d:7b:13:d3:8f:f9:8c:86:1e:43:12:bd:3b:84:
73:41:ed:9a:1e:b9:4b:76:fe:88:66:59:f4:3c:56:
cd:2c:06:ac:f0:31:99:1e:0a:e5:c4:26:6a:39:3a:
a3:a6:8d:1a:9e:6b:5a:88:c5:b8:e8:db:eb:35:7b:
47:46:f6:7c:9c:df:0b:05:f3:da:62:b9:f5:9e:38:
51:58:c8:87:44:68:eb:14:99:eb:b6:8a:e7:cf:3f:
68:cb:46:32:5c:b3:00:dd:d0:f2:12:99:49:e0:ac:
e1:94:de:2f:8e:26:6e:1e:42:06:33:88:f0:9e:5c:
7b:b9:c9:0a:0e:ed:94:d1:93:d9:a5:f4:b2:7d:b9:
ea:6a:3b:5c:5b:c3:ae:08:8d:b5:9d:13:24:82:2d:
40:83:5c:42:5a:12:62:c3:25:7c:a7:0c:f3:01:e9:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:3F:E7:E4:EB:0C:9E:56:1F:6D:63:1F:6F:33:B7:EB:2A:43:10
X509v3 Authority Key Identifier:
keyid:F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:b4:4d:5a:1f:30:79:e4:c3:b7:09:71:b9:cd:d8:78:cd:5d:
c3:1a:74:8c:4b:c3:8a:f5:ca:84:a6:c5:42:05:98:cd:ff:d5:
14:47:cd:f0:33:0b:e6:88:64:a6:6e:4b:60:08:6e:55:ef:9f:
31:fe:1e:5c:9a:58:29:6a:9f:e5:27:fe:08:27:20:7c:09:50:
87:9b:c8:66:f1:a9:e0:17:b3:9f:66:83:9a:06:02:d5:c0:f5:
d1:a0:87:b9:51:f3:cf:8d:07:5f:de:31:d5:43:d3:5b:24:a3:
4d:fd:f2:40:33:d5:ad:ad:64:40:81:30:0b:cc:04:a7:e6:23:
5e:52:62:f2:9e:da:d1:44:57:b9:0d:dd:19:27:f8:80:be:be:
90:3e:65:da:05:cb:f6:82:9e:9d:4a:38:4c:00:20:b8:90:98:
dd:75:97:0f:82:4e:47:7b:18:75:26:1f:62:89:43:54:19:8f:
90:f2:44:72:44:43:19:96:83:98:25:ce:a9:e5:42:72:0c:0e:
2f:01:3b:d5:74:76:7d:32:2f:0d:36:d4:5e:d5:87:a0:fd:ea:
2d:09:13:9a:00:15:2e:86:54:44:65:a5:b8:c6:9e:2a:dc:49:
ba:92:e4:9c:bf:df:c1:2d:5c:3c:33:3a:27:c2:d6:0e:41:b9:
db:50:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:46:20 2025 by rpki-client