This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
File: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft (raw, json)
Hash identifier: wkchOz87BY02/wxR3rEfvyYDD3M5yoxzUJvPcS7HSdI=
Subject key identifier: C1:2A:B5:F1:B0:D2:D7:29:E0:BE:5B:A5:FE:78:16:24:1A:E4:BE:31
Authority key identifier: 56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36
Certificate issuer: /CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36
Certificate serial: 35EE3B55B57E74FC266F41AC2E2636855628A0DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
Manifest number: 03A5
Signing time: Wed 24 Dec 2025 02:02:49 +0000
Manifest this update: Wed 24 Dec 2025 01:57:49 +0000
Manifest next update: Sat 27 Dec 2025 12:49:49 +0000
Files and hashes: 1: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: bKELrvkygew/puVSCxFVERwd18KUv2pchNnSXhErods=)
2: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl (hash: Sl/FsNEyvC4iJPhFzvql9SpTsmIP1ZeHcSQ8H4fEsLA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl
rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 12:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ee:3b:55:b5:7e:74:fc:26:6f:41:ac:2e:26:36:85:56:28:a0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36
Validity
Not Before: Dec 24 01:57:49 2025 GMT
Not After : Dec 27 12:49:49 2025 GMT
Subject: CN=C12AB5F1B0D2D729E0BE5BA5FE7816241AE4BE31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:e3:08:1f:72:dc:73:67:a4:a7:6c:85:51:
5b:50:dd:21:de:6b:51:bc:a4:90:ff:d8:a7:c5:f2:
b3:e1:64:12:08:35:cf:63:cd:d1:a1:f6:6f:75:6f:
ee:a2:fe:27:49:b8:18:f8:eb:ca:75:d7:ca:48:a6:
fd:a0:7f:3e:4e:c6:8e:95:7b:02:4e:d9:c6:b6:9d:
dc:67:09:72:b3:95:8e:9b:bc:ef:79:70:4e:d0:d6:
58:79:08:2c:45:3e:9d:f7:24:d9:d2:44:e2:d8:0e:
8f:59:46:b6:4e:b6:9b:10:36:f0:a8:4b:10:27:67:
ce:34:62:ec:54:63:41:24:f5:e7:69:a6:1d:37:c5:
c6:05:a4:d7:05:57:04:bd:c3:47:55:6b:21:52:ac:
12:5b:a8:f2:44:5c:66:c6:b5:e0:6c:fd:2a:5e:36:
c0:4e:d0:6d:e1:11:64:41:22:b9:9b:f3:88:0d:62:
93:5f:0c:32:de:dd:19:7e:7b:88:67:dc:69:9c:57:
9f:1c:06:9f:aa:4b:a5:d2:73:f2:1d:ac:a8:40:04:
7b:5a:cc:f5:ef:6d:25:7a:74:25:f0:1c:f4:63:ce:
d7:6d:e0:55:48:8c:e7:ff:70:20:f0:28:03:d5:6e:
e1:6a:c0:82:4a:0b:b8:4c:3c:27:99:c0:b6:52:4a:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:B5:F1:B0:D2:D7:29:E0:BE:5B:A5:FE:78:16:24:1A:E4:BE:31
X509v3 Authority Key Identifier:
keyid:56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9a:8e:df:64:17:ae:6c:df:70:01:83:d9:a3:0d:31:98:63:
f2:ba:0c:bd:b8:af:84:da:e0:4a:07:90:03:d0:89:f8:5d:ed:
96:0b:0d:54:2d:ce:74:7e:4d:20:79:90:2b:36:b6:a9:54:87:
13:73:4d:55:44:cb:d9:58:87:0d:a9:40:94:4b:a2:25:48:9e:
8a:7b:a2:09:52:68:94:ef:98:7e:b7:e7:6d:f1:81:16:0c:64:
13:40:92:a8:3a:b9:1f:ef:39:c4:f1:59:e9:3c:77:9e:f7:20:
42:0a:52:ba:41:9f:6d:a0:c2:86:ce:23:2a:d9:32:06:f2:94:
f1:41:29:a5:05:7e:63:78:5f:25:60:33:eb:48:0b:f3:95:a3:
2b:79:a1:d0:7c:ed:4c:ba:01:3d:4d:0b:6d:13:4b:5d:fe:ec:
82:26:8f:81:81:77:be:46:40:6e:2a:61:b5:e1:d5:14:4a:ad:
24:f0:83:1b:94:ac:3a:41:e4:62:9d:4e:cc:e3:43:38:da:e0:
b9:b4:11:af:13:0a:1f:0f:3f:41:3d:81:d0:14:95:56:a3:fd:
62:16:db:75:41:9e:ed:65:7a:a8:fb:7c:f7:a2:94:e5:0b:8f:
de:7d:a5:64:e9:7c:0f:df:58:81:cd:4c:f3:8b:1c:ed:14:0a:
5a:40:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:10:39 2025 by rpki-client