This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
File: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft (raw, json)
Hash identifier: F24dT700EToYkagtjd59xQ7fxp9R9Lf+jlYVIbxfMpA=
Subject key identifier: 18:0D:3A:21:43:65:4D:7E:F5:ED:A7:5D:AA:94:42:B0:4C:9E:F3:3E
Authority key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80
Certificate issuer: /CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280
Certificate serial: 19136DB0BC885E007556FADE24559E1754DC69A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
Manifest number: 0502
Signing time: Thu 18 Dec 2025 15:31:09 +0000
Manifest this update: Thu 18 Dec 2025 15:26:09 +0000
Manifest next update: Mon 22 Dec 2025 02:48:09 +0000
Files and hashes: 1: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl (hash: Afe3vmbmSoZTc52hg20EC8oR3bZqJTP8BDkDQCSW7nY=)
2: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: i3kLGZdC4b7g0r22OaWIQLyO15cZEfzn1gqotYUiYWU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl
rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 02:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:13:6d:b0:bc:88:5e:00:75:56:fa:de:24:55:9e:17:54:dc:69:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280
Validity
Not Before: Dec 18 15:26:09 2025 GMT
Not After : Dec 22 02:48:09 2025 GMT
Subject: CN=180D3A2143654D7EF5EDA75DAA9442B04C9EF33E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:e7:c8:bb:27:28:cb:82:18:b9:9d:c8:ac:
a2:fa:a9:d4:e4:69:6d:c4:db:ae:01:e4:83:27:9b:
6c:f7:63:fd:ca:61:db:58:38:1b:46:c5:a5:51:8a:
76:b9:62:10:64:93:d6:fd:4d:9c:9c:c4:46:be:df:
63:83:b9:4b:33:9f:e7:b7:80:1b:df:ee:ed:4b:a1:
d0:9d:ec:8c:d9:17:5c:77:2e:4c:65:57:e9:c8:b3:
1e:21:26:b1:76:4c:ae:e3:ff:f5:16:4e:cd:22:0d:
ea:fa:34:84:d2:75:b2:e1:8e:3b:75:7e:5e:ac:c1:
ff:a1:a0:66:46:36:b7:ce:94:21:11:d0:22:19:6a:
96:fa:7e:62:72:c9:b2:43:ab:f0:1c:34:1e:09:91:
df:22:26:54:00:41:de:29:54:20:af:88:5f:e8:01:
7f:c5:78:22:20:70:20:d0:6a:9e:91:8c:05:d7:4a:
d9:e6:46:97:60:4b:1e:fb:79:31:dd:45:81:d8:c7:
44:bb:91:8a:b7:7f:82:d0:b0:3b:4c:74:8b:81:36:
d1:d9:dc:0e:bd:96:5b:ba:08:43:40:8f:14:62:6f:
57:35:f4:81:b2:84:19:d5:f9:4c:52:83:f1:bc:f5:
d8:c2:a6:e2:3c:f3:27:c8:94:e1:92:dd:60:94:2d:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:3A:21:43:65:4D:7E:F5:ED:A7:5D:AA:94:42:B0:4C:9E:F3:3E
X509v3 Authority Key Identifier:
keyid:E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cb:ea:3e:7f:21:31:e8:85:55:e6:23:60:63:c4:13:13:a9:
75:a8:bc:5a:f3:0a:6e:25:fe:e9:f1:e4:2d:a7:5b:5d:2c:d4:
7b:92:d6:70:cf:76:7a:fd:d4:af:76:bc:fb:e3:f5:b8:a0:6f:
ce:a3:31:1a:d7:fa:93:75:f3:53:aa:35:00:33:81:80:f2:b2:
4a:42:ea:5c:8b:4b:42:ef:4d:f6:c0:33:d2:5c:c0:85:c0:c0:
38:8a:e9:a9:77:51:67:9f:cb:97:b9:ad:f5:8d:e5:82:b0:2d:
4f:2a:34:30:21:e0:cd:26:1f:10:21:48:77:90:9c:37:f1:48:
75:1c:5e:ba:8f:4d:d7:c9:18:bc:09:ed:d2:98:35:67:94:9d:
56:60:b3:cd:fd:56:51:f3:3f:6f:3f:e0:fe:f1:55:5e:47:6a:
86:a5:42:8a:f8:e4:05:7c:88:5d:8f:0f:6c:e4:8c:72:df:49:
02:94:58:b2:fe:a1:53:75:96:59:f2:3e:7c:c2:06:34:81:37:
a3:5f:e1:1c:02:82:c5:60:a4:4e:be:23:5e:21:76:23:1f:94:
c0:f0:5c:fe:b3:30:8d:9b:c9:25:fe:d8:2b:f3:09:43:35:51:
59:d5:e5:52:17:9f:33:53:4f:39:75:cf:43:39:32:6c:a8:74:
70:6a:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:04 2025 by rpki-client