This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json)
Hash identifier: GpCq52mw4NZR2tCwmgvCU39i8KtHjPZTlVkohBzhkOo=
Subject key identifier: 6E:16:9E:B1:96:F8:54:6B:FD:46:DB:E1:20:8A:FF:F4:62:0F:B7:18
Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50
Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550
Certificate serial: 12620D6D560EAA913E0F4E65143B78E51187220C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
Manifest number: F7
Signing time: Mon 15 Dec 2025 09:40:57 +0000
Manifest this update: Mon 15 Dec 2025 09:35:57 +0000
Manifest next update: Thu 18 Dec 2025 17:10:57 +0000
Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=)
2: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: wWC7DY9k45gUI+eJgBwYhldu5vC/ZXz+r6XtK+IRq4w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl
rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 17:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:62:0d:6d:56:0e:aa:91:3e:0f:4e:65:14:3b:78:e5:11:87:22:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550
Validity
Not Before: Dec 15 09:35:57 2025 GMT
Not After : Dec 18 17:10:57 2025 GMT
Subject: CN=6E169EB196F8546BFD46DBE1208AFFF4620FB718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:27:e9:74:cd:a1:65:f7:f8:dd:c9:29:71:
a9:d0:65:ee:f9:99:ee:6a:bd:28:27:c1:05:75:56:
2d:17:37:f5:a4:b4:60:9b:d7:36:e7:65:23:32:b2:
97:9a:4a:79:b2:6e:d7:75:74:24:ea:82:90:76:54:
33:42:3f:7a:40:a2:ce:20:e9:0f:e6:bc:32:19:14:
31:77:e2:37:95:ce:70:9e:b1:83:37:d6:25:f9:e4:
ad:97:88:d5:24:a9:50:d6:26:56:59:b9:70:81:66:
55:4b:88:ea:02:75:0f:e5:1e:34:3a:cc:d0:44:99:
88:13:94:23:8f:a9:ea:72:7e:06:ff:6d:98:26:86:
ce:2a:16:05:c5:58:95:c3:c3:8a:31:8b:91:ea:b9:
f2:9c:65:05:3b:e3:e6:05:cf:ec:1e:e1:56:22:3a:
98:2b:4a:60:de:02:91:11:15:fe:ae:9b:d3:80:4a:
3a:65:a7:e3:82:39:7d:15:71:b5:a6:71:3c:1a:96:
d6:99:28:3b:fe:5d:f7:2f:e4:06:81:8a:c1:39:0e:
93:a5:9f:cc:dd:97:77:a3:9b:c7:a9:d5:22:6f:1d:
6f:3d:cf:66:52:ad:b4:b2:ca:ca:38:ce:e6:7d:21:
20:9b:49:c1:a2:da:5c:70:fb:81:0b:11:38:e7:c8:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:16:9E:B1:96:F8:54:6B:FD:46:DB:E1:20:8A:FF:F4:62:0F:B7:18
X509v3 Authority Key Identifier:
keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:11:60:51:52:8a:26:9d:11:17:05:78:03:2b:75:c1:e9:4a:
2e:27:f7:f1:18:a0:8c:0d:77:24:45:b3:c8:62:50:53:49:4a:
26:c8:31:b1:a2:24:61:6c:69:6e:01:a1:1f:32:42:55:d3:4c:
d9:a1:7b:87:d5:7e:1b:06:ec:1d:08:90:08:34:91:b3:31:7e:
24:fa:39:05:96:42:7e:0c:5f:1c:ef:7c:b3:9c:4f:d6:7f:63:
cb:76:2f:8e:bf:07:37:17:6b:d9:ca:82:80:19:d1:63:43:09:
cc:2f:e8:dd:e3:02:ba:b1:a7:71:2e:6f:80:62:9c:e9:0a:a6:
4b:0f:82:b0:55:fc:05:9e:33:5d:21:e1:d3:da:d7:89:61:71:
4c:33:45:ec:40:20:ca:d3:20:cd:16:56:42:4c:b4:4d:ad:a5:
ed:b8:26:e7:9d:dd:59:c3:74:2a:cf:58:7b:e6:f9:dd:62:9d:
ee:1c:bb:35:5d:87:ee:89:53:ea:0e:23:47:55:ab:b8:cc:f9:
4f:44:04:6b:a4:14:a3:68:dd:a8:dd:20:71:dc:19:96:89:3d:
b9:25:b0:de:d4:95:0b:a7:84:74:ef:c7:5b:fa:54:64:56:45:
06:b8:47:be:b9:e2:d2:84:39:1e:77:d1:40:ad:df:e6:40:64:
75:fd:76:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:45:59 2025 by rpki-client