This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft
File: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft (raw, json)
Hash identifier: twFtbFGMh++ghBhaprS2OPKz/vhTQWWIaGm0kLVDf1E=
Subject key identifier: 25:77:0B:AF:5A:73:71:B7:95:E7:B7:15:EC:38:7D:4D:02:C6:16:C4
Authority key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1
Certificate issuer: /CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1
Certificate serial: 6D24AEB8AA433CC3AE8A117026C2CDFCA7CE7810
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft
Manifest number: 01A6
Signing time: Tue 23 Dec 2025 16:03:52 +0000
Manifest this update: Tue 23 Dec 2025 15:58:52 +0000
Manifest next update: Fri 26 Dec 2025 23:47:52 +0000
Files and hashes: 1: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: 1/5F/Fe2PkpRkHNw+n97pPHSrmMag78XpgU4CUEJyIA=)
2: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl (hash: IZd4b3XkQz+DJU+dlqY+l6sPhPGVt0+KOT3Y9ZSyF7Q=)
3: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: knqZS2zET5ty4Hn5ENyXOzq+6kdiMgWMs4wKA0jO5Co=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl
rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 23:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:24:ae:b8:aa:43:3c:c3:ae:8a:11:70:26:c2:cd:fc:a7:ce:78:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1
Validity
Not Before: Dec 23 15:58:52 2025 GMT
Not After : Dec 26 23:47:52 2025 GMT
Subject: CN=25770BAF5A7371B795E7B715EC387D4D02C616C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:1e:35:ca:c0:48:a4:58:f6:ce:6f:37:4a:
be:66:f9:ad:aa:fe:f3:f4:b1:a4:cf:00:fd:bf:7d:
0c:19:7d:a7:1f:33:1a:2f:c4:cc:9a:e8:e1:f4:89:
00:f4:ac:0d:30:35:00:d9:05:b6:4f:b8:39:28:5b:
71:c4:bd:61:7f:12:02:da:3b:6e:73:3f:93:c3:f6:
78:79:ff:e6:a5:a4:0e:cd:e2:db:b3:1c:6f:a4:9b:
95:c9:ce:64:6e:a5:f9:5e:c4:ad:dd:2b:d2:4e:2f:
8f:f4:9f:0c:a1:d6:86:67:fa:e5:d3:64:b2:af:50:
aa:8c:94:fc:74:0b:3d:aa:bc:c6:3f:07:d7:59:a7:
56:da:c3:59:1b:f7:fe:b1:f8:c1:8d:c6:42:42:ee:
4b:df:bf:7b:65:a7:e4:15:cc:8d:2b:7a:b6:fd:f5:
f5:cd:91:39:b9:b7:80:c5:73:b1:21:9f:97:7f:92:
ec:61:c2:0f:8c:f2:82:0b:b1:09:94:45:ea:8c:b3:
e3:60:d7:db:ae:96:40:b6:05:01:ef:1a:39:7c:05:
04:f7:33:bb:b8:38:ff:f6:26:7c:7b:35:2b:f5:cf:
e2:10:41:f6:e4:ec:53:0b:6f:a1:12:28:79:1b:dd:
ec:c7:24:46:ff:85:bb:7d:61:42:87:a5:75:ef:e0:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:0B:AF:5A:73:71:B7:95:E7:B7:15:EC:38:7D:4D:02:C6:16:C4
X509v3 Authority Key Identifier:
keyid:7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ee:2d:14:de:f9:42:52:44:a3:9e:6c:b3:cd:a1:2b:56:53:
cf:a3:1b:02:4c:f8:7a:b5:78:b4:ac:d5:76:2d:ce:2e:f9:c4:
6d:96:64:79:41:ce:f3:07:3b:8d:3b:51:93:e9:c3:f2:42:d0:
92:ed:fe:79:7a:58:ea:cc:8f:46:c1:c3:ed:07:35:8e:c3:24:
dd:6e:d8:da:56:d8:ae:8f:bd:f8:de:06:e6:b8:95:5e:4d:fb:
bd:f1:66:ce:92:9b:71:8f:1a:36:e8:55:43:3c:5d:84:f8:a2:
dc:ec:aa:91:b4:4a:4a:ae:d1:b7:76:28:71:2c:dd:76:70:9d:
83:0b:a2:ee:de:79:d0:42:2c:24:ef:72:02:f6:66:0c:84:6b:
63:4c:1b:34:31:d4:ef:c9:43:fa:b3:cc:aa:99:35:97:df:3d:
0e:74:c1:48:d8:c7:55:c0:a9:4f:15:e2:64:af:a1:85:46:df:
f9:97:f6:2a:7f:ac:e2:5e:e1:72:a1:d4:dd:b6:10:e1:92:ac:
bd:6c:58:22:0c:dd:8c:2f:b6:f2:d4:62:32:3c:9f:3a:16:3f:
f9:69:b5:ca:95:8c:2f:76:e9:32:c1:63:9f:43:54:fa:71:bc:
41:d2:de:18:27:98:39:f8:6b:b9:b0:94:48:30:a6:4e:10:39:
60:37:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:35:56 2025 by rpki-client