This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
File: C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json)
Hash identifier: Dm0qIx53eg1iSutKqytzS74G4iNQtqNezjspjSaAiBw=
Subject key identifier: 27:68:5B:4E:96:EC:9F:52:C5:45:92:57:98:B0:93:65:96:4F:79:16
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial: 5DDC3C4D3108CB0D70E6CA8D60C95887FE78B1D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
Manifest number: 026B
Signing time: Mon 29 Dec 2025 00:21:05 +0000
Manifest this update: Mon 29 Dec 2025 00:16:05 +0000
Manifest next update: Thu 01 Jan 2026 07:36:05 +0000
Files and hashes: 1: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=)
2: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=)
3: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=)
4: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=)
5: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=)
6: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: mnqKLVEqBLST5cj4me1b52oy5h8vPWeLuDn5ZuoNrVM=)
7: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=)
8: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 05:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:dc:3c:4d:31:08:cb:0d:70:e6:ca:8d:60:c9:58:87:fe:78:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
Validity
Not Before: Dec 29 00:16:05 2025 GMT
Not After : Jan 1 07:36:05 2026 GMT
Subject: CN=27685B4E96EC9F52C545925798B09365964F7916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:e7:dd:ca:d0:26:5b:68:60:aa:c3:19:6d:
46:21:64:86:e2:c2:7a:0c:d2:c2:23:6e:fe:a1:3c:
3f:0a:58:26:c7:92:09:41:c7:28:8b:18:65:da:9a:
a4:70:39:f0:72:a8:27:46:7c:d5:37:64:27:c8:25:
6b:00:62:f6:6f:be:ed:0f:68:a0:fa:1a:db:fb:78:
a4:1f:bc:fe:13:5f:2d:2f:82:c6:ed:54:2a:de:cc:
2d:fb:ae:ea:51:dc:d5:4c:74:ee:39:cb:1c:7b:e5:
e9:30:80:69:0a:10:f3:69:d9:42:97:2a:5f:a0:b4:
88:8e:7e:02:34:a7:35:62:d9:7b:91:d8:70:06:2e:
ba:bf:33:c4:31:0c:2c:6b:18:f0:b3:26:ef:6f:1f:
c0:84:6f:81:13:4c:64:1a:7d:d5:b1:99:cf:fa:4c:
a9:5e:4d:fe:06:52:75:25:ec:2e:9c:e4:ce:5f:0c:
a9:08:22:c4:74:f1:f4:31:d1:e5:99:f6:73:f2:c8:
b2:99:6c:f5:af:44:6f:f2:8c:a4:dd:78:79:9d:42:
ba:01:ef:49:70:06:8e:ed:fe:b7:d2:82:76:00:7a:
eb:66:a0:a8:43:0a:e5:25:26:63:76:0e:3f:f3:41:
c7:ab:db:a9:cf:bf:d5:a3:c9:40:e0:66:df:c5:eb:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:5B:4E:96:EC:9F:52:C5:45:92:57:98:B0:93:65:96:4F:79:16
X509v3 Authority Key Identifier:
keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:89:b9:cf:7a:bc:cb:19:81:3e:2d:ac:cc:b5:c9:c2:13:d5:
3f:81:08:cb:14:b7:f5:ce:7e:d5:9b:87:e0:ac:5a:91:15:d4:
00:ab:ec:6b:82:35:0d:a8:01:55:d9:ef:ca:fe:ec:b1:5f:38:
8c:f2:1c:49:bc:48:fb:cb:24:03:4e:0e:86:b6:9a:82:2a:19:
28:ec:96:3b:03:e9:e3:f9:ba:78:a3:84:1d:7f:20:6f:d2:75:
ca:f4:c4:f8:d8:1a:33:a9:94:e2:3c:f9:b7:a0:08:71:6c:2a:
cf:ef:d5:62:34:03:82:97:d3:5e:35:1a:ad:ef:a1:44:7d:a3:
6a:bd:14:02:98:80:ad:40:96:2d:9a:b9:80:42:6b:0f:68:da:
da:a3:59:37:6d:af:2f:63:09:84:04:d8:79:bc:da:7b:1b:d9:
d2:bc:3a:3e:5b:78:a4:0d:83:d4:d7:33:e7:d5:ee:a5:1f:c3:
20:9a:9d:fa:64:e1:a2:b7:dc:28:1d:a9:a0:9a:c1:65:52:66:
08:25:96:cc:20:d0:a4:a0:1b:ce:2e:68:be:be:5c:cb:52:3c:
5d:a6:61:92:2c:84:68:eb:44:2d:11:16:6f:d2:18:82:36:dc:
15:8a:2e:1d:0a:68:1f:4a:39:b4:28:5f:c1:88:50:4d:da:55:
db:43:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 02:57:53 2025 by rpki-client