This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json)
Hash identifier: YwlbOK0UxK869lqCLrCIBH9douLmJZcESLmfPfuMcF8=
Subject key identifier: FE:A8:20:64:67:2E:1F:41:A3:BA:85:A9:F2:95:52:07:07:3A:E0:F9
Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Certificate serial: 63746816E5D36AB150AC01DDECAB84D50FFA1AF6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
Manifest number: 0537
Signing time: Fri 26 Dec 2025 05:01:09 +0000
Manifest this update: Fri 26 Dec 2025 04:56:09 +0000
Manifest next update: Mon 29 Dec 2025 15:21:09 +0000
Files and hashes: 1: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: gPWROBXh3MCAsLwOWBpEvwl123ySnBsT7ZS2er3VJcA=)
2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=)
3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:74:68:16:e5:d3:6a:b1:50:ac:01:dd:ec:ab:84:d5:0f:fa:1a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Validity
Not Before: Dec 26 04:56:09 2025 GMT
Not After : Dec 29 15:21:09 2025 GMT
Subject: CN=FEA82064672E1F41A3BA85A9F2955207073AE0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:14:dd:44:62:d3:84:1d:0e:e6:2e:a6:49:
67:d3:30:99:6b:e8:d9:07:07:5e:83:9c:ca:0d:a7:
40:01:57:00:19:56:e2:3f:6f:71:08:e4:6f:a6:8d:
70:3d:06:9d:05:a7:05:81:bc:ec:38:9b:76:0a:83:
3e:c5:4f:32:1c:72:b8:c3:dc:a5:90:e7:55:ec:c8:
f9:6f:98:f0:fe:ab:7d:64:be:ea:5f:ac:44:0e:2b:
5c:59:bf:fc:f0:98:c4:5b:e2:2c:f8:02:c1:bc:73:
89:df:49:9d:a6:69:f3:1f:3f:1c:69:d8:2e:45:eb:
2f:cb:d9:32:63:25:47:ed:cc:f7:91:f7:f3:0d:4d:
bb:41:b6:d9:a5:e5:99:06:7c:27:47:28:c9:b4:4f:
7e:0d:c4:85:f9:12:4e:19:22:b6:14:59:04:49:28:
b8:f2:9a:3a:b4:ba:cd:12:f2:20:43:83:ed:e7:76:
af:32:0e:81:4d:56:0e:b5:db:ff:72:3c:0d:55:a7:
c4:ec:3c:81:19:05:a3:f7:3c:bf:78:a9:11:ec:a2:
64:86:dd:6f:42:6e:04:47:58:7a:66:15:64:c3:04:
45:0d:df:c5:a4:52:02:e5:97:da:89:8c:8a:ab:da:
d4:ee:54:14:d8:22:46:bf:3c:78:c1:97:71:1a:1b:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:20:64:67:2E:1F:41:A3:BA:85:A9:F2:95:52:07:07:3A:E0:F9
X509v3 Authority Key Identifier:
keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:d8:f6:11:fb:38:93:89:83:60:70:76:f4:c0:f8:50:d7:7e:
1f:bd:e2:a7:a8:4e:e1:7c:41:1d:ef:dc:73:72:41:f3:e9:42:
9e:7e:dc:95:d7:d6:26:1f:62:fe:e0:1b:af:21:b5:de:3b:a6:
e6:f3:f9:55:6e:e9:c0:66:72:17:45:d1:0e:78:af:3f:20:c0:
5e:f5:c4:e5:91:aa:05:be:c6:cb:bb:2e:75:4b:57:fe:6c:f4:
37:95:d3:df:01:8c:55:d5:2c:10:6e:9e:af:8e:e9:b3:ea:5c:
5b:e1:b7:82:0f:fc:86:7d:4c:3f:d5:69:a3:98:31:86:cb:87:
11:3f:00:5b:6f:3f:c2:ab:d4:0b:3b:16:1b:94:96:72:9d:95:
2e:e8:7e:4b:d1:bd:51:63:69:7c:5f:22:30:ca:7a:17:b2:90:
d3:73:5c:ed:30:b9:57:8e:da:f5:0e:41:d4:9f:d5:2f:90:5b:
a9:eb:c9:0f:d1:d6:98:06:81:c5:ab:27:de:57:e0:a3:10:55:
2a:9a:46:ae:6a:28:51:d7:c3:6f:81:76:7e:c8:3d:64:22:85:
c2:13:97:e9:33:0a:98:c9:1b:cd:dc:b2:cc:09:11:0e:f5:26:
99:6d:85:c2:8c:09:98:a3:2b:17:89:c9:23:e5:1c:74:6e:a0:
3f:9b:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:18:51 2025 by rpki-client