This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
File: E4B72563B465301EE966885E5BE212EE92B97305.mft (raw, json)
Hash identifier: nSFCOh89Ddw7wnTECGSBSejCiSMUZ2rAC5b6WXVGx+A=
Subject key identifier: E0:23:E6:8D:B3:03:4E:D3:6A:2B:A4:F6:F6:D3:E5:3D:80:2A:F5:EE
Authority key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
Certificate issuer: /CN=E4B72563B465301EE966885E5BE212EE92B97305
Certificate serial: 7734BC38F2375968C9E941E3FF48590A933EADAA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
Manifest number: 0260
Signing time: Tue 23 Dec 2025 23:13:39 +0000
Manifest this update: Tue 23 Dec 2025 23:08:39 +0000
Manifest next update: Sat 27 Dec 2025 09:42:39 +0000
Files and hashes: 1: E4B72563B465301EE966885E5BE212EE92B97305.crl (hash: PblfLo6XHklVVgGz9/ottxhBIcS7gKICVSgg8Pft6Tc=)
2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: FtcYNnQ+tpgDczZdWAIIZbO3eWyrmnKrL3Da652AKfg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl
rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 09:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:34:bc:38:f2:37:59:68:c9:e9:41:e3:ff:48:59:0a:93:3e:ad:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4B72563B465301EE966885E5BE212EE92B97305
Validity
Not Before: Dec 23 23:08:39 2025 GMT
Not After : Dec 27 09:42:39 2025 GMT
Subject: CN=E023E68DB3034ED36A2BA4F6F6D3E53D802AF5EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:90:b5:dc:d2:de:60:50:6b:68:d3:76:f0:a1:
0b:ca:e7:c5:a3:0b:4b:bb:9b:99:67:32:67:ac:49:
fa:9f:00:d5:84:73:c0:17:07:cd:0d:18:a6:47:eb:
62:e5:52:1d:52:54:07:9e:f6:02:50:30:c0:4e:e6:
07:83:c6:8b:1c:9d:bc:e5:db:ff:aa:30:87:06:a4:
fa:24:85:b5:45:08:c8:ca:e2:05:98:fa:06:dd:b1:
50:19:2d:4c:76:9d:7a:1e:94:34:f7:c1:d1:e0:d4:
ec:51:6f:07:70:76:d0:89:6a:a3:12:28:d3:13:ad:
54:52:a1:42:b6:1c:d7:e8:86:d0:02:5a:de:89:b5:
c0:20:18:e8:b6:a2:c5:46:a3:4a:20:a0:e6:59:db:
e1:e8:90:4b:ad:4c:4f:0d:45:8e:05:fa:c6:d6:3f:
a0:b4:a6:c9:73:c3:80:a2:b9:87:66:aa:03:aa:47:
6f:9b:f0:93:04:9c:09:e3:f3:33:b9:28:a4:22:35:
ed:bf:5e:1d:52:96:42:14:f1:b5:4b:3a:3b:72:a8:
5a:7c:f7:19:69:9a:1f:a4:cd:c4:1a:c7:06:a4:5b:
3c:5a:6f:3e:59:0e:db:fd:ec:98:ad:e9:16:d3:ef:
54:b4:53:6f:1e:cb:61:05:a6:27:64:d7:82:91:51:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:E6:8D:B3:03:4E:D3:6A:2B:A4:F6:F6:D3:E5:3D:80:2A:F5:EE
X509v3 Authority Key Identifier:
keyid:E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e5:f3:5a:55:b4:c6:5d:b9:b5:81:f1:f5:f2:9c:23:e9:f9:
01:d2:2b:5d:f2:b4:9c:ed:07:41:d2:b0:b4:6a:a1:b9:60:c2:
ed:93:20:f4:11:fb:f0:47:f8:e8:fc:19:bb:14:e9:74:47:ef:
87:3f:e1:e7:3c:cb:a9:8e:65:6a:e0:29:4a:d9:f1:80:66:9f:
38:39:b2:9a:6f:fa:76:76:9d:c3:e9:3a:50:8f:5e:ea:09:b7:
ac:1e:1a:a7:97:a0:59:93:53:2d:8d:23:2d:93:6f:d3:f5:fb:
a0:19:88:b6:9b:c9:c3:d7:fa:b4:d6:8b:80:6e:a7:68:3f:e0:
0c:5f:ef:de:62:78:f5:e5:93:2d:f0:ef:7b:53:05:33:fa:41:
41:0e:00:e8:30:5a:17:9c:47:d3:e5:b0:c1:d1:b7:f4:04:51:
fa:8e:6c:fd:3f:53:f7:74:31:0b:1a:08:7e:00:4b:b0:25:07:
7c:7c:a0:f5:7c:04:53:6b:4d:67:b5:4b:16:a5:b7:40:2f:3c:
4c:a2:b3:63:be:41:16:07:71:d5:39:65:ce:89:48:5b:19:22:
93:12:42:c9:aa:92:34:83:3f:6e:f6:40:04:c7:11:af:6e:e4:
8b:7c:9b:13:91:87:81:71:25:30:3b:ae:98:d3:c7:de:7e:e1:
79:d4:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:29:49 2025 by rpki-client