This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json)
Hash identifier: w6NNh0xMVk8xUBcM8RyR+NqhydbNu4fQvtSw6u2OrNA=
Subject key identifier: 8A:CB:45:48:40:DC:B4:55:BA:FA:E0:E2:AA:AA:7B:22:27:8F:B5:61
Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2
Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
Certificate serial: 45D83948E507730BE17FE42C19314F21D87E9CC6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
Manifest number: 015B
Signing time: Tue 23 Dec 2025 09:02:29 +0000
Manifest this update: Tue 23 Dec 2025 08:57:29 +0000
Manifest next update: Fri 26 Dec 2025 19:40:29 +0000
Files and hashes: 1: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I=)
2: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: icoM+EmZmnaUSNYe+M3YT7QPi2377uDTJ5GrlCTs7Lw=)
3: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: Y71EeD959aIr9ucCZApJALClmCCepz1YWwy1H6B20+w=)
4: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: +rIPUFtHiL7F9sgUu61qVWZaj3ljoWymZ4DfovTj0b4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl
rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 19:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d8:39:48:e5:07:73:0b:e1:7f:e4:2c:19:31:4f:21:d8:7e:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
Validity
Not Before: Dec 23 08:57:29 2025 GMT
Not After : Dec 26 19:40:29 2025 GMT
Subject: CN=8ACB454840DCB455BAFAE0E2AAAA7B22278FB561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:84:fb:3c:69:d4:3b:da:e9:5f:26:bb:e8:
d6:48:05:79:4d:5e:4c:16:a1:8f:52:7b:f2:fd:ca:
ea:15:74:5d:3a:72:f9:57:09:e7:dc:6d:55:9e:f9:
04:63:4a:f1:61:05:f4:75:56:3d:be:7f:ca:31:4e:
fe:c5:4e:e1:5f:b7:7b:61:87:44:bf:14:c0:9c:33:
8c:b6:27:97:75:ff:c5:b4:88:1a:5e:92:b2:aa:0e:
61:39:9a:86:a7:67:32:d6:00:30:17:6a:06:cd:09:
08:52:6f:7b:f1:3e:c2:cf:75:6c:57:3a:2a:62:e2:
80:1d:bd:53:55:07:fa:10:cd:45:f1:ce:d4:e4:96:
f0:ae:aa:74:de:69:0b:31:8d:4d:ce:9b:8c:5c:06:
a7:22:c1:ab:32:5e:85:06:51:8d:f0:e2:f9:b7:66:
95:24:55:93:c0:7a:88:ae:61:f0:9a:b3:b8:f3:ac:
a7:9f:c5:cb:aa:b8:97:99:0b:91:80:5e:0a:5f:79:
2b:b5:f9:91:85:de:ba:73:e2:b1:1f:ae:ed:3f:84:
8e:1a:46:4c:b1:ef:68:09:54:f4:12:c6:8d:02:cb:
af:b7:cc:2d:db:5c:bc:8b:e3:71:49:8b:21:2c:3d:
82:6d:1a:7b:4f:b0:0f:0a:fa:d5:4c:e5:1f:13:01:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:45:48:40:DC:B4:55:BA:FA:E0:E2:AA:AA:7B:22:27:8F:B5:61
X509v3 Authority Key Identifier:
keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:fb:df:12:26:ae:b6:d7:ec:b2:0c:82:89:ca:6e:95:4b:6c:
1b:16:14:2c:22:b2:60:2d:bb:46:97:b4:28:47:f5:84:97:37:
ec:c2:66:1d:8f:9d:49:b0:06:0c:87:75:4a:3d:ff:d0:1d:31:
cf:af:e6:c9:2e:07:4c:24:49:80:27:0c:01:1b:15:8b:dd:8d:
0a:38:ef:5a:b7:b7:17:48:28:06:5c:6d:81:6f:33:66:d6:96:
7d:2f:d3:09:ce:7e:96:44:5f:77:00:3f:48:02:49:05:2c:1f:
02:3d:fe:68:b9:93:0a:de:1d:cf:77:01:5b:bc:3a:02:37:d1:
b2:18:e3:ec:a8:a6:84:60:0b:76:09:f7:8b:d2:61:16:7b:8a:
dd:db:df:66:50:15:c6:c4:38:82:12:3b:d1:52:33:3c:7a:a1:
bc:bd:5f:cf:0d:e0:90:99:5a:92:76:f2:da:23:03:4e:70:35:
a5:50:0f:f4:ea:b9:58:a2:cc:4c:34:af:75:e7:80:a8:c9:bd:
ae:79:ad:d9:a9:69:4b:f7:bd:b0:f7:09:91:ff:05:aa:a2:ba:
3b:f2:90:ab:d0:26:45:2a:05:2c:f0:5d:60:33:64:77:10:78:
5e:89:43:ca:01:50:ae:47:8b:8c:e6:b2:0b:99:a3:16:96:9b:
31:62:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:25:13 2025 by rpki-client