This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft
File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json)
Hash identifier: +sUzLq3ueJRLVTy3XYMGmKd0JkWLw9LMBq3kypea3Is=
Subject key identifier: F4:A7:67:13:7E:F0:67:5B:43:5B:FF:7A:48:98:BC:0B:4C:49:D9:D6
Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D
Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
Certificate serial: 2ACC07811A6FB5F4FF1AB6652DE7C41E1A9C3F66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft
Manifest number: 022F
Signing time: Fri 19 Dec 2025 01:00:47 +0000
Manifest this update: Fri 19 Dec 2025 00:55:47 +0000
Manifest next update: Mon 22 Dec 2025 01:45:47 +0000
Files and hashes: 1: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: 6S9HpLki8hM7WMF761ugeGUUN3Kgy8wEyyhhWiK7Dj8=)
2: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: 1d1jglJQYamlwXmUTi2MB59pQxl/KjaHk7dpKNXOmuU=)
3: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=)
4: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl
rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 01:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cc:07:81:1a:6f:b5:f4:ff:1a:b6:65:2d:e7:c4:1e:1a:9c:3f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D
Validity
Not Before: Dec 19 00:55:47 2025 GMT
Not After : Dec 22 01:45:47 2025 GMT
Subject: CN=F4A767137EF0675B435BFF7A4898BC0B4C49D9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:e5:44:4d:48:56:ef:d9:18:7f:85:42:57:
04:3c:7c:1d:da:4e:1d:f2:39:fb:cb:7c:3d:af:38:
e6:e0:80:08:b5:9b:6f:78:0a:a8:7f:3f:3f:7f:14:
80:45:0c:b2:80:9c:22:42:e7:74:71:fd:87:3e:b4:
d1:d0:64:32:31:06:05:83:5a:a5:f9:03:77:76:33:
a1:ed:c6:35:57:24:34:26:2c:38:2b:d8:a2:a0:17:
9f:ca:93:c5:45:b1:96:51:60:91:b1:c5:d7:ae:62:
ff:94:f8:b0:9d:d3:c5:0e:d4:3c:61:cd:92:12:e0:
ea:3e:b8:10:2f:b4:2a:b2:d1:9c:f5:4d:61:49:22:
d1:c0:2f:e2:e6:86:4f:ba:ff:a3:15:e1:a4:06:43:
53:bf:01:18:f2:4d:94:6e:9c:1f:37:7c:2d:02:b2:
2d:cf:b0:26:62:39:f2:33:0b:71:4e:a8:88:c0:87:
da:95:c6:b7:5b:15:f3:47:9e:03:61:62:e3:73:44:
f3:79:e4:f5:e1:04:47:3c:fa:4d:53:c5:de:bb:2d:
aa:28:fd:b9:cd:7d:f6:04:d7:8a:d8:39:fe:b6:84:
4d:b8:ca:f7:d0:e2:75:b1:09:52:a9:61:22:2b:95:
88:15:5b:45:53:67:89:63:32:26:fe:4d:c4:26:96:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:67:13:7E:F0:67:5B:43:5B:FF:7A:48:98:BC:0B:4C:49:D9:D6
X509v3 Authority Key Identifier:
keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9c:71:71:23:42:4c:08:5b:76:4b:b0:ec:37:82:7d:e9:c3:
09:93:28:66:ea:f7:32:d0:2d:81:db:2a:fd:19:f2:df:95:4a:
3e:7e:3d:a2:35:d8:6e:b4:5d:39:91:c7:c0:c4:39:b8:5d:28:
07:72:78:2e:d0:f2:ec:62:69:3e:2d:e8:95:ad:61:7d:a6:a9:
60:b9:17:e8:fe:26:18:60:97:a8:5b:02:6f:66:79:33:da:ef:
fb:f2:48:f6:c4:f1:a7:13:c9:1c:ed:cf:4e:9a:7a:dc:fd:d3:
1b:2e:4a:75:79:01:90:86:14:d8:82:b2:8e:6c:f7:d8:66:df:
32:b0:54:20:3e:e3:f8:5c:66:c7:d6:28:c2:cc:22:cf:c7:1b:
b5:d2:73:ef:99:80:d9:3a:7f:7d:92:ef:31:b7:cc:7c:ed:4c:
cf:b6:f9:78:84:c8:a2:c9:d9:57:50:7d:c3:a6:9e:e7:0f:b2:
34:59:53:e7:57:03:47:33:80:68:51:6c:77:5c:29:f6:7e:e2:
1b:8b:fd:0d:38:06:ad:0c:a7:9c:9e:6c:cb:87:aa:26:4a:64:
d1:1d:3e:7b:98:43:66:39:c5:76:6b:55:ba:a7:ae:bf:6a:53:
7b:a1:4d:8e:26:cc:2b:6e:9a:bc:55:a2:90:d1:05:5e:08:68:
4d:ba:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:23:32 2025 by rpki-client