This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json)
Hash identifier: dbbo2+J6D+QpekT1O1sABrcSEPbkcFSjWwZvXNj+6JQ=
Subject key identifier: 7F:6A:E4:2A:AB:2B:21:4A:30:22:2C:35:28:44:40:E2:1C:50:C0:D9
Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Certificate serial: 14ADA1D6445312889F6624F44C48E1120E69CD1C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
Manifest number: 0531
Signing time: Sat 20 Dec 2025 16:01:54 +0000
Manifest this update: Sat 20 Dec 2025 15:56:54 +0000
Manifest next update: Wed 24 Dec 2025 02:45:54 +0000
Files and hashes: 1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: jWgorDaCedHE6wYvCOm9SCuSK8f/++VDDd+1Zl+Fe9M=)
2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 02:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ad:a1:d6:44:53:12:88:9f:66:24:f4:4c:48:e1:12:0e:69:cd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Validity
Not Before: Dec 20 15:56:54 2025 GMT
Not After : Dec 24 02:45:54 2025 GMT
Subject: CN=7F6AE42AAB2B214A30222C35284440E21C50C0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6e:e7:bf:20:e1:ce:0b:b6:b7:c7:49:ff:d2:
53:e2:79:5a:bc:de:88:90:c0:d0:dc:56:b6:82:4f:
31:db:29:61:76:43:bf:e1:26:ba:a8:ae:39:c9:97:
0b:f3:21:23:31:e0:7b:eb:a2:4b:54:a5:b0:20:f5:
6f:ac:35:23:66:c7:3a:c0:7f:8c:24:eb:9c:83:4b:
d2:72:50:be:69:a1:54:47:81:e9:38:cb:7e:d3:cf:
be:1f:47:75:b9:f5:b2:f5:ba:a9:7f:ab:f2:66:c5:
20:b9:af:46:58:06:ef:08:d2:f5:32:a6:22:08:c6:
72:54:8f:41:13:2a:cc:66:59:ba:87:67:c9:07:b2:
e5:d9:5a:dc:b7:c2:da:93:78:15:85:6c:c5:db:15:
8f:c0:0e:1d:c0:7c:0d:b8:61:2a:ce:f8:34:56:f0:
01:ce:74:34:cb:42:72:12:25:5b:f0:cb:9f:96:d3:
ae:c5:39:b2:42:c5:9c:7f:54:7b:52:16:3c:4d:1b:
b6:d6:50:34:e5:60:d9:34:ee:74:d2:90:e2:24:4a:
9e:8f:2e:09:80:67:58:1e:b1:6c:46:f0:e5:45:01:
1a:73:7d:c7:d6:6b:d5:b0:80:8e:6e:5a:8b:98:16:
3c:52:69:a4:c0:d6:dd:5e:27:e2:cb:e1:69:06:8a:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:E4:2A:AB:2B:21:4A:30:22:2C:35:28:44:40:E2:1C:50:C0:D9
X509v3 Authority Key Identifier:
keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:18:ae:b2:1b:c8:db:b7:11:21:09:5c:a4:64:06:d9:3d:b6:
fb:91:6f:19:eb:29:90:b1:3e:89:1a:0b:c6:8e:38:56:14:f8:
b2:b9:cc:20:39:f9:38:06:7e:df:5a:a8:80:31:0c:5c:bd:ab:
5f:89:f5:09:9f:18:1c:2a:5c:c2:df:aa:6e:9b:29:67:2b:41:
ae:8d:bb:4e:ee:fc:e8:b7:db:d6:c5:45:a5:57:1c:d9:31:17:
8b:b0:28:92:6e:72:be:d7:55:91:98:0d:f4:ca:e3:b4:ae:a4:
e1:69:22:69:d7:bc:d4:0f:28:62:92:13:bc:64:bb:81:cd:5a:
b7:9e:1c:58:06:54:fe:9b:1d:6e:c9:b2:c8:49:c0:dd:12:fe:
78:f4:67:df:48:5c:9b:da:14:b6:85:cb:aa:e4:53:51:2a:9a:
3a:8c:45:4d:54:a7:26:d1:d5:54:44:3d:e7:65:14:f0:26:5b:
44:15:3b:f4:70:3e:0c:ba:f5:a8:cb:50:8f:7f:e1:2e:4f:86:
4a:a1:8e:d5:79:e6:ef:04:b0:8a:85:f7:65:9f:fd:3d:85:14:
6e:08:8a:2a:06:cd:db:0b:9e:07:4a:bd:2f:ea:81:6b:d6:91:
63:75:d9:99:8c:32:6b:00:a7:93:61:5e:03:46:90:ec:d2:c0:
f1:6f:76:b5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFK2h1kRTEoifZiT0TEjhEg5pzRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG
OEZBMjlDNjAeFw0yNTEyMjAxNTU2NTRaFw0yNTEyMjQwMjQ1NTRaMDMxMTAvBgNV
BAMTKDdGNkFFNDJBQUIyQjIxNEEzMDIyMkMzNTI4NDQ0MEUyMUM1MEMwRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2bue/IOHOC7a3x0n/0lPieVq8
3oiQwNDcVraCTzHbKWF2Q7/hJrqorjnJlwvzISMx4HvroktUpbAg9W+sNSNmxzrA
f4wk65yDS9JyUL5poVRHgek4y37Tz74fR3W59bL1uql/q/JmxSC5r0ZYBu8I0vUy
piIIxnJUj0ETKsxmWbqHZ8kHsuXZWty3wtqTeBWFbMXbFY/ADh3AfA24YSrO+DRW
8AHOdDTLQnISJVvwy5+W067FObJCxZx/VHtSFjxNG7bWUDTlYNk07nTSkOIkSp6P
LgmAZ1gesWxG8OVFARpzfcfWa9WwgI5uWouYFjxSaaTA1t1eJ+LL4WkGir51AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUf2rkKqsrIUowIiw1KERA4hxQwNkwHwYDVR0j
BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy
MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB
MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2
NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3
NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALMYrrIbyNu3ESEJXKRkBtk9tvuRbxnrKZCx
PokaC8aOOFYU+LK5zCA5+TgGft9aqIAxDFy9q1+J9QmfGBwqXMLfqm6bKWcrQa6N
u07u/Oi329bFRaVXHNkxF4uwKJJucr7XVZGYDfTK47SupOFpImnXvNQPKGKSE7xk
u4HNWreeHFgGVP6bHW7JsshJwN0S/nj0Z99IXJvaFLaFy6rkU1EqmjqMRU1UpybR
1VREPedlFPAmW0QVO/RwPgy69ajLUI9/4S5PhkqhjtV55u8EsIqF92Wf/T2FFG4I
iioGzdsLngdKvS/qgWvWkWN12ZmMMmsAp5NhXgNGkOzSwPFvdrU=
-----END CERTIFICATE-----
Generated at Mon Dec 22 00:03:58 2025 by rpki-client