This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
File: 619EF55758C22775EDCEBA183A59715E1452FD8B.mft (raw, json)
Hash identifier: 3rRr3GmidXZgWNnlFRa6Zc2qPuIF6/9XjLvlUjTH3WU=
Subject key identifier: D6:A7:00:32:FA:A3:FE:1F:E6:D4:1B:DD:A7:E6:B1:09:3A:25:45:F8
Authority key identifier: 61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
Certificate issuer: /CN=619EF55758C22775EDCEBA183A59715E1452FD8B
Certificate serial: 70D0839EBADFC4A113B80D0C38467504663785D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
Manifest number: 0201
Signing time: Thu 18 Dec 2025 10:01:16 +0000
Manifest this update: Thu 18 Dec 2025 09:56:16 +0000
Manifest next update: Sun 21 Dec 2025 17:16:16 +0000
Files and hashes: 1: 619EF55758C22775EDCEBA183A59715E1452FD8B.crl (hash: jSZTWka5kRrbKpIgKDhsPlSAlOUswxnZSA4pmGf9G6A=)
2: 3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (hash: XOCdIAMKDMLBpRxTU+JgAZ5zHO8OEenWLT9fS6FfdlU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl
rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 17:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d0:83:9e:ba:df:c4:a1:13:b8:0d:0c:38:46:75:04:66:37:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619EF55758C22775EDCEBA183A59715E1452FD8B
Validity
Not Before: Dec 18 09:56:16 2025 GMT
Not After : Dec 21 17:16:16 2025 GMT
Subject: CN=D6A70032FAA3FE1FE6D41BDDA7E6B1093A2545F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:04:6a:a2:9d:cf:bc:9c:82:6f:2c:47:c0:
ab:0a:e8:9a:e3:00:91:d9:70:f7:0f:f6:a1:7b:7c:
28:30:37:33:83:f6:2d:b8:e8:3e:ec:18:f6:4e:58:
f9:a3:38:3f:40:c6:e1:70:d8:13:62:ed:3d:18:dc:
f6:9e:f7:01:ea:8e:3d:3c:25:4c:17:b8:e9:2d:58:
0e:57:0c:1e:20:6e:2c:a2:b1:60:6f:fa:b1:09:da:
4e:81:ef:75:01:66:ef:32:a3:70:db:f2:c1:49:84:
e4:76:d7:83:f5:ad:38:54:16:07:69:62:0c:ca:45:
46:f2:23:66:94:c7:7e:63:67:54:79:55:24:59:71:
b6:3d:b8:d6:fd:1f:cd:df:15:76:cc:8b:f8:13:60:
e4:90:90:29:9c:5b:22:37:33:28:1a:31:b1:cb:d6:
18:ad:4c:55:a3:0c:89:a9:1c:31:05:0c:74:4e:2f:
65:28:7c:88:0e:2e:42:3f:ce:8f:5b:1a:95:2b:9e:
63:30:8c:94:4b:a0:97:fa:7a:31:8f:f3:8a:3b:ee:
17:b1:5b:32:8d:bf:4b:c8:e5:74:29:35:9f:94:9e:
43:12:90:61:3f:02:d4:a1:8f:fe:9b:98:0c:d0:3b:
5e:59:d0:d9:bf:c9:8b:b0:66:7d:67:1c:de:19:8d:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A7:00:32:FA:A3:FE:1F:E6:D4:1B:DD:A7:E6:B1:09:3A:25:45:F8
X509v3 Authority Key Identifier:
keyid:61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:77:d5:4b:74:f2:43:5e:47:d9:a3:bc:0c:5d:c9:3e:88:e1:
8b:46:41:ba:e1:39:30:bb:cb:46:59:9c:fb:ee:81:d2:a1:03:
c6:bd:ca:d9:79:8f:a8:c4:b9:47:73:a0:0c:1d:ec:19:6e:bd:
84:dd:77:21:0b:f2:df:08:1c:03:92:37:1e:0f:81:7a:fd:f5:
44:91:4c:f9:27:57:f8:b9:4a:39:18:c0:49:9a:5a:92:f6:27:
1f:d2:33:0b:ad:ea:a7:08:4f:5a:e2:54:9b:ff:9f:f9:04:a2:
03:b9:1f:b0:f1:5c:9c:e5:0d:3b:7f:51:4b:21:50:44:26:2d:
d9:a9:5c:af:9c:86:ce:ce:85:6e:59:bd:f5:d4:c2:22:9b:b7:
f3:4e:a0:94:df:6f:6f:c8:7c:57:dc:e5:b2:8d:cb:ce:5a:14:
9a:ec:d2:da:b6:c4:9c:93:3b:e5:b9:bb:b8:e9:b3:8c:9b:a9:
ac:10:ab:6c:ec:c5:b8:11:96:89:f1:92:29:47:7a:1e:43:3c:
15:10:98:e5:77:f6:6c:03:1f:99:bb:06:51:7a:97:79:9b:ae:
b6:c5:cf:0b:fc:5b:18:6d:af:0b:a3:75:26:3c:65:d1:d9:57:
ee:09:f5:35:3c:88:03:9b:9c:8c:81:d9:d4:56:e6:5b:c8:8a:
98:59:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:03 2025 by rpki-client