This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
File: F9CF581400AB7EE53AB913B25561ED007481F16F.mft (raw, json)
Hash identifier: hkkr2h5uhyDfB01Grr0DLp5XsBLs3JEJ7MUh1j8RdKs=
Subject key identifier: AC:19:8E:5B:BC:C9:14:FC:15:F8:5A:C9:68:45:D3:5B:0B:B5:3C:F3
Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
Certificate issuer: /CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Certificate serial: 27661AE1854BE4EFCF894BE41E4FF04A0E27DD58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
Manifest number: 0200
Signing time: Thu 18 Dec 2025 20:21:54 +0000
Manifest this update: Thu 18 Dec 2025 20:16:54 +0000
Manifest next update: Mon 22 Dec 2025 06:01:54 +0000
Files and hashes: 1: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: cToTFt90KwlvxZE7MCLFACc5g9QO0So5rb9HSJhKMTM=)
2: F9CF581400AB7EE53AB913B25561ED007481F16F.crl (hash: tPiPrUgtZG3Y5Zp8EEpccp4hnvWSRe3hUG8wtzPCDJY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 03:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:66:1a:e1:85:4b:e4:ef:cf:89:4b:e4:1e:4f:f0:4a:0e:27:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Validity
Not Before: Dec 18 20:16:54 2025 GMT
Not After : Dec 22 06:01:54 2025 GMT
Subject: CN=AC198E5BBCC914FC15F85AC96845D35B0BB53CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:25:cd:c8:a6:39:0b:7c:9d:94:6a:c0:85:
ac:55:73:99:47:a7:17:3b:76:72:22:64:a3:9f:91:
fd:c5:c2:6f:7b:c9:24:5d:95:1c:13:e5:e6:bd:de:
78:41:ff:ea:3f:13:c0:c6:58:d5:1c:62:4c:ef:7b:
c9:aa:cf:b9:45:e0:28:59:e5:9a:8c:96:13:aa:ff:
60:bc:8e:6f:ad:95:d9:26:e3:e8:b6:3b:ba:a0:87:
9f:37:ff:01:50:be:f5:9e:d2:07:f3:76:74:bc:97:
0a:64:86:49:f9:59:86:ab:83:59:f3:e3:70:94:e7:
17:f4:38:1b:48:6d:19:b5:76:fd:68:26:3b:e4:12:
4e:8f:7a:98:74:c3:97:84:15:a9:3f:55:98:c5:f7:
75:30:d0:84:a9:8d:78:b2:37:bb:88:e3:9b:4e:6e:
ae:e8:12:e1:94:2d:ea:a6:2c:e3:ce:0a:3d:96:a4:
7d:b6:f7:8d:5a:18:60:84:ab:4e:5f:cd:8a:20:c1:
1f:23:96:f5:55:7d:b7:8f:66:1e:c9:0e:fe:45:34:
8c:89:51:8d:64:df:cd:f9:b6:8f:b4:f9:80:84:98:
2e:09:de:39:5a:f5:1c:80:82:0d:12:ec:f9:7a:d1:
56:ea:76:93:55:8c:da:e2:f2:7d:e5:fa:e9:13:86:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:8E:5B:BC:C9:14:FC:15:F8:5A:C9:68:45:D3:5B:0B:B5:3C:F3
X509v3 Authority Key Identifier:
keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f1:55:98:e3:e8:c1:92:7a:d0:68:9a:ed:9d:10:e7:ae:6a:
af:09:d2:c1:ae:74:1d:d2:9b:ed:40:27:e6:b9:58:c2:8b:f3:
d8:fd:c4:a5:c1:da:61:c5:20:a3:7d:45:68:a6:74:9b:03:ee:
4d:49:15:44:40:24:7f:72:0c:76:fa:3f:a5:55:cc:25:37:47:
3d:5a:27:d8:eb:64:03:03:5f:46:6f:b3:3c:2f:5f:81:49:51:
9b:fe:c2:d6:fd:b3:cd:64:bf:92:72:cf:4e:bf:20:cf:48:14:
5a:d7:c0:e7:bb:8e:41:b7:ba:d7:81:b8:f0:09:75:80:44:15:
2d:b7:49:53:d9:eb:8f:51:dd:ed:34:15:97:a7:1c:d7:57:11:
43:58:84:33:30:4d:60:35:16:ed:89:97:6b:05:10:f2:04:73:
67:03:34:b5:f7:c7:63:fd:70:a7:b9:9b:78:4d:e5:20:da:c5:
42:75:53:ab:12:06:41:a2:78:7a:48:0a:42:78:44:fe:6e:c0:
1f:7f:b1:65:47:e6:5c:c4:ed:18:24:fd:a7:cf:11:be:31:da:
e0:e2:45:64:8d:86:4c:7e:35:c0:7e:e2:e4:e9:80:3b:fd:f6:
f2:99:8c:98:89:ed:ce:19:10:ef:0d:5a:1f:f0:de:68:ed:d3:
04:a8:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:07:37 2025 by rpki-client