This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
File: ED137633BAEE661A0ACBBF277089F107CB59439A.mft (raw, json)
Hash identifier: ugV6zq12IEq/MnVuPCNBFL7lsRBVF+QBTnzuCC/hF1Q=
Subject key identifier: 1F:E0:50:D7:D9:48:98:8E:47:44:D3:07:5D:02:A5:7B:E4:59:8F:B7
Authority key identifier: ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A
Certificate issuer: /CN=ED137633BAEE661A0ACBBF277089F107CB59439A
Certificate serial: 67A315BC4E2BE47E6AF32DB032E65CADA6D8427C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
Manifest number: 01E0
Signing time: Sun 28 Dec 2025 17:51:34 +0000
Manifest this update: Sun 28 Dec 2025 17:46:34 +0000
Manifest next update: Thu 01 Jan 2026 02:11:34 +0000
Files and hashes: 1: ED137633BAEE661A0ACBBF277089F107CB59439A.crl (hash: 5/zFZPDF7nH+H6+f6BuVauJg3XUTDEm4JQFkO4gbH34=)
2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: lA0HvakrheoR+VMWrWjd7ZsfLODkGFiLcqbm8PHhQfs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl
rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 02:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a3:15:bc:4e:2b:e4:7e:6a:f3:2d:b0:32:e6:5c:ad:a6:d8:42:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED137633BAEE661A0ACBBF277089F107CB59439A
Validity
Not Before: Dec 28 17:46:34 2025 GMT
Not After : Jan 1 02:11:34 2026 GMT
Subject: CN=1FE050D7D948988E4744D3075D02A57BE4598FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:1d:57:a0:57:85:16:a6:0c:a4:e3:b4:2a:
12:6b:7c:c3:66:e5:26:d0:96:45:59:97:d2:da:f3:
25:57:d6:1f:0a:ae:2b:09:3b:77:88:85:64:03:ed:
5c:a2:67:8f:13:28:77:20:3a:fb:60:38:2d:d6:8b:
12:4d:96:72:06:33:2d:04:c1:a1:9c:b4:95:fa:2d:
e8:6e:06:ce:63:c6:a6:6b:5f:59:ee:4c:7d:6a:ec:
26:00:9f:de:97:1a:fb:42:27:56:19:f6:70:db:c1:
d7:c7:00:b6:ba:83:71:fd:b3:eb:8b:f1:45:7c:d4:
2d:0c:21:1f:fd:a9:f1:ca:53:fe:5b:cd:99:ed:21:
47:27:91:4c:b1:34:2e:65:96:04:d2:d8:89:8b:d8:
8b:4c:5d:01:33:e5:89:80:5c:22:89:5a:da:59:e7:
1f:8b:53:50:e6:f1:3d:04:d6:d0:bd:5f:a8:02:86:
38:af:9c:71:a3:68:d2:29:bd:96:e0:e7:10:6e:a2:
ef:d9:8e:79:bb:8c:76:d7:ae:a9:2a:d6:2f:45:fa:
a1:dc:67:72:33:3c:b5:86:e0:fb:85:8d:50:04:df:
1a:38:14:27:f5:79:b6:3d:0f:1b:f6:c2:af:27:02:
ca:32:55:de:6c:c2:b6:a2:5f:27:42:ee:d3:84:27:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E0:50:D7:D9:48:98:8E:47:44:D3:07:5D:02:A5:7B:E4:59:8F:B7
X509v3 Authority Key Identifier:
keyid:ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:12:e8:77:e4:01:e9:10:e0:6a:e9:13:4c:87:aa:26:3c:
ed:00:17:96:58:c5:4f:9e:65:55:4c:c8:4d:fe:2c:c8:9c:25:
22:1b:61:f5:17:5c:98:32:18:63:ac:41:99:db:21:a7:dc:2b:
ac:70:28:29:ff:6c:43:ea:9d:1a:7d:06:49:37:bb:f1:27:94:
3a:b4:29:93:f0:02:b1:37:e3:5b:7d:10:80:f0:b8:e5:23:88:
af:40:67:69:a5:6e:40:7f:2e:f2:ff:29:1e:39:97:fb:01:b0:
ac:fb:c5:98:45:cd:0f:7f:50:62:e0:ed:12:3a:f7:a3:01:6d:
33:d0:4a:6f:58:9f:e2:17:d8:12:8e:f9:17:67:b8:ee:ef:c3:
c0:5a:10:52:4c:cb:dc:60:3d:e9:46:a8:68:f2:03:8f:91:84:
15:6f:e7:47:10:f7:f8:8d:48:55:85:f6:43:55:6f:bc:a2:9e:
2a:87:1d:d2:1b:3e:15:1f:70:d8:b2:84:88:56:7b:a8:16:9b:
26:ed:1e:30:6a:1e:0e:c6:f9:9e:84:84:47:d3:4c:cb:a8:a5:
a4:04:91:29:df:03:4e:5a:5d:c2:08:60:ad:43:cb:98:1e:bd:
b1:9e:ed:14:ba:5e:70:7d:db:47:47:da:a9:e9:5e:81:2d:81:
a0:c9:14:f5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ6MVvE4r5H5q8y2wMuZcrabYQnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdD
QjU5NDM5QTAeFw0yNTEyMjgxNzQ2MzRaFw0yNjAxMDEwMjExMzRaMDMxMTAvBgNV
BAMTKDFGRTA1MEQ3RDk0ODk4OEU0NzQ0RDMwNzVEMDJBNTdCRTQ1OThGQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAR1XoFeFFqYMpOO0KhJrfMNm
5SbQlkVZl9La8yVX1h8KrisJO3eIhWQD7VyiZ48TKHcgOvtgOC3WixJNlnIGMy0E
waGctJX6LehuBs5jxqZrX1nuTH1q7CYAn96XGvtCJ1YZ9nDbwdfHALa6g3H9s+uL
8UV81C0MIR/9qfHKU/5bzZntIUcnkUyxNC5llgTS2ImL2ItMXQEz5YmAXCKJWtpZ
5x+LU1Dm8T0E1tC9X6gChjivnHGjaNIpvZbg5xBuou/Zjnm7jHbXrqkq1i9F+qHc
Z3IzPLWG4PuFjVAE3xo4FCf1ebY9Dxv2wq8nAsoyVd5swraiXydC7tOEJyynAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUH+BQ19lImI5HRNMHXQKle+RZj7cwHwYDVR0j
BBgwFoAU7RN2M7ruZhoKy78ncInxB8tZQ5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzIyNDM2MC0yNDVkLTRhMWEtYWYzNi1mOWJlZmNkYjcwYjcvMC9FRDEzNzYzM0JB
RUU2NjFBMEFDQkJGMjc3MDg5RjEwN0NCNTk0MzlBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdDQjU5
NDM5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm
MzYtZjliZWZjZGI3MGI3LzAvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYx
MDdDQjU5NDM5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABCxEuh35AHpEOBq6RNMh6omPO0AF5ZYxU+e
ZVVMyE3+LMicJSIbYfUXXJgyGGOsQZnbIafcK6xwKCn/bEPqnRp9Bkk3u/EnlDq0
KZPwArE341t9EIDwuOUjiK9AZ2mlbkB/LvL/KR45l/sBsKz7xZhFzQ9/UGLg7RI6
96MBbTPQSm9Yn+IX2BKO+RdnuO7vw8BaEFJMy9xgPelGqGjyA4+RhBVv50cQ9/iN
SFWF9kNVb7yiniqHHdIbPhUfcNiyhIhWe6gWmybtHjBqHg7G+Z6EhEfTTMuopaQE
kSnfA05aXcIIYK1Dy5gevbGe7RS6XnB920dH2qnpXoEtgaDJFPU=
-----END CERTIFICATE-----
Generated at Mon Dec 29 08:30:03 2025 by rpki-client