This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json)
Hash identifier: iWvZ+VaYtoD8obC53HruhIgKETFMPuhO98RGOfofGaA=
Subject key identifier: 6A:7C:CA:6C:DA:76:D0:FD:39:03:E7:A9:0C:4F:D5:8D:C1:BD:3C:6C
Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902
Certificate serial: 04F8F0E4800333258A6C5053143D50EB096D5462
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
Manifest number: E2
Signing time: Wed 31 Dec 2025 12:51:22 +0000
Manifest this update: Wed 31 Dec 2025 12:46:22 +0000
Manifest next update: Sat 03 Jan 2026 19:30:22 +0000
Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=)
2: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: KE3sqfZUiKicXVCxb7Bk+8gtBTUWrF7peYMumpqAsgk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 10:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f8:f0:e4:80:03:33:25:8a:6c:50:53:14:3d:50:eb:09:6d:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902
Validity
Not Before: Dec 31 12:46:22 2025 GMT
Not After : Jan 3 19:30:22 2026 GMT
Subject: CN=6A7CCA6CDA76D0FD3903E7A90C4FD58DC1BD3C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:ea:26:fb:1b:56:c3:30:84:2c:57:48:d2:
4b:3e:d8:e8:48:ee:b7:2d:48:7f:5a:d8:5d:4e:ff:
14:5f:b7:2c:68:5e:c2:0e:e1:88:b7:2b:ae:38:5f:
57:57:ad:6c:d8:b1:37:6a:95:8f:9c:e1:33:b6:eb:
ce:22:6b:c7:5d:e4:b5:5a:b3:4d:f8:b2:68:cc:61:
00:e4:16:f1:43:ae:ba:e1:26:36:c0:c5:4d:48:f8:
7f:aa:f3:b8:fc:d5:8d:ed:e0:b1:0b:3f:76:90:20:
25:20:13:5c:90:9d:57:9d:d4:d8:00:83:ea:ec:e2:
3f:85:be:20:6a:35:4f:ed:0d:92:4b:f9:63:4b:ba:
f9:33:d4:35:a2:b6:16:79:4a:b9:94:25:7e:ef:c1:
ab:39:1e:6d:3a:2e:f8:7f:00:c2:51:7b:40:7a:48:
7c:9d:be:20:e2:9d:21:f8:53:7d:6b:28:97:28:a3:
11:40:d3:45:4e:ce:7c:10:bc:c7:b1:5a:07:71:b4:
03:c7:63:39:79:4b:e6:37:3f:d2:f6:73:24:58:1c:
6e:33:10:80:49:18:2b:34:ad:5c:44:11:40:75:ec:
3c:2b:74:06:f3:d8:da:18:de:61:63:6e:d9:3b:ae:
d8:1d:64:1f:bd:d0:42:7e:23:83:30:92:58:4d:6b:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7C:CA:6C:DA:76:D0:FD:39:03:E7:A9:0C:4F:D5:8D:C1:BD:3C:6C
X509v3 Authority Key Identifier:
keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3e:bc:c3:40:af:4f:fc:84:80:d9:6c:c0:f9:76:07:16:6e:
7f:e5:10:60:26:1a:54:91:67:57:0d:de:f8:b8:ed:de:67:9d:
62:68:90:bd:7c:4d:fe:e5:d6:13:fc:21:c3:96:6e:c6:ec:ec:
c0:7a:9e:f9:8f:b1:b9:e9:a3:45:d7:dd:67:c0:b1:5a:c2:cb:
77:54:af:f6:fe:bf:c8:52:f0:21:d6:0c:e1:44:ad:9a:4d:17:
ec:39:d1:ef:53:b7:21:74:9b:81:99:48:1a:1c:3e:fc:00:36:
b1:24:96:7f:d5:d7:de:9d:73:ac:3e:43:3c:7e:18:de:03:f5:
86:d7:2b:eb:8e:d9:ba:57:cb:65:e3:3f:43:77:9a:ec:bb:2d:
0c:25:63:6d:38:40:ad:bc:f0:77:88:72:32:76:19:a7:8e:b7:
c2:d5:13:96:6b:34:a5:9a:2b:25:f9:a4:b7:35:68:53:63:fe:
db:70:2b:32:2f:f3:cd:e8:f2:ee:aa:cb:4d:05:ac:56:1d:44:
62:b0:b5:a5:30:c8:2a:5a:5b:76:ea:c3:88:ed:49:e9:20:a2:
79:e2:2e:41:6e:c8:90:00:ef:15:7a:ef:9b:1a:a9:53:1c:62:
d6:da:b4:d2:9a:1b:a0:84:1b:a5:88:de:e5:ce:2b:b0:f2:a8:
e7:0c:14:43
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBPjw5IADMyWKbFBTFD1Q6wltVGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUw
MDQ0MzkwMjAeFw0yNTEyMzExMjQ2MjJaFw0yNjAxMDMxOTMwMjJaMDMxMTAvBgNV
BAMTKDZBN0NDQTZDREE3NkQwRkQzOTAzRTdBOTBDNEZENThEQzFCRDNDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSK+om+xtWwzCELFdI0ks+2OhI
7rctSH9a2F1O/xRftyxoXsIO4Yi3K644X1dXrWzYsTdqlY+c4TO2684ia8dd5LVa
s034smjMYQDkFvFDrrrhJjbAxU1I+H+q87j81Y3t4LELP3aQICUgE1yQnVed1NgA
g+rs4j+FviBqNU/tDZJL+WNLuvkz1DWithZ5SrmUJX7vwas5Hm06Lvh/AMJRe0B6
SHydviDinSH4U31rKJcooxFA00VOznwQvMexWgdxtAPHYzl5S+Y3P9L2cyRYHG4z
EIBJGCs0rVxEEUB17DwrdAbz2NoY3mFjbtk7rtgdZB+90EJ+I4MwklhNa9IRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUanzKbNp20P05A+epDE/VjcG9PGwwHwYDVR0j
BBgwFoAU9pU1CXwYGxQzEtjqGmpS1QBEOQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC9GNjk1MzUwOTdD
MTgxQjE0MzMxMkQ4RUExQTZBNTJENTAwNDQzOTAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUwMDQ0
MzkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4
ZjktZmY5NzkxNzgxNTQ5LzAvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUy
RDUwMDQ0MzkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGs+vMNAr0/8hIDZbMD5dgcWbn/lEGAmGlSR
Z1cN3vi47d5nnWJokL18Tf7l1hP8IcOWbsbs7MB6nvmPsbnpo0XX3WfAsVrCy3dU
r/b+v8hS8CHWDOFErZpNF+w50e9TtyF0m4GZSBocPvwANrEkln/V196dc6w+Qzx+
GN4D9YbXK+uO2bpXy2XjP0N3muy7LQwlY204QK288HeIcjJ2GaeOt8LVE5ZrNKWa
KyX5pLc1aFNj/ttwKzIv883o8u6qy00FrFYdRGKwtaUwyCpaW3bqw4jtSekgonni
LkFuyJAA7xV675saqVMcYtbatNKaG6CEG6WI3uXOK7DyqOcMFEM=
-----END CERTIFICATE-----
Generated at Wed Dec 31 21:13:24 2025 by rpki-client