This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
File: 782659A7F6433029248A38A1C68F2E9971161391.mft (raw, json)
Hash identifier: ovXdssMidLvVO3MAO0MBQox/2eQNbFTcfupkbm7ZEoo=
Subject key identifier: C7:7E:C8:94:BC:4B:29:26:ED:1F:DB:EC:9E:5E:1D:3F:77:A9:71:FB
Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
Certificate issuer: /CN=782659A7F6433029248A38A1C68F2E9971161391
Certificate serial: 7518C905B6FB6AE832297BED6FA3804E0951659B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
Manifest number: 014F
Signing time: Mon 22 Dec 2025 17:51:00 +0000
Manifest this update: Mon 22 Dec 2025 17:46:00 +0000
Manifest next update: Thu 25 Dec 2025 22:59:00 +0000
Files and hashes: 1: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: n7hVFiq0OxWE9m+WmPS/fUFFT640qZL0JRyZZq2zd9M=)
2: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=)
3: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: 1o5pWm32JlzXIIYG67jaNX/7ssN7uLCzQj52YRkWuFY=)
4: 782659A7F6433029248A38A1C68F2E9971161391.crl (hash: qLr6atpyxwOL2vgAtCH9KAqmtIxZa/8U5GEy8z3yfvE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:18:c9:05:b6:fb:6a:e8:32:29:7b:ed:6f:a3:80:4e:09:51:65:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391
Validity
Not Before: Dec 22 17:46:00 2025 GMT
Not After : Dec 25 22:59:00 2025 GMT
Subject: CN=C77EC894BC4B2926ED1FDBEC9E5E1D3F77A971FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:7c:f7:91:01:83:84:16:7d:d2:ce:f0:2a:
97:42:58:1e:fa:9b:38:bd:f9:27:e2:21:c5:42:bf:
a1:9c:50:f4:be:5c:fc:d1:59:0a:e8:05:5f:0d:8b:
ee:64:d8:93:42:87:2d:c3:b8:70:84:a6:50:47:55:
aa:9f:56:c3:93:d2:71:7e:36:c4:cf:99:6a:b6:7c:
1a:87:69:a9:d6:42:42:29:66:c2:8d:ae:48:1f:eb:
7f:b9:31:31:96:41:45:24:fa:ad:a1:84:b3:28:d6:
64:81:d5:d7:d4:11:6f:5b:c8:d4:8c:df:fb:9d:34:
0d:5e:df:d0:de:a5:38:c3:bb:42:46:81:d0:cd:2b:
73:fa:5e:19:ac:5b:bc:df:a3:a5:67:67:e7:33:ed:
ea:53:14:ea:62:d2:f3:25:ef:bb:af:34:f2:2d:12:
71:0d:8b:99:4e:5c:2f:fe:ad:4d:b2:5c:ff:54:1a:
32:78:33:30:9b:86:4d:98:97:f1:6f:86:61:dd:bb:
ae:4b:67:13:de:0f:b6:05:09:e3:66:cc:82:09:c2:
97:e6:c2:34:a7:0b:71:45:c5:b1:34:63:fb:eb:06:
42:90:a3:4a:a1:43:a6:04:2b:16:4f:a5:b9:01:04:
b1:e3:99:a9:fc:78:c8:51:b7:81:88:41:7a:41:8a:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:C8:94:BC:4B:29:26:ED:1F:DB:EC:9E:5E:1D:3F:77:A9:71:FB
X509v3 Authority Key Identifier:
keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b2:ca:e5:ab:75:70:e3:81:1c:20:0d:93:e9:e3:9a:51:57:
eb:74:56:ab:ed:de:22:49:fd:42:9c:4d:8b:59:51:66:65:7f:
39:04:03:4f:ba:06:6c:c7:2f:c4:f4:70:45:1e:cc:16:bd:a3:
73:6d:7f:dc:13:c3:40:e3:fd:7a:e6:3f:8a:10:10:af:20:49:
72:f0:ab:ea:dc:bb:e9:a1:16:e3:6b:13:50:8e:32:32:dd:a0:
b3:49:1f:f2:b7:d0:7f:b1:a6:11:f0:e2:8e:a4:38:b7:01:62:
f4:7c:79:38:9e:97:67:ea:92:13:14:cf:a1:6e:8b:89:40:83:
85:7a:fb:eb:22:4c:b5:ab:f5:ed:f3:59:b6:69:37:4c:ed:c1:
44:7d:ca:3e:a7:f2:09:f0:50:ad:ba:e6:ec:46:fb:ee:cb:d4:
40:28:54:0e:64:b6:65:23:42:ec:f2:02:fd:9e:7f:82:04:30:
40:42:5e:9c:e3:d0:7b:44:aa:4f:17:05:0f:7c:b4:b2:aa:0e:
38:d3:ab:73:02:94:fb:13:72:24:4f:2b:de:83:05:85:38:c8:
63:6f:c0:1a:03:af:f1:0a:ce:fc:e8:6a:95:aa:ee:79:1f:6c:
47:6e:2d:a0:eb:87:17:08:c9:10:58:7c:63:bf:02:85:e5:a8:
d3:40:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:25:23 2025 by rpki-client