This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
File: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json)
Hash identifier: 5Yxy628DArTjo+kIi4Ga6KaG0haX6ScjV8vG1yhwwzI=
Subject key identifier: 04:E4:F9:20:57:90:E8:FA:7D:B0:74:08:C8:E6:43:7F:66:11:60:47
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial: 4E56868A98D0EF7CD0EE67720FADCFB21FAE9453
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
Manifest number: 0551
Signing time: Thu 18 Dec 2025 01:31:54 +0000
Manifest this update: Thu 18 Dec 2025 01:26:54 +0000
Manifest next update: Sun 21 Dec 2025 02:53:54 +0000
Files and hashes: 1: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: vAWo/sMha9Axd+Jk89itnwJrd2zfg2QgA6Bw5YCPuyc=)
2: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: pSIhRfY1rarJf7HrHmCQMezY1uEqJkpoZDZU50LvaOo=)
3: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: XtqlnNzbkZSmq/aHGl1uqDBc5YB4rnEqd6nCa3Q5338=)
4: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: murX+k5R8h8ESiT+QSuCpzrPj9+7vb21yxp17P+JmVI=)
5: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: ULCLP9kZZOxNVrlIu58ZSD+j7UQRNK4nHv2XMRgGLuc=)
6: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: /OpJo01cDRJlGfeBvyqLHyVTpWA1fZyMWTJSJbd+gCM=)
7: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: iU0rA2I2pdwjPlY87B+mW81OhT+cYHrzR6Mi5MNimIA=)
8: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: 9vKmERWi+/y+esKTTFswCbGkU/rG05yleJxXiPBZcSM=)
9: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: hNHUUdaz/xmcgWweg8dc6qW4ZUh/HEb8USitKT+fel0=)
10: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: OmHs2Hv0f8cTnPoIf5TvFj4+r1fzYXa48KbgCWe5XYI=)
11: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: g58vS0uRqifjFt5po4KOpHYFCF7u3ZSdJUV7sz9xKFc=)
12: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: TEKeHrJmyFcpTEmPwxy/NNfjYbPJYRIMg2pHG8Lg4M0=)
13: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: pyoz1UE1SS+gQEYwJtWJfl1rSqxZhRQvUuR1ThdXkyI=)
14: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: mKxNfIZaogpqoGD1v/HbTG1n+WMSkSPY8mtudPgnTgU=)
15: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: L9PlBnHs/i4t9NLRoSomC1O2F1YqU8jz1M3b0qQhUUw=)
16: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: nHLhFUO3/d1KOlnJCoDhfh5DYlPgmeAohfDNtzLOH9U=)
17: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: DxFUq6TU35WAi7u0l6JIZEIVxbeEPUpLur4r3SpdJtU=)
18: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: zOhjFfZYvz6en5SX0bt2bwJN0UbIougWGwAhrOcMWOE=)
19: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: gvli+HahlWwpXT6MXiB6a1x0yRZFhPDWq/40wV3mRrM=)
20: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8WvLGIqXkNW5FzU3OPJJcweW3RqCzsTdln0JFQiWe+I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 02:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:56:86:8a:98:d0:ef:7c:d0:ee:67:72:0f:ad:cf:b2:1f:ae:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Validity
Not Before: Dec 18 01:26:54 2025 GMT
Not After : Dec 21 02:53:54 2025 GMT
Subject: CN=04E4F9205790E8FA7DB07408C8E6437F66116047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:26:bb:7c:c0:3f:d2:9e:f5:2a:7f:27:e3:
7a:c8:6a:32:e4:b8:60:c6:8a:b0:ee:0e:a5:fb:0e:
67:6c:b1:2d:0e:88:85:1a:c4:e1:22:ea:bd:18:1c:
ae:8a:34:ed:0a:65:5f:6d:ef:ce:cf:05:0c:27:12:
e7:7a:8e:c9:26:28:95:99:eb:69:6d:c3:8a:7f:53:
fa:4f:e9:96:e8:68:86:03:15:ac:a1:73:34:4a:c1:
4d:f7:4a:6a:12:40:55:39:5b:8b:59:d0:58:9c:48:
b1:d6:e9:0c:3b:76:92:7f:4b:68:0d:97:10:b3:ed:
46:88:fd:93:48:e6:a5:07:41:dd:86:41:77:df:ad:
7e:a1:17:45:ea:28:4d:55:a0:9f:1e:c7:08:c7:7c:
e2:5f:0f:6e:ce:b0:33:7d:77:ea:38:e0:e6:4a:4a:
12:f3:a6:6d:73:7e:50:94:67:fc:58:85:cd:9c:b7:
d4:e3:fe:a6:0b:47:74:5e:46:9c:bb:9e:da:2e:9d:
a9:fc:d3:6d:8d:b4:83:14:02:79:7e:92:ca:8c:04:
84:74:24:6b:57:3a:e3:23:6a:2f:14:90:63:96:8c:
29:4c:b2:06:78:78:24:7a:c0:f4:b1:11:fc:62:a2:
ff:20:b2:87:1f:b4:7a:74:5b:02:46:52:7a:61:d8:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E4:F9:20:57:90:E8:FA:7D:B0:74:08:C8:E6:43:7F:66:11:60:47
X509v3 Authority Key Identifier:
keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:aa:e4:05:21:ab:08:26:f2:f9:40:49:66:89:1f:fc:4b:00:
71:ff:0b:37:26:dc:51:a3:e0:07:0d:77:d1:de:ec:02:de:43:
04:39:27:fa:c5:f6:e6:dd:c3:89:fa:60:66:b1:aa:16:7a:c0:
e4:ba:5b:9f:7d:ad:ad:e6:af:31:c5:d4:3e:b9:00:1f:a0:66:
40:53:2e:bd:e7:fe:34:b4:81:91:fe:e9:c6:cb:f0:28:4b:07:
ff:75:18:f8:6c:7c:d2:12:e9:68:6a:a0:96:66:28:0e:77:b4:
f4:64:2d:e1:8e:4b:dd:59:e6:5e:e7:38:61:74:77:9b:20:42:
57:71:47:98:fb:65:11:06:54:52:2a:f1:71:2d:79:28:29:c4:
68:9f:bb:15:e4:6d:c8:90:9d:50:e2:50:9e:c9:17:16:fe:82:
6d:ca:87:a5:06:30:28:07:e1:67:7c:a8:6b:eb:d4:1d:84:83:
97:ae:03:a1:34:e0:ba:8f:86:5a:b2:8d:de:93:1d:45:64:96:
ea:3b:c4:b9:43:99:f8:b8:5e:01:cd:52:49:58:e1:7a:14:ec:
33:04:e3:06:be:81:00:72:e2:77:02:e7:36:97:8d:d3:f7:c4:
67:8c:c1:69:76:8c:4f:99:6d:fc:38:46:79:74:b7:0c:c3:90:
6a:16:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 10:25:26 2025 by rpki-client