This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
File: 50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json)
Hash identifier: n1R1u4SuDxXQPmqljAEKFAKpBMBSjpaPeB9VTOd4OhE=
Subject key identifier: 98:26:C3:81:30:36:98:A7:7E:AC:1D:DD:5D:3A:2E:D8:AC:E4:11:9E
Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A
Certificate issuer: /CN=50D9825940B483F044841C179E5B7712607CAB2A
Certificate serial: 121753F274815CA9C165711B1DE716D3EC637E52
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
Manifest number: 0247
Signing time: Tue 23 Dec 2025 04:22:13 +0000
Manifest this update: Tue 23 Dec 2025 04:17:13 +0000
Manifest next update: Fri 26 Dec 2025 10:00:13 +0000
Files and hashes: 1: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: Si2XPO58WdgrrVsoRuITYEz1xHppBjuc5ODF09xj+uQ=)
2: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: 8ucdhC8+G/GM9sLgWMqJbTh8/P5IkKccW0COx5GovCw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl
rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:17:53:f2:74:81:5c:a9:c1:65:71:1b:1d:e7:16:d3:ec:63:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A
Validity
Not Before: Dec 23 04:17:13 2025 GMT
Not After : Dec 26 10:00:13 2025 GMT
Subject: CN=9826C381303698A77EAC1DDD5D3A2ED8ACE4119E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:ea:8e:a8:0c:4b:c1:58:24:93:83:81:96:
d6:50:9a:c9:a6:23:6f:19:99:d0:d3:e9:ab:65:91:
07:3a:b4:47:08:4b:40:dd:ed:b7:81:73:62:0a:9e:
80:81:d1:24:14:4a:f9:9f:bf:9a:da:19:13:f7:50:
b2:c0:42:1e:c0:71:47:82:73:ea:e2:02:d6:8a:b4:
ba:db:e6:aa:60:f9:47:4c:99:8d:d1:12:ea:3a:26:
b2:e5:5d:9b:b2:a0:94:c4:8a:a9:a7:25:15:92:5f:
5a:d9:20:7a:50:c4:65:50:cc:82:ea:91:45:ed:97:
31:01:d2:a0:9e:39:dc:26:29:8c:db:33:08:f9:31:
91:01:6c:a5:45:b4:a3:3e:68:d7:f4:fc:e4:91:82:
56:78:d7:de:6f:65:ab:cc:02:cb:79:3e:eb:17:08:
f2:c3:0d:9b:7f:83:ea:a5:f7:19:00:ff:09:fb:92:
dd:21:79:07:16:f8:04:4f:82:01:b5:a3:5d:b7:e3:
b8:56:58:57:cb:a1:fb:51:3f:11:09:25:b2:64:84:
eb:0a:66:8b:53:48:be:4d:49:f2:3f:fd:3f:6c:05:
dd:22:af:c0:9d:37:f9:5d:c1:bd:7c:29:48:eb:6a:
07:7a:7e:84:c9:04:6a:fe:87:02:a8:f1:bc:54:19:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:C3:81:30:36:98:A7:7E:AC:1D:DD:5D:3A:2E:D8:AC:E4:11:9E
X509v3 Authority Key Identifier:
keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b8:14:00:6e:54:bc:cf:59:56:b4:c2:11:f7:32:28:37:83:
b0:c0:45:fb:cc:ca:c5:09:99:99:32:d3:43:02:bc:2b:05:c9:
c4:f7:f0:15:b8:f2:8d:07:a3:da:63:00:3b:41:6c:ab:97:8c:
86:69:95:55:f6:3f:5e:be:53:3a:37:ea:f4:ee:d2:d6:c1:e9:
f8:b6:f1:54:44:88:25:a6:bd:a8:71:6c:88:29:7a:44:bd:7a:
89:f1:93:8e:d5:94:61:67:ac:96:cb:57:bc:bb:d7:df:a7:62:
b8:dd:4e:0d:a2:23:82:c5:8b:02:16:38:a8:c4:ae:25:6a:9d:
56:35:9b:b3:a9:70:14:cf:c2:59:e7:c1:0d:a6:d2:7e:ae:aa:
71:ef:9d:0e:62:03:02:3d:86:65:92:f5:7a:60:17:52:dd:a0:
39:9e:59:b4:4c:ff:2a:d7:eb:b2:e7:b3:6f:0a:28:5f:d6:78:
f4:88:bd:83:22:04:a1:9c:f3:36:4f:15:e5:36:b0:03:aa:4e:
94:36:65:fb:28:c2:ce:d1:3e:42:c7:22:47:da:2d:30:94:06:
37:fb:d8:03:d4:45:38:28:68:14:d4:f1:9f:c4:66:ea:9d:6c:
13:32:05:0d:09:43:bf:6d:11:fc:24:20:ac:76:27:1b:3c:a0:
a2:b7:00:e4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEhdT8nSBXKnBZXEbHecW0+xjflIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2
MDdDQUIyQTAeFw0yNTEyMjMwNDE3MTNaFw0yNTEyMjYxMDAwMTNaMDMxMTAvBgNV
BAMTKDk4MjZDMzgxMzAzNjk4QTc3RUFDMURERDVEM0EyRUQ4QUNFNDExOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNuqOqAxLwVgkk4OBltZQmsmm
I28ZmdDT6atlkQc6tEcIS0Dd7beBc2IKnoCB0SQUSvmfv5raGRP3ULLAQh7AcUeC
c+riAtaKtLrb5qpg+UdMmY3REuo6JrLlXZuyoJTEiqmnJRWSX1rZIHpQxGVQzILq
kUXtlzEB0qCeOdwmKYzbMwj5MZEBbKVFtKM+aNf0/OSRglZ4195vZavMAst5PusX
CPLDDZt/g+ql9xkA/wn7kt0heQcW+ARPggG1o12347hWWFfLoftRPxEJJbJkhOsK
ZotTSL5NSfI//T9sBd0ir8CdN/ldwb18KUjragd6foTJBGr+hwKo8bxUGQzRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmCbDgTA2mKd+rB3dXTou2KzkEZ4wHwYDVR0j
BBgwFoAUUNmCWUC0g/BEhBwXnlt3EmB8qyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZDQ2YTU2NC02MzQ3LTQwZWYtYmFkMy00ZGFhZTMwNmQ0MjEvMC81MEQ5ODI1OTQw
QjQ4M0YwNDQ4NDFDMTc5RTVCNzcxMjYwN0NBQjJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2MDdD
QUIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh
ZDMtNGRhYWUzMDZkNDIxLzAvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3
MTI2MDdDQUIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALK4FABuVLzPWVa0whH3Mig3g7DARfvMysUJ
mZky00MCvCsFycT38BW48o0Ho9pjADtBbKuXjIZplVX2P16+Uzo36vTu0tbB6fi2
8VREiCWmvahxbIgpekS9eonxk47VlGFnrJbLV7y719+nYrjdTg2iI4LFiwIWOKjE
riVqnVY1m7OpcBTPwlnnwQ2m0n6uqnHvnQ5iAwI9hmWS9XpgF1LdoDmeWbRM/yrX
67Lns28KKF/WePSIvYMiBKGc8zZPFeU2sAOqTpQ2Zfsows7RPkLHIkfaLTCUBjf7
2APURTgoaBTU8Z/EZuqdbBMyBQ0JQ79tEfwkIKx2Jxs8oKK3AOQ=
-----END CERTIFICATE-----
Generated at Wed Dec 24 20:25:18 2025 by rpki-client