This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
File: 94F6C26027B9F72AA8701D1296627FA57809A6F3.mft (raw, json)
Hash identifier: aaCLZHf8Sqmym0RrMY/izYmXqqJ0/F4L/t6kubtBilE=
Subject key identifier: 85:BC:EB:05:34:93:03:5F:16:5B:FA:C9:22:DD:D2:EB:E4:71:DE:D9
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Certificate issuer: /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial: 705C0AD0639C0C5A0998F2DEC25DA0B26FAC65E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
Manifest number: 0130
Signing time: Mon 22 Dec 2025 03:23:11 +0000
Manifest this update: Mon 22 Dec 2025 03:18:11 +0000
Manifest next update: Thu 25 Dec 2025 15:07:11 +0000
Files and hashes: 1: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: PA93RwBGZzvBREAFM1iYNGPBBAoGkHxnKXuygsv1ptE=)
2: 94F6C26027B9F72AA8701D1296627FA57809A6F3.crl (hash: 6YlLfHTaFSXn8SM3sXpBazajTBQdE/vwjTESceQVIcI=)
3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: o89Hh5vp0Qt2o58GB1JQke74RyM5ltdrLMS25ekXGFY=)
4: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: VlfA2F9WRPy+vssWvwHG73lbx3hyMs2V96FvcvqUxfA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 07:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:5c:0a:d0:63:9c:0c:5a:09:98:f2:de:c2:5d:a0:b2:6f:ac:65:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Validity
Not Before: Dec 22 03:18:11 2025 GMT
Not After : Dec 25 15:07:11 2025 GMT
Subject: CN=85BCEB053493035F165BFAC922DDD2EBE471DED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:90:16:35:54:3d:80:ce:1c:ad:f5:c2:f0:
ba:99:5b:ae:10:e8:bd:ce:6f:d4:18:07:a9:c3:5d:
2c:8a:d3:51:b5:44:97:09:1d:61:cc:29:a8:7b:0b:
6d:b4:2c:7d:5a:bf:1d:97:52:6e:69:6a:59:93:22:
29:d2:e2:40:48:8b:41:3b:51:12:fa:3b:40:85:b7:
f1:97:56:7f:22:dc:2b:4d:c3:9a:d0:bc:86:a1:31:
71:43:fe:54:de:08:61:1c:b5:02:32:ff:20:19:24:
c6:fd:5c:cc:e5:da:c9:10:0f:36:cf:10:b2:c3:5f:
69:ff:05:34:11:3e:cb:16:b5:95:ba:17:9e:db:e3:
8f:52:2b:37:6c:84:a2:16:f7:93:b1:6e:11:b8:22:
2a:3b:c7:25:7e:ef:b8:c5:22:40:30:6c:57:e5:d7:
ae:1e:3b:a1:ee:96:26:1f:b2:67:19:16:a7:6f:e7:
55:24:3f:5e:47:ac:c2:cc:90:e1:34:13:ba:f5:3f:
78:2e:e1:40:56:cf:84:13:1d:c1:29:d8:6b:14:fd:
ae:52:d4:39:84:45:ce:2d:66:02:3c:d1:45:ed:cd:
9a:2f:d0:7a:6c:0c:76:50:85:e5:a6:d5:65:fc:58:
71:77:4a:a6:56:d6:75:1a:51:41:95:12:69:bd:69:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:EB:05:34:93:03:5F:16:5B:FA:C9:22:DD:D2:EB:E4:71:DE:D9
X509v3 Authority Key Identifier:
keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0e:c1:2a:12:ae:ed:a8:a0:a0:23:69:e7:d0:f2:f0:5c:8f:
00:2e:d8:b9:74:56:1c:fb:0d:c5:e4:ea:b8:82:4e:46:cc:cc:
7c:c1:2b:55:69:0d:b1:4a:72:d8:75:c3:a8:77:a2:e9:ec:ed:
d8:e9:b1:35:d9:d4:50:c4:17:0e:aa:d2:f1:33:8f:a2:98:8b:
44:8f:52:34:e6:6d:66:66:a8:02:ab:dc:c2:bb:d3:4e:fc:c1:
6c:5d:ed:4f:5f:64:17:53:af:a3:51:dc:77:07:05:1e:0f:ed:
8c:f0:1f:06:3b:33:76:2d:1f:9c:32:ec:48:17:a5:10:8e:89:
7e:58:9b:f6:9d:b7:c8:dc:1b:70:93:26:6c:81:d9:4f:f5:1c:
05:f4:32:34:cb:11:48:80:e2:e3:e0:47:53:f6:8f:c3:c4:ce:
cd:7d:eb:65:88:1b:2b:97:32:6e:c2:14:a6:29:52:96:a0:cd:
44:6b:51:f5:7d:ac:cf:1d:3a:e4:d1:09:61:b5:18:e5:71:7a:
ef:0e:2f:26:5a:71:27:69:3b:51:c1:83:3d:4b:8d:34:6a:c7:
69:8b:4a:36:02:f5:90:88:66:83:71:2a:eb:d2:ac:34:81:1d:
38:12:8b:0b:60:cd:9b:06:a8:04:fc:dc:7e:e6:77:07:d0:fe:
66:49:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:32:59 2025 by rpki-client