This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json)
Hash identifier: jA8mkQd+QSNGIYu7/vbjGh2DCokTshCO4AR09EAqkto=
Subject key identifier: EE:D4:2E:04:53:BE:E8:99:A8:07:97:AE:BA:ED:BA:FD:1B:F9:FE:1E
Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Certificate serial: 70DCD25B4BAD687DE001237B61D223ED2421394B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
Manifest number: 04AC
Signing time: Sun 21 Dec 2025 23:11:23 +0000
Manifest this update: Sun 21 Dec 2025 23:06:23 +0000
Manifest next update: Thu 25 Dec 2025 07:31:23 +0000
Files and hashes: 1: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: JK9uWyUnlTBAvV8zViZB2Kcjau/dBn/KG0P7Jc9dFGg=)
2: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: R7KLsJOo3soCPav40P+K3pNlUVu9SA4Q96TRuJpOj+E=)
3: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: 6h4OUe35cAilH9aTLCHLFwR0jWsvbybacQ9mi2j6ujA=)
4: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: ewJgan+GOc5EF2IIw2j2XZ7OzgyQtNMjtbtPPb3IY5c=)
5: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: +GDxvCg7W3rpGkqjXTdZOjObKRgXnf9yC9gObIaf91w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 07:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:dc:d2:5b:4b:ad:68:7d:e0:01:23:7b:61:d2:23:ed:24:21:39:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Validity
Not Before: Dec 21 23:06:23 2025 GMT
Not After : Dec 25 07:31:23 2025 GMT
Subject: CN=EED42E0453BEE899A80797AEBAEDBAFD1BF9FE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:c6:d0:6b:2a:9b:da:28:53:13:ac:e4:25:
c0:d3:10:41:70:80:d6:2c:5c:1f:ab:44:09:5d:93:
e0:22:ea:d5:a3:13:e8:d9:3e:cf:9d:90:f6:f1:94:
eb:02:bd:7b:4d:6b:fc:e4:29:65:61:09:ac:3f:bc:
f8:8f:ab:b4:9a:0d:72:5e:3b:57:58:e5:41:da:02:
c9:dd:ce:c5:5c:b8:85:43:b8:a5:3a:06:6f:5b:b3:
8c:72:e3:6b:a6:f7:df:bf:84:55:79:99:f4:7d:28:
2d:d2:dd:65:75:22:03:24:8c:96:bd:ca:bc:ff:0f:
5b:ec:6d:2a:e7:e2:52:ea:01:8a:9c:41:f7:20:05:
db:08:0b:1c:b7:85:a5:1a:8b:81:3d:80:a4:6a:a2:
8c:17:66:38:5c:84:d6:5d:e1:1a:3b:00:32:dc:df:
9f:80:d8:ec:55:a6:b8:27:c3:e9:b2:9d:d0:53:22:
2b:65:79:28:10:fe:48:24:77:8f:8e:bd:2c:9e:23:
1b:cf:9c:c6:6e:e6:29:fc:c1:be:8a:44:bb:c5:8d:
66:fe:1a:4a:8c:5c:9c:1e:4a:ae:da:11:47:dd:69:
f6:8d:0d:f4:e9:25:4d:a7:59:4c:f0:96:80:ac:79:
c3:49:81:55:ee:8b:8a:43:5e:82:ba:54:89:02:75:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:2E:04:53:BE:E8:99:A8:07:97:AE:BA:ED:BA:FD:1B:F9:FE:1E
X509v3 Authority Key Identifier:
keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:24:b7:65:a7:a8:bd:5d:b4:5b:12:84:f5:51:fa:ae:84:bd:
6f:33:c4:61:de:e5:78:b6:a2:5e:ef:ac:b1:1e:4c:15:9f:e2:
52:1f:c6:8b:d8:5b:93:92:b7:a3:56:a9:47:a4:7f:c9:8a:9f:
ef:9d:0f:40:9c:18:fe:f6:56:5a:2c:7d:0f:3a:a9:92:da:11:
5b:8c:f7:4d:ad:2c:d2:43:f2:2f:a8:c7:8b:1e:61:6a:ad:cc:
9b:22:a0:c4:b9:e0:2a:f2:7b:bd:f3:6e:29:02:8e:88:74:22:
df:9a:00:c8:66:22:65:e8:b3:b9:1d:8b:dc:bb:e2:d1:a7:05:
cd:20:d6:07:d7:2a:af:46:8d:66:72:c4:61:a9:c4:eb:21:25:
24:3d:b4:32:a7:b8:98:28:89:e5:59:53:68:23:df:f1:4c:86:
01:9a:e2:cf:83:77:2f:ed:74:a4:86:33:95:dd:9b:01:0f:20:
3e:fc:b4:50:d2:99:b3:05:2d:a8:3c:d9:5b:6f:b5:2e:b5:2d:
8a:40:ca:e2:fa:99:94:f7:2a:65:ad:46:65:a1:b9:4e:e2:7d:
9d:88:af:9e:71:1a:fd:bc:9e:07:28:ff:4a:f0:25:81:e3:8e:
9c:d9:9a:68:75:70:00:05:9d:29:50:b6:03:d8:51:d5:04:91:
b7:63:b3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:53:27 2025 by rpki-client