This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json)
Hash identifier: qDJpgHK15YV+JB9gUvkdx0mI24N35lJjNM9M4/3P8wQ=
Subject key identifier: B0:40:1E:4A:E7:F4:37:C4:03:D8:E4:95:EA:B6:BC:DE:55:46:7A:3B
Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Certificate serial: 45637295567437311A4D2F266BA174CE393D1F31
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
Manifest number: E0
Signing time: Wed 17 Dec 2025 13:01:21 +0000
Manifest this update: Wed 17 Dec 2025 12:56:21 +0000
Manifest next update: Sat 20 Dec 2025 16:40:21 +0000
Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: hNdZ7+vZZ4/BzDc8vHR5mqRM7VW8vwM2OyKhsRhO2ts=)
2: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 16:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:63:72:95:56:74:37:31:1a:4d:2f:26:6b:a1:74:ce:39:3d:1f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Validity
Not Before: Dec 17 12:56:21 2025 GMT
Not After : Dec 20 16:40:21 2025 GMT
Subject: CN=B0401E4AE7F437C403D8E495EAB6BCDE55467A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:87:36:75:e7:0e:c2:2f:75:60:23:b1:e1:
ae:79:97:5e:5c:1e:e1:23:21:9f:e2:21:52:c5:7d:
54:23:c0:eb:45:46:87:d2:dd:e8:56:88:b6:71:69:
8b:68:b7:21:2c:b4:f3:ad:1c:43:1b:d2:b2:f5:9b:
08:c0:57:3a:78:6a:86:fc:51:4a:1f:52:b4:6e:53:
46:99:d8:27:41:7f:10:0c:8f:14:e9:dd:8d:f2:50:
d5:b5:cb:53:cb:fa:74:54:80:23:7f:fc:eb:0b:c9:
4a:23:b2:94:63:7b:3d:18:c8:72:a2:f7:ec:f8:77:
28:26:1d:08:ff:74:55:76:d8:7e:75:18:4f:86:d1:
d8:0b:26:4b:03:49:97:75:b4:12:98:8f:15:23:e2:
87:52:77:4a:3d:91:28:73:6a:5e:67:fe:fa:4b:ce:
ff:fe:a4:ca:e5:11:53:fd:42:bd:9e:f6:cc:ed:fb:
7d:fd:8a:b7:8a:d1:47:dd:86:18:37:e7:d7:b4:56:
e3:b6:7f:44:27:34:45:cb:c5:51:eb:50:fb:9e:b5:
f7:e2:7e:5d:52:d4:f3:fc:5f:2d:76:42:fe:b1:25:
ab:c5:1b:93:20:aa:b7:50:e8:6f:7d:13:f8:80:2d:
89:34:e3:f9:cb:3b:52:e6:bb:cb:f5:c0:00:e9:06:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:40:1E:4A:E7:F4:37:C4:03:D8:E4:95:EA:B6:BC:DE:55:46:7A:3B
X509v3 Authority Key Identifier:
keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:54:32:e4:88:d0:87:b3:ca:81:be:f9:c9:bb:94:77:3e:e7:
69:5b:14:46:44:a2:aa:b8:1f:42:f9:0f:c6:02:09:02:7a:46:
b1:20:d0:df:ba:d5:d5:92:b8:a4:dc:a3:0a:9e:29:ed:97:96:
43:ce:c6:81:40:3a:d9:4c:f5:bc:98:ab:2d:26:5c:71:dd:ff:
7b:56:e1:3a:d6:67:54:bb:78:5e:40:6e:e8:3c:73:85:fc:90:
7d:eb:de:b2:ee:49:18:78:35:6e:cf:bf:2d:1a:41:48:84:77:
58:e9:4f:60:5d:3e:df:78:5d:c8:aa:1e:50:29:46:6c:80:a0:
22:8d:0b:42:eb:c6:e0:12:07:0e:38:33:de:16:3b:dd:cc:e3:
f5:c1:76:0e:67:3e:1d:05:7f:64:62:a3:47:d3:38:ed:da:41:
9e:66:3d:5a:18:ed:0c:45:45:1b:c3:72:d6:87:d6:5a:5e:70:
8c:77:04:4c:f0:a6:a5:97:24:c9:96:df:04:8f:9c:74:65:19:
51:0d:04:d5:6a:75:f1:9c:25:8b:d6:3e:aa:82:d7:23:3d:96:
1b:ad:b4:21:c6:92:2c:d8:e2:9c:58:95:04:32:f4:cd:bb:1f:
44:75:db:68:14:52:86:59:7f:ac:24:ff:42:93:22:6d:1d:47:
78:a9:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:35:13 2025 by rpki-client