This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json)
Hash identifier: gqziVXlhs9MMgeXEPriju6eLJCk41iDDKwa6Y5Ujq1U=
Subject key identifier: AB:57:BE:35:F4:1E:FE:56:02:F2:D0:3F:5E:CA:F3:B4:5D:3A:EB:EF
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial: 142978BA5B1199AE3C0AF5F0D6115030D3B95922
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
Manifest number: 0304
Signing time: Fri 19 Dec 2025 19:32:28 +0000
Manifest this update: Fri 19 Dec 2025 19:27:28 +0000
Manifest next update: Tue 23 Dec 2025 03:08:28 +0000
Files and hashes: 1: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: J1gnSLBfCZBrd91Vdx8NyhGLMhQuK01fEwQ/Mx+YRIk=)
2: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=)
3: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=)
4: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=)
5: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=)
6: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=)
7: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=)
8: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 00:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:29:78:ba:5b:11:99:ae:3c:0a:f5:f0:d6:11:50:30:d3:b9:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Validity
Not Before: Dec 19 19:27:28 2025 GMT
Not After : Dec 23 03:08:28 2025 GMT
Subject: CN=AB57BE35F41EFE5602F2D03F5ECAF3B45D3AEBEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:b5:64:50:ad:a9:6f:38:7e:06:ce:b1:ae:
f0:e9:ee:f6:bc:4a:b8:77:83:1d:4e:06:f5:e8:ff:
3a:1d:24:3a:5b:43:97:24:67:3e:98:f1:5e:db:2c:
01:d5:67:d0:04:a7:7e:39:6e:b5:87:e9:be:24:57:
52:1c:0a:79:bf:78:e4:05:84:1b:2a:6c:f2:ed:32:
6d:7c:d5:8c:c8:84:ab:47:31:d3:e7:ed:4b:d5:14:
02:a5:3d:9f:6b:00:ec:b3:22:ba:14:ae:56:cb:8f:
6b:28:c3:44:7c:04:a6:a2:64:b1:68:f2:14:b5:33:
ec:3e:e3:fb:52:3e:96:dc:09:af:6c:99:0b:37:35:
d1:53:3c:fc:b4:a1:a4:19:78:b6:9e:fc:c9:c2:6e:
96:78:66:24:9d:43:38:18:a5:e4:57:0b:2e:be:a3:
25:8b:b6:aa:6f:71:b2:43:7f:68:1e:a2:67:6c:f4:
b6:c6:53:8a:e2:22:6a:12:6b:75:5b:40:ab:02:94:
80:0f:a2:bd:1e:e3:da:32:49:bc:75:73:fa:9f:72:
66:d7:79:49:85:9a:b0:ab:8c:08:33:de:8a:a5:0b:
08:b9:b8:9a:b8:0a:36:c0:0d:f5:8c:ea:ad:fd:81:
c1:87:d8:a4:7e:f9:93:47:9e:bb:b2:30:8b:27:32:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:57:BE:35:F4:1E:FE:56:02:F2:D0:3F:5E:CA:F3:B4:5D:3A:EB:EF
X509v3 Authority Key Identifier:
keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:03:9e:78:95:7a:53:f6:0d:53:6b:6b:48:82:14:b0:29:ed:
92:36:0d:71:d3:cc:34:db:71:e0:b4:a2:e8:47:7a:d5:53:16:
8e:e1:1d:b2:aa:10:72:67:08:1d:3b:64:fe:3c:fe:5a:4a:c1:
9e:fc:af:d9:60:6a:c9:d1:8e:38:8a:aa:35:05:11:56:c1:3a:
c2:d1:09:57:03:d1:85:e2:d5:39:28:8b:74:e7:da:bc:a8:23:
10:4f:59:ef:42:19:07:b6:a0:7b:5c:be:f6:d8:9f:24:0d:fb:
4e:ee:17:d5:8f:ab:e6:f9:aa:69:07:3f:6d:b9:40:5f:40:3c:
88:77:3d:b7:6a:7d:49:da:d1:f6:86:3b:e2:fe:74:2d:e3:08:
49:76:e7:36:38:0c:b0:1e:6c:9a:dd:24:f2:b1:c2:55:20:52:
16:66:a4:84:09:b3:bb:7d:ce:4f:b8:fc:93:98:1a:d5:a0:f9:
8e:0a:88:83:42:b4:fb:d6:aa:92:ed:ed:c5:65:e8:35:8a:71:
5e:18:3d:cf:24:46:52:2f:18:e1:1e:e3:de:0e:c3:ff:fc:b6:
c0:b6:7a:4d:93:f6:a6:55:5a:a1:6d:e8:64:87:db:8f:a5:08:
eb:8f:dd:5e:6d:63:6a:ed:f2:9f:1d:14:0d:1b:71:8e:37:e9:
0c:35:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:18:59 2025 by rpki-client