This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft
File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json)
Hash identifier: phfA7cZLr0Q9lHaCatCLondCHEAgC7jqfscQKEdbbmo=
Subject key identifier: 9C:1E:AC:C3:3C:ED:0A:D5:10:C2:F8:7D:E7:BB:94:8A:E6:72:DB:2A
Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Certificate serial: 50E18DC265D97FFEFE071E6E4B81CCCFE56AAD38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft
Manifest number: 0202
Signing time: Wed 17 Dec 2025 06:20:40 +0000
Manifest this update: Wed 17 Dec 2025 06:15:40 +0000
Manifest next update: Sat 20 Dec 2025 09:48:40 +0000
Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 6p5qEvuAFNeoYDRPFKQKTOGL6GjveSFUo5E7i4B+rcc=)
2: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: 2JoB7mbv9tAYmXcRzCwfmfmXedXdKD7pozAzOc8mk0g=)
3: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: SlnYn1Xsxz6QRJgIfCp87Ss/ufwey8RAQnlq8kkPrh4=)
4: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: 1nsBEaw//wrX4ku+iY2dL+YEnIUAXJssUcaOeCiGnYs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl
rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 09:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e1:8d:c2:65:d9:7f:fe:fe:07:1e:6e:4b:81:cc:cf:e5:6a:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Validity
Not Before: Dec 17 06:15:40 2025 GMT
Not After : Dec 20 09:48:40 2025 GMT
Subject: CN=9C1EACC33CED0AD510C2F87DE7BB948AE672DB2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:a5:de:21:b6:74:c3:1b:29:97:4d:2f:6e:
15:15:91:ad:75:62:d0:97:a6:56:a1:4c:95:6f:7f:
ce:a1:7a:83:b6:34:3e:d2:04:6e:ad:e6:1a:0d:3a:
08:6f:72:e4:b6:e7:5f:88:32:6c:77:08:e9:3a:04:
30:dd:04:94:ca:c9:ff:4a:1f:d0:86:f3:8d:0b:d9:
c5:b1:5a:3c:11:9a:4d:cb:da:a4:f6:89:09:01:ef:
fe:d3:4c:84:22:31:20:0b:04:37:37:00:28:24:e7:
fd:89:08:76:97:67:1b:38:7e:f1:89:77:b3:10:a8:
73:fc:df:c9:32:ac:cb:3f:15:bf:4a:f0:9e:57:2b:
50:ec:b2:aa:4e:3d:d7:63:3c:4d:f6:bd:3d:c5:1a:
36:7d:8a:25:fd:1a:d7:e3:08:33:0e:dc:e7:15:8f:
b7:2a:e3:0a:3a:be:fd:4e:d7:2b:a4:85:80:09:af:
c9:e0:28:92:4e:ff:cb:19:0f:4b:2a:74:42:a9:8c:
7a:31:4f:bc:2b:c6:f4:d9:ac:2b:d8:79:1b:cf:72:
a5:ba:a7:12:65:19:6a:f5:e4:7a:55:ed:ba:2d:21:
17:21:e4:82:88:8d:15:74:ee:43:91:33:a3:23:78:
d7:19:01:6e:28:d7:d6:9b:0f:fb:46:5f:44:a9:68:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1E:AC:C3:3C:ED:0A:D5:10:C2:F8:7D:E7:BB:94:8A:E6:72:DB:2A
X509v3 Authority Key Identifier:
keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:51:b0:71:67:98:45:73:44:58:83:5b:6b:3d:35:ab:71:08:
26:37:ed:b5:16:15:e8:c3:b3:e9:9e:8e:78:a0:94:07:a5:82:
ab:7e:8e:48:55:57:2f:de:0c:d9:f7:4d:c3:4b:6d:4d:3a:86:
1a:97:1c:2f:5b:42:98:4f:ca:a3:dd:99:35:f5:30:3a:9b:0e:
78:64:1b:4b:8b:f5:be:88:e2:14:6c:d7:74:3f:84:af:94:0b:
32:82:37:10:07:d1:71:6d:2e:54:a2:da:bd:1a:53:4b:d3:b5:
86:1f:7d:77:00:a1:db:93:44:3a:0a:ce:1b:57:ac:d1:79:ce:
f6:b2:12:d5:be:4b:9b:cb:ea:cc:4f:43:5c:01:4e:7f:ac:0e:
74:4c:41:57:9b:17:72:d2:d4:1a:62:17:b4:88:d4:3e:15:77:
30:0d:6d:a8:70:b2:c2:e9:4d:52:25:3f:f9:11:99:53:a2:38:
76:69:ef:1d:50:4a:1b:81:3c:ed:c8:e3:95:5b:2d:32:5f:ef:
4b:d7:7d:59:38:59:fb:08:e4:08:e0:68:cf:e3:0c:53:19:15:
9f:5b:ec:e1:03:46:27:68:d2:6a:f0:00:58:9c:f5:47:0e:50:
94:4c:ac:d6:5a:d9:4c:74:24:67:3c:28:30:1f:3a:fb:6f:ff:
d9:b0:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:33:14 2025 by rpki-client