This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft
File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json)
Hash identifier: hWsY1zf/W4t0Av5WYzb24i/Fk/gDkctDn1+7csIOZuU=
Subject key identifier: 97:7F:6B:03:90:32:8D:54:7E:F6:B1:56:B9:49:08:FA:C9:64:81:66
Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25
Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325
Certificate serial: 4620599953F4E228193200CED0DE936E207E24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft
Manifest number: 9D
Signing time: Thu 25 Dec 2025 08:12:03 +0000
Manifest this update: Thu 25 Dec 2025 08:07:03 +0000
Manifest next update: Sun 28 Dec 2025 11:34:03 +0000
Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: fAdz5hlnFeUkaqY0iqFjrd7DEjhcYNehSdiYr0J17/s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl
rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 11:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:20:59:99:53:f4:e2:28:19:32:00:ce:d0:de:93:6e:20:7e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325
Validity
Not Before: Dec 25 08:07:03 2025 GMT
Not After : Dec 28 11:34:03 2025 GMT
Subject: CN=977F6B0390328D547EF6B156B94908FAC9648166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:20:7a:cb:2b:d2:90:30:a9:42:ae:54:c5:
37:79:7f:c6:cc:a2:59:19:c1:ea:ad:87:eb:2f:6d:
a0:1a:65:d7:0d:98:82:a2:6b:35:a3:be:d6:d6:1f:
8c:25:fe:0f:86:95:2c:b5:9e:2f:ae:23:d9:ab:e8:
ca:3c:b3:5a:8a:ba:47:67:a0:8e:fa:38:93:44:41:
6e:37:d7:42:72:21:ee:7c:9f:dd:f8:bd:4f:26:89:
0f:60:d3:c2:13:e3:42:28:d3:d6:21:48:9f:46:bc:
37:c8:b0:0c:a7:71:0e:a8:23:e0:51:25:55:be:c8:
03:78:c3:07:ad:0e:f5:d6:92:2b:49:f4:40:3f:bb:
c5:c2:4f:f4:ca:65:5c:54:ab:71:ed:c2:3d:45:3f:
7f:e3:b7:d7:3f:0a:74:00:28:74:be:e6:8c:94:ed:
c5:74:47:dd:95:54:85:e3:da:2a:2a:32:c4:64:a3:
3d:8a:05:76:2a:c5:92:b2:cf:a4:7b:c6:2a:e4:a1:
c3:3e:43:05:8d:2a:e2:84:26:a6:4c:8e:f8:ca:35:
d4:4b:58:43:7f:80:5a:2a:52:2d:7f:0d:c5:37:5e:
b7:a2:19:d9:66:4f:be:8e:df:f7:33:b6:2b:b2:4f:
f6:b0:c6:44:28:78:5e:9b:05:19:74:b8:7b:07:c4:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:6B:03:90:32:8D:54:7E:F6:B1:56:B9:49:08:FA:C9:64:81:66
X509v3 Authority Key Identifier:
keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:79:13:01:51:f2:27:d2:49:25:81:17:48:f8:dd:1c:05:9c:
1c:b6:6b:ea:ad:77:71:e4:45:a6:9c:73:46:66:e7:d3:db:fa:
2a:81:d3:05:0e:69:dd:36:1b:5c:1b:3b:9b:2b:66:c8:36:63:
27:e9:3a:05:b0:41:c2:a6:4a:65:71:16:a0:bd:81:fd:ea:67:
e5:5f:2c:fa:5d:7f:88:7f:9f:48:93:d1:6c:43:a6:88:06:65:
71:88:20:80:6e:3d:5d:fc:68:62:f7:2e:31:d4:8d:8b:36:fd:
0b:51:f3:92:47:34:b0:b2:15:51:6f:34:b9:6a:2b:75:d0:9e:
01:1f:38:40:42:1d:db:bd:fa:21:ff:e3:fd:55:65:19:c8:3b:
e9:3c:c4:55:d5:67:7e:84:2a:5f:b9:34:1f:09:d2:93:51:d1:
68:61:9d:95:98:08:9d:30:44:e1:f3:43:34:41:dd:5f:e0:a7:
0b:68:f7:3f:4c:1c:18:2a:b5:10:e2:40:30:8e:9a:16:ed:08:
ac:21:42:6e:fa:ae:20:36:3d:dd:37:fc:36:4c:c6:3f:01:e2:
9e:67:81:0e:52:a7:18:5a:be:48:f6:fb:89:f1:9f:f8:47:92:
db:af:57:5f:04:9d:f8:66:1e:fc:b9:f0:eb:ad:f4:da:8f:f5:
f3:85:7c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:01:30 2025 by rpki-client