This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
File: C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json)
Hash identifier: EAOh0lKfWgrNatptXJJJFCqfMICzOM9ZKEtmBjRQ47U=
Subject key identifier: B2:B5:BF:8B:22:5B:A7:6E:2A:D0:E7:03:1A:9D:95:3E:D0:A7:16:6D
Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
Certificate issuer: /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Certificate serial: 62456DFABAF5C21F2DCF1ACF9C3338D124EE8BC1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
Manifest number: ED
Signing time: Wed 17 Dec 2025 08:41:39 +0000
Manifest this update: Wed 17 Dec 2025 08:36:39 +0000
Manifest next update: Sat 20 Dec 2025 15:55:39 +0000
Files and hashes: 1: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: BaCudbD3tkteInBr/eTN2YBHR3RHaADfGbYYTJlsV+A=)
2: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 09:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:45:6d:fa:ba:f5:c2:1f:2d:cf:1a:cf:9c:33:38:d1:24:ee:8b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Validity
Not Before: Dec 17 08:36:39 2025 GMT
Not After : Dec 20 15:55:39 2025 GMT
Subject: CN=B2B5BF8B225BA76E2AD0E7031A9D953ED0A7166D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:21:e2:a5:bf:ab:67:fe:53:24:58:51:8f:ba:
91:c2:d4:b3:1f:93:19:c9:cc:a5:5d:e1:bf:7c:36:
4d:69:27:af:3f:af:3f:3a:0e:a8:64:38:9f:c2:8c:
46:67:53:5c:1d:39:84:2e:d6:10:03:7d:2b:6a:67:
38:89:73:5f:09:38:81:ae:3c:c2:f5:24:3a:41:77:
31:59:11:e0:59:21:7e:a5:d5:06:9f:7e:5f:0b:db:
87:49:db:f7:99:a9:95:8f:65:52:3d:2f:2f:99:52:
cd:0c:e6:fa:c0:97:10:9b:7c:98:8f:c2:32:df:35:
db:83:ae:9d:d7:bc:36:17:4e:2b:24:b8:f9:db:0b:
c9:df:9b:4e:6f:73:c6:e8:d0:cc:45:a7:ac:89:57:
43:dd:c1:ae:f3:01:2d:f1:bd:b7:c3:fc:4d:b8:91:
3d:19:00:6e:8d:bc:8a:6e:99:7e:1c:7e:4c:8a:eb:
ad:59:c7:28:4a:01:b4:41:0f:f6:09:45:46:59:17:
5a:6a:4d:82:ff:95:86:13:7d:53:52:56:2c:72:8d:
37:d9:9a:f8:6a:b2:bb:8f:4c:fd:fd:df:6e:30:c0:
8b:c3:7d:38:4a:ee:be:8c:b8:29:f6:7a:a7:8e:c4:
a6:6f:85:1c:6e:62:a4:f4:90:97:4b:2e:e7:96:51:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B5:BF:8B:22:5B:A7:6E:2A:D0:E7:03:1A:9D:95:3E:D0:A7:16:6D
X509v3 Authority Key Identifier:
keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b8:73:65:66:ac:62:89:92:22:d0:b2:7d:52:34:83:4f:a9:
43:01:82:7e:21:a7:5d:4e:94:d3:5e:07:0f:ba:a4:de:32:47:
58:0c:e9:f6:d7:c9:81:b4:88:80:74:6c:45:f2:e2:72:7d:e8:
8c:66:22:1b:e6:92:e4:fa:21:b2:dd:5c:a7:37:59:74:e7:f9:
27:3d:1a:67:fc:1c:ee:1f:cb:97:f7:38:f6:ec:c2:61:34:08:
0a:e4:6d:bb:5a:cf:5e:bc:7d:bd:28:0d:75:57:d2:7f:1f:a5:
2f:11:89:7a:64:83:7c:d5:c2:c3:7f:ec:b1:2e:95:68:53:98:
67:1d:a2:96:6a:78:6a:c7:d6:3e:ae:7a:3a:c5:05:45:18:cf:
55:82:4f:86:fc:e3:e5:6b:85:9e:1a:e1:dc:46:c5:b8:87:05:
91:59:c9:77:6f:be:fe:5e:78:b5:72:e1:fb:4c:84:ab:86:d9:
4f:fb:84:1f:bf:c7:a2:2f:e7:b0:5a:ba:a1:f0:08:2a:4b:3a:
89:9e:ee:82:e7:d1:f9:fb:53:d6:81:c7:43:e3:ef:90:a2:a8:
fe:62:43:24:db:65:d1:98:4c:2d:a5:06:2f:6d:97:89:ac:e8:
c0:f7:19:0f:1b:8e:67:af:5d:cc:8b:0d:e2:b4:20:c7:37:2b:
ba:5f:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:02:33 2025 by rpki-client