This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft
File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json)
Hash identifier: vyvSb4xyuo30ujO1itHQX8HCeIqFJWDobHTJdgHntyU=
Subject key identifier: 1D:AF:63:99:9B:23:10:74:DB:DD:45:B1:53:19:1D:09:36:49:6A:A5
Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73
Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873
Certificate serial: 32ACF74CD7D8C7265008E9755B543E1A9E8ED8F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft
Manifest number: 0292
Signing time: Thu 18 Dec 2025 18:33:12 +0000
Manifest this update: Thu 18 Dec 2025 18:28:12 +0000
Manifest next update: Sun 21 Dec 2025 18:44:12 +0000
Files and hashes: 1: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 3b02tyVyXZeMs6y0uPPq0P29J4NxhIV9FAqBTSQpOwg=)
2: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: T+KmiAjOHuO1fvKW69Aa1qQW8z7UbCnwZHsdS5esD/c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl
rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 18:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ac:f7:4c:d7:d8:c7:26:50:08:e9:75:5b:54:3e:1a:9e:8e:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873
Validity
Not Before: Dec 18 18:28:12 2025 GMT
Not After : Dec 21 18:44:12 2025 GMT
Subject: CN=1DAF63999B231074DBDD45B153191D0936496AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:d9:1e:61:97:f5:17:fa:64:97:9f:c2:fd:
b1:90:92:37:29:68:21:96:40:58:31:3e:8a:6d:9e:
75:42:a2:dc:98:49:f1:d8:96:14:a1:db:27:d4:f9:
47:b5:97:40:73:22:86:6b:0e:2c:ac:ab:c3:a1:69:
eb:16:4e:b2:e5:1c:01:fb:38:a4:3a:33:02:43:67:
e4:ea:11:26:89:77:1f:e3:c5:80:f5:fb:81:b8:14:
c0:d8:b5:cf:b5:23:3d:e2:ce:48:0e:fc:a9:94:27:
37:b4:0c:4d:61:61:fd:35:e8:75:00:0c:45:a7:ac:
48:31:44:90:cb:4f:be:78:25:e2:5f:14:b8:d0:4f:
bc:a1:23:45:74:b7:37:c0:21:80:6e:51:e6:f0:c2:
d6:c2:f3:96:14:6a:81:27:f9:f9:c0:19:b8:9a:f1:
06:05:48:4d:10:41:36:38:52:03:2d:73:66:26:df:
b1:de:89:de:62:e9:36:dc:02:4d:ad:d6:ba:b3:c4:
b6:ef:a4:b0:c5:c9:8f:60:50:25:33:93:e5:b9:78:
ca:b9:d7:07:15:ce:24:fb:e1:7c:d7:c0:c9:3c:23:
9e:05:4e:e1:4f:03:0c:23:24:8c:66:aa:4c:b4:f3:
7c:82:97:b1:8e:62:f5:9c:b3:98:7e:94:a4:cd:35:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AF:63:99:9B:23:10:74:DB:DD:45:B1:53:19:1D:09:36:49:6A:A5
X509v3 Authority Key Identifier:
keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e7:91:c2:85:05:67:5a:21:5c:4b:27:fa:ee:f2:40:13:a7:
c9:ec:2c:b1:87:47:bd:c7:fe:2f:6a:48:3c:75:48:f1:4f:7f:
32:ad:97:d1:cf:90:d4:e6:3e:6f:98:3b:fa:aa:9a:bb:68:ef:
dc:b5:07:d3:1b:58:3a:ab:1d:49:ef:24:50:29:64:2b:cb:21:
df:34:7a:bd:9f:a7:e1:b3:60:20:4e:40:26:30:96:29:9d:58:
8f:6f:4a:eb:4b:60:74:a8:11:1f:77:db:25:58:c2:9a:45:9b:
c1:ff:ad:05:41:49:32:94:d4:6b:36:32:92:0a:19:11:ab:2e:
73:77:67:eb:5e:82:05:6e:92:08:01:b9:3c:c7:c9:29:d9:bb:
32:9b:4a:18:0a:c0:5f:e9:a9:8e:8d:2d:a6:54:2c:83:4f:77:
4b:d6:4d:f6:d3:db:b9:a0:71:b9:c2:4b:8a:bf:ab:61:b2:58:
06:03:c0:86:ea:78:ec:a5:e5:4a:4e:3e:bb:23:f3:41:ce:0c:
f3:eb:2a:07:2d:e6:83:a6:76:6e:7c:8d:a0:d8:a6:ff:b0:6c:
f7:9f:79:ee:fa:c6:de:cd:8a:77:2b:02:22:c5:21:16:14:e6:
b0:2d:61:93:67:03:1e:40:ed:b4:fe:a0:43:af:49:a2:46:34:
d0:4c:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:33:09 2025 by rpki-client