This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json)
Hash identifier: 5hwa2WrcROoG/GB2A5NT6ArOkgeMjuh+X1LWNgo6wxQ=
Subject key identifier: 24:82:B0:9B:56:AA:6F:4F:2B:A1:20:2C:83:E8:F5:B8:18:0F:0E:61
Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3
Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3
Certificate serial: 08BF752417F3E3643A2AC2DDFAF1809EC6C09F5A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
Manifest number: 015A
Signing time: Tue 30 Dec 2025 23:42:04 +0000
Manifest this update: Tue 30 Dec 2025 23:37:04 +0000
Manifest next update: Sat 03 Jan 2026 06:22:04 +0000
Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: rCG0oj3Jl/zSw2Sd4y86g0V1bnPQx9b2/6xpWbc8t6o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl
rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 06:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:bf:75:24:17:f3:e3:64:3a:2a:c2:dd:fa:f1:80:9e:c6:c0:9f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3
Validity
Not Before: Dec 30 23:37:04 2025 GMT
Not After : Jan 3 06:22:04 2026 GMT
Subject: CN=2482B09B56AA6F4F2BA1202C83E8F5B8180F0E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:4a:0a:52:6f:6c:d2:59:86:0a:2b:bf:e3:
38:33:f6:b1:fc:ca:1f:17:e6:cc:5b:9c:33:3b:6e:
d6:63:6a:89:e1:d7:ad:8e:cf:fc:01:06:f6:2e:82:
c0:d5:8f:b1:c4:1b:ff:67:a2:d4:48:bf:ad:13:6a:
70:c1:46:9c:c2:fb:a3:ef:62:29:14:49:4c:a0:81:
72:f9:43:05:92:0f:a4:22:c4:5e:9f:52:07:47:8d:
ce:ba:14:e5:a2:19:c3:6b:1b:64:46:0a:86:f7:33:
28:a9:df:6e:3b:be:c8:5b:94:36:ec:1a:40:5a:0a:
f7:f6:85:7f:ab:16:61:9e:81:75:8e:7d:01:56:6d:
b7:b7:a8:50:f4:44:fb:fa:a3:12:a9:ee:e8:bc:cf:
3e:f5:32:5b:61:95:e1:aa:44:70:3c:bf:85:c8:e9:
ac:7b:f3:47:3a:b4:52:a4:9e:13:ef:20:53:9c:12:
85:77:6a:2c:8a:6a:89:cb:ab:09:ce:20:50:55:fa:
12:64:91:64:75:a2:3c:d8:4a:06:63:da:b9:ec:89:
0b:bc:41:fa:9d:78:37:7b:4b:48:49:1b:64:7b:11:
52:73:97:ff:56:ea:ff:e9:40:1f:a4:35:a0:aa:3c:
c5:cc:ed:54:b3:d2:99:f3:05:a9:ec:83:bb:96:55:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:82:B0:9B:56:AA:6F:4F:2B:A1:20:2C:83:E8:F5:B8:18:0F:0E:61
X509v3 Authority Key Identifier:
keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ef:a3:d1:87:08:69:0e:78:f5:19:34:09:1c:2f:fb:d5:94:
6a:69:d6:38:6a:3e:ce:7b:9a:e5:86:d7:1d:34:44:98:35:20:
d6:38:e1:b8:d5:2a:b0:50:a8:93:95:2a:33:d6:0a:cf:4a:bd:
c0:56:3f:e2:d8:87:0a:0b:27:41:11:5e:e8:54:6e:bf:cb:07:
32:36:e9:9c:86:c6:9d:25:e2:7d:35:e5:b9:b8:ec:57:b0:70:
1a:6b:79:04:40:6c:50:00:78:59:fa:28:3f:a8:c4:e0:4d:0f:
92:3a:cd:3b:47:18:84:fd:b0:ba:3e:38:01:eb:8e:4d:b0:93:
bb:51:84:3c:6d:75:a1:b2:c2:d8:ac:6e:a5:38:f6:0f:b5:56:
ef:46:36:f0:47:aa:83:c2:64:39:79:d9:e5:04:00:62:4e:2e:
14:08:23:bc:ce:fc:c1:77:51:13:b5:53:6b:0f:a8:5a:c6:a2:
54:ef:14:32:6f:0a:a1:b2:7e:70:53:51:7c:9c:b9:55:6b:9a:
6a:7c:61:cb:93:20:fe:49:e8:30:f8:48:fd:fd:81:ff:a7:ed:
24:83:1d:ea:c8:ea:63:9d:e4:45:c0:ef:4b:24:0d:0b:5d:e0:
1f:9b:e9:95:2f:28:c2:dc:40:5b:41:28:7c:e1:4e:91:03:3b:
22:d5:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:26:38 2026 by rpki-client