This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json)
Hash identifier: dKCBbYCv/B14RPnB0PsUz5yBM8fh6cOfLj1ga+jvkGM=
Subject key identifier: 95:CB:61:98:4D:92:57:94:65:55:18:30:3F:DD:E1:E1:C5:56:9B:C1
Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76
Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
Certificate serial: 762E947F50EA67334B5FBA3A24D18C4BC2E2D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
Manifest number: 0323
Signing time: Thu 18 Dec 2025 08:01:12 +0000
Manifest this update: Thu 18 Dec 2025 07:56:12 +0000
Manifest next update: Sun 21 Dec 2025 12:37:12 +0000
Files and hashes: 1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: xYrkf3DATHs0l2OkDf+vvwMGGCd7I+981hTjoNErPB4=)
2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl
rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 12:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2e:94:7f:50:ea:67:33:4b:5f:ba:3a:24:d1:8c:4b:c2:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
Validity
Not Before: Dec 18 07:56:12 2025 GMT
Not After : Dec 21 12:37:12 2025 GMT
Subject: CN=95CB61984D925794655518303FDDE1E1C5569BC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:a2:5a:7e:9b:6f:6d:d3:06:b9:a9:91:38:
90:8f:02:04:4c:23:d7:1f:50:fc:10:47:47:4c:b9:
75:80:53:61:11:cd:b2:82:32:d8:0c:75:23:5b:5b:
a3:c5:47:e0:5b:d0:55:50:54:6f:b1:f3:db:e7:89:
47:42:cd:3f:26:2e:64:ae:21:04:a6:04:27:bc:40:
12:ae:4f:45:d3:b7:22:c6:75:4a:ab:80:24:72:f4:
02:02:cd:23:21:97:ab:4c:5e:f0:0d:4c:f4:36:93:
d2:e4:ae:7d:c2:24:7c:3b:74:90:6f:3e:3a:60:8f:
40:5c:bb:66:20:ac:6c:bb:f5:03:dc:51:44:96:09:
10:33:7f:c2:45:b2:74:50:dc:66:a3:72:33:ba:77:
73:f7:47:9f:55:7c:2d:ee:2e:c2:e8:ee:9b:4f:d7:
85:d9:53:c0:c3:50:d7:45:71:a1:1c:ad:dd:73:76:
ae:4d:4d:d0:08:6f:30:3d:d4:aa:bc:05:59:63:83:
4a:75:77:70:7b:6f:66:25:8e:a5:a5:2f:48:65:0e:
42:7c:1a:69:06:5e:a3:b0:a4:ee:d7:43:ff:48:2e:
3f:74:cd:50:2e:7e:64:11:e1:d6:3f:5e:5d:11:0c:
d6:20:ba:ed:41:e2:69:24:a1:54:36:94:73:27:ed:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CB:61:98:4D:92:57:94:65:55:18:30:3F:DD:E1:E1:C5:56:9B:C1
X509v3 Authority Key Identifier:
keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ec:7a:bc:db:99:90:db:3b:91:a0:9c:56:3d:26:e0:b8:52:
ee:72:d1:b6:d5:e3:9c:6f:18:fa:fa:d3:ff:da:8b:7d:b6:6e:
29:eb:de:5a:ab:6e:c9:e9:de:0a:e0:c1:02:ca:59:cd:c2:23:
92:ff:d1:57:73:ea:49:14:42:69:7e:8e:27:82:b3:43:ae:c5:
7d:87:13:f3:b9:50:3f:b9:05:f7:c5:8d:96:cf:50:a8:6b:a3:
c7:79:1b:a8:1d:d6:08:fd:8b:05:01:a7:3d:ee:6d:b3:e4:5f:
1b:49:41:9a:58:94:2c:79:39:80:60:4f:35:48:69:08:c7:db:
29:08:a3:33:49:b0:a7:1b:d2:b4:4d:44:3a:9c:c6:08:95:40:
5e:a6:7c:87:d3:68:86:3b:4c:3b:00:e6:64:36:0c:fc:6b:cd:
75:6c:82:60:02:1a:5d:a2:ad:12:a6:d4:c2:a1:bd:7a:bd:18:
24:92:29:d4:75:32:fe:db:56:ac:b6:4c:7b:a0:7b:fa:3c:82:
e1:98:ed:81:0a:ba:d4:4c:41:da:32:c0:5f:ce:52:12:6d:74:
f7:6e:49:e4:03:42:9b:83:90:1c:1f:e8:e7:35:40:36:ae:a6:
71:37:ae:d9:fa:7a:df:2d:d9:22:6d:d7:df:91:37:6c:4f:3c:
af:28:ab:33
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITdi6Uf1DqZzNLX7o6JNGMS8Li1DANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygyNDdENzA1QUMyRjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1
MUYzRDc2MB4XDTI1MTIxODA3NTYxMloXDTI1MTIyMTEyMzcxMlowMzExMC8GA1UE
AxMoOTVDQjYxOTg0RDkyNTc5NDY1NTUxODMwM0ZEREUxRTFDNTU2OUJDMTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL7Golp+m29t0wa5qZE4kI8CBEwj
1x9Q/BBHR0y5dYBTYRHNsoIy2Ax1I1tbo8VH4FvQVVBUb7Hz2+eJR0LNPyYuZK4h
BKYEJ7xAEq5PRdO3IsZ1SquAJHL0AgLNIyGXq0xe8A1M9DaT0uSufcIkfDt0kG8+
OmCPQFy7ZiCsbLv1A9xRRJYJEDN/wkWydFDcZqNyM7p3c/dHn1V8Le4uwujum0/X
hdlTwMNQ10VxoRyt3XN2rk1N0AhvMD3UqrwFWWODSnV3cHtvZiWOpaUvSGUOQnwa
aQZeo7Ck7tdD/0guP3TNUC5+ZBHh1j9eXREM1iC67UHiaSShVDaUcyftQw0CAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBSVy2GYTZJXlGVVGDA/3eHhxVabwTAfBgNVHSME
GDAWgBQkfXBawvFKdj8+uH4uQRWKJR89djAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0
ODhkNGMwLWRjOTItNGFhOC1iMTY5LTUyY2FiMmE2MWJhMS8wLzI0N0Q3MDVBQzJG
MTRBNzYzRjNFQjg3RTJFNDExNThBMjUxRjNENzYuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi8yNDdENzA1QUMyRjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYz
RDc2LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83NDg4ZDRjMC1kYzkyLTRhYTgtYjE2
OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMyRjE0QTc2M0YzRUI4N0UyRTQxMTU4
QTI1MUYzRDc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAKux6vNuZkNs7kaCcVj0m4LhS7nLRttXjnG8Y
+vrT/9qLfbZuKeveWqtuyeneCuDBAspZzcIjkv/RV3PqSRRCaX6OJ4KzQ67FfYcT
87lQP7kF98WNls9QqGujx3kbqB3WCP2LBQGnPe5ts+RfG0lBmliULHk5gGBPNUhp
CMfbKQijM0mwpxvStE1EOpzGCJVAXqZ8h9NohjtMOwDmZDYM/GvNdWyCYAIaXaKt
EqbUwqG9er0YJJIp1HUy/ttWrLZMe6B7+jyC4ZjtgQq61ExB2jLAX85SEm10925J
5ANCm4OQHB/o5zVANq6mcTeu2fp63y3ZIm3X35E3bE88ryirMw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:51 2025 by rpki-client