This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
File: ED4F41D4EBE684D523406475FAB471CE1B24E360.mft (raw, json)
Hash identifier: jfuBeSfBtIm2I3zMJy492fuKYjYqvXyej1UegfmafZ8=
Subject key identifier: 3C:9A:0C:72:C0:25:7B:46:ED:C6:E2:04:A4:A7:4E:BD:FD:30:A5:A9
Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
Certificate issuer: /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Certificate serial: 17BF2AF6AFA8D0AE6A2D4820B82BD3CEE23B54DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
Manifest number: 01D9
Signing time: Wed 17 Dec 2025 09:10:43 +0000
Manifest this update: Wed 17 Dec 2025 09:05:43 +0000
Manifest next update: Sat 20 Dec 2025 15:18:43 +0000
Files and hashes: 1: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: 0zElYS8pYAdAq2zXe+2YefY+xTaQBq2KFhrk8AH5DcA=)
2: ED4F41D4EBE684D523406475FAB471CE1B24E360.crl (hash: 3pe7OWZAWTEVH73tmkNyqeyoKZ8o64NgE6U23mcU4uU=)
3: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: BXp0DiStVhZuRg84lCtQ4q7ZgVrjo+zScqcIWL6/IJE=)
4: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: a+I06nP5b+sG7uombRaO/A9VFiWnda28578PbtlGH3U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl
rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 15:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:bf:2a:f6:af:a8:d0:ae:6a:2d:48:20:b8:2b:d3:ce:e2:3b:54:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Validity
Not Before: Dec 17 09:05:43 2025 GMT
Not After : Dec 20 15:18:43 2025 GMT
Subject: CN=3C9A0C72C0257B46EDC6E204A4A74EBDFD30A5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:5a:0e:c7:7a:a6:c7:d4:e3:70:09:a1:29:
c1:b1:a4:22:8f:c8:6c:ec:50:39:84:b9:48:11:a2:
da:a2:fd:2c:8d:a2:e5:2a:3a:9d:fb:bc:1b:04:d2:
67:57:cf:c7:30:24:c8:e1:fa:65:10:bd:e1:f5:6a:
44:3a:94:aa:86:3b:d3:20:a9:90:34:1d:aa:18:12:
75:fb:f6:62:f3:bf:66:94:9e:0f:b3:66:e1:17:d1:
a9:17:6c:0d:71:f3:da:e1:fb:76:d4:18:b7:fe:1f:
53:84:72:8a:e4:a8:60:58:83:ac:32:2e:df:2f:aa:
6c:3d:bd:87:c9:cb:ff:b9:0a:0a:dc:8a:93:40:95:
02:12:ba:4c:3c:b2:f5:4d:19:bb:55:71:e4:2e:e3:
33:6a:d6:99:80:63:e5:c3:10:6b:d5:55:f5:67:ab:
ea:0b:3b:e5:89:65:02:c0:aa:37:57:b8:69:fb:a9:
86:65:df:f4:14:c4:ff:52:02:c6:c4:24:8e:82:d4:
b2:fe:0a:ce:ba:5c:ea:6b:f4:0b:c9:50:1a:94:bb:
50:d8:64:41:38:d2:95:03:82:ad:3e:27:86:21:7e:
e3:e0:6a:e6:a3:2b:20:3b:8a:82:73:60:26:dc:8f:
f1:cf:66:43:ae:c5:6c:df:fb:df:a5:77:10:3b:41:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:0C:72:C0:25:7B:46:ED:C6:E2:04:A4:A7:4E:BD:FD:30:A5:A9
X509v3 Authority Key Identifier:
keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cb:8c:e2:99:9b:45:73:52:15:6a:96:96:01:23:79:b7:7f:
ab:40:2e:2b:4f:49:86:0f:92:4f:24:9d:59:cf:32:f0:64:55:
e2:43:7f:0e:81:56:27:63:21:d7:f0:8d:a9:a8:13:69:81:05:
92:52:1a:23:df:c9:8f:9d:37:c5:3d:0c:1a:a1:2f:b5:bb:7d:
94:7c:60:bc:fe:c6:8c:93:ae:10:38:4a:46:c4:93:19:ea:5d:
c0:f4:35:4a:e5:e9:ee:69:d6:73:cf:ab:8e:ad:3c:99:95:b5:
6a:79:23:2a:7d:86:a8:a3:1e:47:ba:2b:89:1e:ae:3c:fa:4b:
da:e3:96:e9:4a:c1:e4:18:3a:a1:b3:ac:41:29:4c:a5:e2:16:
2c:f9:a2:dc:2b:38:a2:fe:f4:2d:13:a4:72:bc:8a:0c:5a:03:
3c:5d:1e:14:8f:74:27:40:1d:0f:ce:8c:cc:98:1c:51:6b:e0:
3e:ff:d7:bc:86:5d:2a:38:25:2f:62:ac:bf:09:fc:09:57:e3:
f3:5d:56:d3:0f:4d:26:f9:bf:d6:57:9e:a8:2e:38:32:94:ab:
a1:d3:bd:01:ff:6c:3f:f4:1e:b5:e6:40:7f:54:4e:8d:2d:6c:
03:b3:37:f7:5f:3e:45:66:d0:bd:d6:0d:76:61:22:64:66:b8:
7a:ea:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:20:36 2025 by rpki-client