This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json)
Hash identifier: nyE1NdQV4Q8qIzRLxtM3ikIHzLDtblvPSAJScEV2Ne0=
Subject key identifier: 56:E1:4D:A9:48:90:E1:AC:2E:E7:7E:4C:27:13:FA:7B:0B:CB:2A:AC
Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62
Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162
Certificate serial: 6C52ED228F5AE6247130F9DCE7D5BF4EB8418D26
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
Manifest number: 0270
Signing time: Sat 27 Dec 2025 09:41:47 +0000
Manifest this update: Sat 27 Dec 2025 09:36:47 +0000
Manifest next update: Tue 30 Dec 2025 15:52:47 +0000
Files and hashes: 1: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: tgk3NoI7Yl9Wh8OuLguFYhMn+bQWgfMhzVajW1+V2GA=)
2: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: RncwsLb9fYCkcAtKhiCdd/3JiiqGlggaf4ioOg3mqOk=)
3: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: 0zeOMcJLti5PO9rOACuwXhf403LkxSHV9NKFjogohdU=)
4: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=)
5: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=)
6: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl
rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 11:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:52:ed:22:8f:5a:e6:24:71:30:f9:dc:e7:d5:bf:4e:b8:41:8d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162
Validity
Not Before: Dec 27 09:36:47 2025 GMT
Not After : Dec 30 15:52:47 2025 GMT
Subject: CN=56E14DA94890E1AC2EE77E4C2713FA7B0BCB2AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:42:2a:c5:a4:32:fa:a7:1a:c6:3d:b6:cb:
6f:f8:be:37:69:ca:7a:63:db:5c:24:cd:ca:a9:cb:
4a:a1:02:3f:10:ec:aa:9a:f8:3f:6a:09:c4:ed:5a:
4d:df:23:9b:5e:82:fe:98:b8:c2:03:6c:aa:6a:97:
72:e7:04:b2:74:13:ad:27:5b:26:2a:71:02:f5:11:
66:08:af:1c:be:02:8d:58:ff:b3:f1:1e:69:44:9b:
37:4f:27:b2:3c:28:e9:f8:68:b4:18:b1:ef:c7:72:
eb:5e:c6:9d:34:9d:e5:99:d0:ab:eb:44:53:e4:c8:
c1:fb:2c:e8:32:10:f9:94:be:21:fb:a8:c5:9e:0f:
eb:89:9a:66:2a:7f:1f:66:c7:ab:52:46:a4:fe:36:
bc:55:6f:64:a1:79:20:0e:23:98:52:e0:85:ce:ef:
30:71:4e:59:5a:18:7b:da:9c:bd:22:9a:22:e2:08:
25:a0:b5:bb:65:e8:c6:ec:ac:c1:82:dd:12:ed:dd:
7c:17:fc:c2:60:75:cd:b2:32:02:8f:ae:e8:a3:db:
7f:73:da:17:3d:85:cc:8e:6d:0a:bd:45:49:c0:ab:
9e:17:42:aa:03:de:6c:7b:4a:5c:97:2d:dd:40:5c:
68:6e:95:09:80:0e:e2:cb:86:74:e0:a5:48:2a:09:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E1:4D:A9:48:90:E1:AC:2E:E7:7E:4C:27:13:FA:7B:0B:CB:2A:AC
X509v3 Authority Key Identifier:
keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:15:99:3d:d2:e9:51:80:b1:9d:4f:4c:d7:4b:2e:be:8c:39:
39:80:73:77:fb:1e:e3:ad:21:c3:e7:37:b3:13:22:89:04:03:
5b:3b:d2:bd:69:9c:02:d1:a8:7f:3a:9d:05:4b:1c:f1:d0:41:
69:ec:60:88:64:c2:90:b9:55:b8:fa:ef:de:a2:ab:53:e7:b0:
db:07:c2:00:3e:52:cc:44:fe:22:14:86:f9:ac:67:11:98:06:
33:41:03:89:fd:0e:b9:d4:93:cb:6c:71:a8:bb:de:c3:2a:1a:
ac:bb:b7:2e:e8:09:b1:b1:19:3e:e7:0b:d8:00:ba:20:11:ef:
43:6e:97:fb:45:c7:c8:cc:bb:02:69:c2:45:7b:1c:a5:6a:53:
2d:d8:2a:9a:d7:33:6d:d2:fb:3a:5e:88:b1:7b:2c:61:3c:b8:
9a:4c:a1:f2:2e:69:13:55:27:76:04:31:7f:5c:3a:cd:6a:23:
c8:e2:8b:c3:dd:29:ae:de:38:06:5f:41:90:c4:cf:99:4c:bc:
7e:3d:c1:a5:98:a2:d7:be:13:1d:1e:5a:cb:24:ae:30:42:2a:
d3:41:6a:47:1a:1e:96:65:4e:5d:a0:c4:8c:d8:6a:d1:75:ad:
42:b4:b5:4a:1a:68:8d:42:0f:c3:86:bf:da:b3:03:c4:61:4e:
dd:85:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:26:54 2025 by rpki-client