This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
File: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft (raw, json)
Hash identifier: d94QY8l7Cv7W/cCmAdUrgROClg6KRgqS37QRvKXEkow=
Subject key identifier: D7:75:B8:2A:A0:4A:DB:75:0A:23:E5:EA:C5:58:6F:B0:EB:8E:E5:92
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Certificate issuer: /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial: 4FD275C2046C3DA2CF768B68DDFC5CB11AABB617
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
Manifest number: 015F
Signing time: Wed 24 Dec 2025 13:55:10 +0000
Manifest this update: Wed 24 Dec 2025 13:50:10 +0000
Manifest next update: Sat 27 Dec 2025 22:35:10 +0000
Files and hashes: 1: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: 3GuMduWTgloUnJZtYU+5K5/Trf+zimiieU09c7Eyrv4=)
2: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: d/xmUChepoOogFc4Soq6uqm5Cedk9W9kH6EQCdLR+3s=)
3: 73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl (hash: pGQpcmfIzes1fb4JnmozZG56bs92C1cHYXipOvJSmTk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl
rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d2:75:c2:04:6c:3d:a2:cf:76:8b:68:dd:fc:5c:b1:1a:ab:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Validity
Not Before: Dec 24 13:50:10 2025 GMT
Not After : Dec 27 22:35:10 2025 GMT
Subject: CN=D775B82AA04ADB750A23E5EAC5586FB0EB8EE592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:d7:d2:c6:43:c6:73:d3:05:f5:04:32:67:
e8:b5:ef:42:f6:4d:30:43:1d:cd:5b:f5:29:0c:03:
60:aa:be:30:03:25:d9:ef:c9:6c:ce:11:31:fa:93:
dc:6c:96:42:6b:4f:d6:88:6e:94:ab:43:5d:bd:59:
dd:d6:2c:c2:48:59:a7:2d:d2:81:dd:ba:ee:d3:60:
40:d9:77:ff:94:4b:9d:04:9b:c5:6a:3f:1e:0e:54:
66:60:1e:88:88:b6:59:df:7b:61:65:15:1c:ea:22:
7f:30:9f:be:32:74:4d:98:32:74:42:f8:56:86:5c:
fa:f2:02:d5:17:d9:3e:e6:5b:04:91:f2:57:9b:8b:
ff:6b:fa:09:8e:eb:4a:30:54:ad:0f:b8:a3:33:16:
96:3a:f2:f3:d1:7a:88:45:a7:e6:06:d6:7d:39:06:
9b:70:f5:7c:5d:bb:2c:a9:98:a4:29:37:fc:12:b6:
63:2c:14:cf:2b:80:1f:e6:23:26:5d:e3:a3:76:84:
31:8c:75:7e:0d:53:5e:0b:80:1b:4c:5b:f5:1a:b7:
8d:b8:b7:20:87:3b:75:c9:11:d2:e2:1a:88:52:7f:
69:aa:8b:f6:b6:62:1f:25:26:92:43:03:b9:38:3a:
4f:cb:be:81:b9:ea:74:7c:08:1c:7f:5a:03:27:80:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:B8:2A:A0:4A:DB:75:0A:23:E5:EA:C5:58:6F:B0:EB:8E:E5:92
X509v3 Authority Key Identifier:
keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bc:bb:5e:6f:ff:97:fe:e8:ba:4b:c3:35:16:f0:b0:fb:8b:
eb:d3:c3:61:f8:eb:af:ef:ba:03:00:c0:08:03:8c:f1:77:e8:
e9:7b:10:ee:6a:40:dc:eb:37:1c:7a:1b:1a:c4:c7:0f:31:0c:
1d:77:9a:c9:d8:45:1c:63:fb:ab:51:96:fa:84:dd:b2:06:97:
48:3a:d8:54:f0:db:77:1c:d2:16:c1:b8:41:3c:1d:6f:03:e0:
c6:d8:93:25:05:31:d8:66:fb:c8:aa:d0:92:08:26:bf:35:d9:
13:cd:a0:eb:3b:98:fc:08:1d:05:e3:88:59:35:1b:5b:c5:61:
29:6b:5b:95:47:a6:21:bd:dd:dd:27:be:8b:f2:fe:c4:12:0e:
fe:fd:d7:7b:7a:98:58:c6:aa:f3:b7:9b:e1:a3:1c:53:e0:31:
a5:1c:4a:05:d4:35:35:81:b3:5c:25:8c:c2:72:23:f1:4a:7f:
46:13:58:03:b7:8c:d5:a4:8b:d6:5d:6f:55:b3:25:5a:19:91:
93:0e:f9:52:e9:13:91:36:aa:cb:62:a4:dd:c9:7d:6c:8f:77:
11:d7:e3:ef:54:d1:b6:2d:11:34:5d:c5:09:04:fa:14:c0:e8:
4f:e2:d7:76:e5:42:44:c1:62:e3:3e:e7:f9:ba:ff:da:5d:f9:
e4:56:7d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:23:48 2025 by rpki-client