This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
File: 8137472FE4C7D48501352601D84D624E0EC41C19.mft (raw, json)
Hash identifier: WPqbH5Tf2V3ehYm+rxjpIHMdhiZWCw4i0hh8r4DxgXY=
Subject key identifier: 78:C0:F5:3D:92:7F:BD:23:95:EF:7A:9D:99:BE:D3:32:C0:47:A5:01
Authority key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
Certificate issuer: /CN=8137472FE4C7D48501352601D84D624E0EC41C19
Certificate serial: 70CC03664C84CB10334986FA6CD64E2347EC2874
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
Manifest number: D4
Signing time: Tue 30 Dec 2025 05:20:47 +0000
Manifest this update: Tue 30 Dec 2025 05:15:47 +0000
Manifest next update: Fri 02 Jan 2026 13:35:47 +0000
Files and hashes: 1: 8137472FE4C7D48501352601D84D624E0EC41C19.crl (hash: 4HYR2UtaiLMTbAaaJyBiYEUlFNH971jXpWRj3w+fbO0=)
2: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: 2gWgTQ4Z+tGyRrEoZsoKq4rQS9QUc5mKoFU6ARsUw8Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl
rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 13:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cc:03:66:4c:84:cb:10:33:49:86:fa:6c:d6:4e:23:47:ec:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8137472FE4C7D48501352601D84D624E0EC41C19
Validity
Not Before: Dec 30 05:15:47 2025 GMT
Not After : Jan 2 13:35:47 2026 GMT
Subject: CN=78C0F53D927FBD2395EF7A9D99BED332C047A501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:16:c0:aa:80:32:44:bc:52:e4:9e:c9:d2:
e2:64:c1:4a:7c:a7:ad:fc:f9:f8:bc:6c:8e:d9:23:
f8:9e:2d:8e:af:17:6f:43:9d:9a:c3:f1:b1:16:41:
36:e2:b6:08:74:fe:e8:26:e8:48:4c:11:56:36:b7:
f2:69:94:f0:3c:8e:7c:62:18:1d:cc:9c:ef:86:5f:
32:51:0e:72:46:89:fa:b2:ff:7f:59:4d:54:bb:6d:
de:c0:bd:da:69:6e:b2:e7:df:50:68:f1:35:37:96:
64:75:d0:e6:9b:30:04:c2:c0:72:a1:d2:db:ff:43:
f5:24:3a:7b:a6:95:d1:72:9a:8a:07:bb:14:b0:ab:
35:3a:09:64:a5:88:06:8e:47:c9:4d:56:89:a9:b9:
4f:41:01:78:e1:a7:e9:dd:b5:16:88:bd:da:98:b8:
b1:cf:e6:16:91:10:1e:4e:5f:b0:27:8f:e9:9e:ae:
9d:f7:45:92:95:83:4d:e4:02:89:d0:08:c7:46:05:
27:fb:f7:c5:72:3f:a8:ef:a5:8f:48:19:53:12:59:
ce:8f:fb:4d:28:a2:8f:d9:09:cc:a2:cc:f8:9c:62:
c7:77:80:03:33:6a:39:af:e2:31:e5:65:7e:5f:10:
6b:10:d2:5a:c3:3c:31:4e:56:70:b3:47:f2:a9:09:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:F5:3D:92:7F:BD:23:95:EF:7A:9D:99:BE:D3:32:C0:47:A5:01
X509v3 Authority Key Identifier:
keyid:81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:2a:4d:b0:57:1f:d1:51:e4:00:61:62:b3:46:5c:54:1b:
61:af:e1:67:fa:41:bc:b1:c9:19:83:2b:75:fd:d3:67:be:ca:
11:41:88:61:19:eb:8b:ff:e8:a1:3f:d9:7b:e8:27:c8:c7:d6:
92:16:8e:2e:e7:18:68:a1:3b:33:8c:58:8f:66:e7:64:68:65:
84:6f:bc:30:a4:57:d5:fa:f0:e1:4b:1a:91:e0:2c:af:73:a9:
c9:1c:3b:59:7e:c2:db:2e:c6:a1:5b:90:9f:22:58:d9:ff:d9:
6c:ad:fd:72:cb:21:ea:22:29:54:4e:42:29:85:2c:47:22:77:
f4:ee:50:37:01:e5:6d:41:93:2b:2c:ef:84:b7:76:53:4b:88:
47:ea:6b:2c:c4:f5:4d:d6:53:a5:dc:41:e6:4b:83:85:74:a4:
73:c1:57:5c:c1:5c:c2:dd:82:99:24:2d:7d:04:26:aa:db:87:
e9:b7:2e:2c:00:8f:19:98:5f:52:8e:14:1f:c0:c2:53:38:26:
93:97:a0:ed:10:7c:98:a9:de:e0:1b:cf:94:bf:d4:b7:0c:f7:
fd:0a:ce:ae:59:b3:bb:09:e6:8f:53:97:3b:93:8f:8f:51:d3:
d0:7c:ff:e1:fc:9f:82:92:b8:6d:73:36:a4:ca:08:27:e8:bb:
5b:50:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:01:54 2025 by rpki-client