This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
File: 8137472FE4C7D48501352601D84D624E0EC41C19.mft (raw, json)
Hash identifier: TpYsWSCSV8E2dyxGnugD7cfxA6NnQD/045yGHq90ga8=
Subject key identifier: 26:CD:39:A2:38:FC:4B:EA:B9:50:DB:4D:DA:F5:A5:36:B1:3F:39:22
Authority key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
Certificate issuer: /CN=8137472FE4C7D48501352601D84D624E0EC41C19
Certificate serial: 4DAA545DB9B7A30FA9C142A3907A4977A3E7C920
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
Manifest number: D3
Signing time: Sun 28 Dec 2025 03:10:46 +0000
Manifest this update: Sun 28 Dec 2025 03:05:46 +0000
Manifest next update: Wed 31 Dec 2025 05:20:46 +0000
Files and hashes: 1: 8137472FE4C7D48501352601D84D624E0EC41C19.crl (hash: rMW0zh78vJrumIKgoqfssmvHBbyD5PVMskpYTqt3D8M=)
2: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: 2gWgTQ4Z+tGyRrEoZsoKq4rQS9QUc5mKoFU6ARsUw8Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl
rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:aa:54:5d:b9:b7:a3:0f:a9:c1:42:a3:90:7a:49:77:a3:e7:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8137472FE4C7D48501352601D84D624E0EC41C19
Validity
Not Before: Dec 28 03:05:46 2025 GMT
Not After : Dec 31 05:20:46 2025 GMT
Subject: CN=26CD39A238FC4BEAB950DB4DDAF5A536B13F3922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:8c:77:73:9f:7e:1e:72:22:9b:68:34:82:
4a:af:36:71:aa:f4:af:bd:49:9f:1c:f8:fd:c0:6c:
68:8d:29:18:50:45:b5:8a:08:c5:ac:4b:52:06:2e:
96:36:b1:90:0a:9b:a3:5d:e3:0d:34:0d:a1:d6:a6:
ee:7e:3b:5f:68:59:a1:d4:c0:a0:13:56:15:91:74:
76:1a:cb:8f:68:1d:b9:c6:47:ee:86:a9:ed:fb:39:
2e:ef:99:f3:82:72:df:ec:cf:f5:2a:69:b0:24:c0:
ae:a6:69:82:22:0b:43:39:c8:0a:a1:59:e6:22:3b:
b7:73:11:da:21:db:bd:88:ea:62:78:c3:6b:b3:af:
f5:33:0e:71:39:aa:2c:05:7c:a5:89:4f:d2:ab:74:
d3:8a:31:a0:fb:ff:01:b2:a1:9f:61:5f:ce:fb:15:
c3:eb:84:78:5c:17:01:db:ec:79:06:79:7a:f7:37:
99:01:1f:a9:c4:32:88:7c:6e:5b:f2:1f:ce:71:f1:
ca:9a:d4:64:0c:2f:ea:ed:5a:e2:eb:d1:02:51:8a:
2b:c8:59:85:e5:4f:a2:61:4f:fe:ee:a8:fb:5b:19:
41:f5:0f:58:48:62:38:5c:fe:81:7d:4e:cf:c0:d5:
a1:bc:96:c8:fe:f6:b7:63:e5:72:7f:9e:42:60:e1:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:39:A2:38:FC:4B:EA:B9:50:DB:4D:DA:F5:A5:36:B1:3F:39:22
X509v3 Authority Key Identifier:
keyid:81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:4b:28:89:2b:3a:b1:03:c5:c0:fd:79:24:32:61:ef:69:
d5:0e:4c:15:1d:77:55:a8:ac:90:db:d5:51:ae:c5:14:71:d7:
dd:b5:24:e3:79:96:4a:0f:65:6e:50:80:47:f5:2a:33:35:86:
cd:c6:40:e9:17:ba:b9:7b:e2:3f:bd:93:e8:4c:5f:d6:d4:51:
ff:63:e3:65:19:c9:c4:6e:ee:66:7a:9f:e7:ba:81:35:72:3d:
d6:c9:fd:99:71:0d:42:70:d6:58:a1:c4:1c:fa:94:7f:05:d6:
a1:27:8a:7b:ac:ec:af:fa:b0:dc:68:60:8c:fe:89:1a:b7:20:
7c:79:10:9f:68:69:be:d2:e0:07:31:02:3c:b6:47:ac:cb:09:
70:61:14:b3:a6:18:18:5a:a6:fe:80:da:62:e5:ba:36:ce:57:
7b:84:84:7b:32:7f:46:23:04:62:37:25:c4:19:70:cf:9b:65:
fa:1a:d4:ab:b7:48:ed:84:c1:1d:2f:a2:f3:96:63:0e:2e:d9:
89:c9:d5:de:ea:fe:cf:1b:91:7c:64:85:e9:d5:aa:df:e8:52:
62:91:2c:5e:00:94:3e:2d:29:91:b8:41:c5:c9:2e:b0:0b:34:
e0:3f:3a:21:ef:bf:0a:b7:b1:8c:4b:c6:2d:b4:83:a1:9c:e1:
77:7c:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:15:34 2025 by rpki-client