This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json)
Hash identifier: qwTLzARxLo2BjCk7aoe/zG0P/0ZERdTUg3n1LKL+5Sg=
Subject key identifier: 7E:F4:01:6D:66:C3:FD:B4:95:70:44:8F:36:2D:30:8A:2B:DF:BA:46
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial: 77703CA4C260DA54104F2F95EB939E4279DC5AC8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
Manifest number: 0537
Signing time: Tue 23 Dec 2025 06:52:18 +0000
Manifest this update: Tue 23 Dec 2025 06:47:18 +0000
Manifest next update: Fri 26 Dec 2025 07:47:18 +0000
Files and hashes: 1: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=)
2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=)
3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=)
4: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: lmdU/jQPq2Fp1ivia7wLoDlLJ9sf8IiCkl1H+ZSupD8=)
5: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 07:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:70:3c:a4:c2:60:da:54:10:4f:2f:95:eb:93:9e:42:79:dc:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Validity
Not Before: Dec 23 06:47:18 2025 GMT
Not After : Dec 26 07:47:18 2025 GMT
Subject: CN=7EF4016D66C3FDB49570448F362D308A2BDFBA46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:dd:bb:5d:ca:ee:f0:3c:0c:e9:0c:0e:08:
87:a9:fc:5a:28:78:38:b0:e9:19:20:c6:83:01:b4:
a4:cf:ea:82:11:1c:c8:8e:ca:cd:83:62:4d:59:c6:
57:cc:5b:33:a9:b2:53:f8:0a:2a:df:ec:44:d4:4e:
ba:d0:fd:49:b8:c3:eb:da:13:09:48:ca:57:a8:25:
7c:69:fe:a3:5f:66:a9:24:71:15:de:56:ea:39:2c:
4b:15:d0:1b:18:c5:5f:30:38:dc:a2:18:0d:bf:88:
7a:fc:1d:81:02:d6:d8:0f:bc:70:14:ed:3a:7b:d0:
c7:17:88:97:b8:1e:ff:83:4d:3d:0d:09:fc:a3:fb:
8b:f6:6d:db:38:d3:ed:60:23:25:81:51:bb:7f:b8:
35:18:3f:5a:19:95:0a:ef:2a:e6:f5:15:48:a6:f6:
fd:f6:4e:60:0e:c6:1a:72:e7:e7:ca:3c:b1:f3:92:
c9:3d:1f:c4:1f:1b:0e:0a:63:39:ec:cf:ed:bd:23:
ad:d7:6f:82:59:52:10:51:cb:e8:39:0c:3d:a1:62:
f3:4f:f3:94:f3:b3:c0:51:ec:3c:0e:53:5a:de:b2:
92:dc:6e:d5:8a:26:2c:d3:93:9e:0b:04:75:45:cc:
22:02:09:8f:a6:dc:54:43:d9:f9:19:dd:c1:c4:42:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:01:6D:66:C3:FD:B4:95:70:44:8F:36:2D:30:8A:2B:DF:BA:46
X509v3 Authority Key Identifier:
keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c2:8e:85:12:09:58:10:e7:3c:8f:f6:26:c4:7f:32:dc:b7:
d8:3b:b7:6d:f2:59:78:6b:c1:df:ea:b0:97:7e:b1:b1:50:ad:
02:e4:cb:b8:cb:07:7e:90:4f:79:37:98:ae:f0:43:7a:ac:f9:
b2:ff:2b:1c:63:f0:1f:34:25:13:97:28:82:35:33:3c:aa:33:
a8:1b:50:1b:70:15:7c:bd:28:d3:6d:55:ed:c5:7d:12:c6:02:
5e:5c:a4:76:87:39:f4:94:01:fc:a5:b5:62:7d:d3:58:67:24:
92:65:16:46:49:7e:1e:be:4f:a8:1d:9e:cc:f0:66:28:bd:93:
8c:0f:95:8f:2d:e4:fc:ab:ad:f1:cb:5e:b8:d2:dc:fe:c6:a4:
6a:35:6b:4f:18:b4:8c:9e:7b:6d:a5:eb:da:9d:95:aa:01:85:
9c:24:f8:77:f8:dd:f4:65:80:11:81:fe:48:da:d6:ee:57:51:
af:5b:0b:e0:58:57:f6:f1:27:2c:21:08:26:54:1d:3f:6a:9b:
72:62:0f:e9:e9:0d:46:27:14:97:e7:d2:28:a6:74:b2:10:86:
66:7e:27:ab:e4:5b:95:ff:a9:b8:b7:d6:8e:67:11:2a:f1:f3:
3d:0b:58:76:fb:2b:cd:59:be:d9:07:28:ba:96:9f:af:1e:41:
e9:52:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:21:59 2025 by rpki-client