This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json)
Hash identifier: rqznMSIZANqXY87Lq2K2DD2MYF5JL7R4aayIdF9kPpw=
Subject key identifier: 7C:5C:3A:F1:08:1B:8D:B9:CC:27:1A:25:90:77:DF:3A:AE:F8:87:29
Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A
Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
Certificate serial: 71DB92CEB1AABF8C74A3BEF1DD2AD402B01BBD8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
Manifest number: 0379
Signing time: Tue 23 Dec 2025 04:41:24 +0000
Manifest this update: Tue 23 Dec 2025 04:36:24 +0000
Manifest next update: Fri 26 Dec 2025 09:40:24 +0000
Files and hashes: 1: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: ULKoG5CzTwchwLqvz9nCDwr2aSFi2DwC6/rT/iU3M9c=)
2: 323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa (hash: dl0z7TuYwDUuSU57FfKOeKvhobp1vKvNdUgb56XLczs=)
3: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=)
4: 323430343a326363303a32303a3a2f34362d3436203d3e20313331373336.roa (hash: AL79go4QRK47TgrAmtQGB5fYfJRAvCqPrZVQAqwDWT4=)
5: 323430343a326363303a32633a3a2f34362d3436203d3e20313331373336.roa (hash: t4c93T36jMt5VZmXd/bp2z8IhiNgox8OFSWiaBbxAhQ=)
6: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=)
7: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=)
8: 323430343a326363303a3a2f34332d3433203d3e20313331373336.roa (hash: FOu7z+lFtPq+cQCxDqirVfbm+xQEfu1NcMOm+058Mco=)
9: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=)
10: 323430343a326363303a32343a3a2f34362d3436203d3e20313331373336.roa (hash: pNNOikD6VzRUPv7yZG6Cg3KiGof++IQqkIf9l+Tqx7M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl
rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 09:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:db:92:ce:b1:aa:bf:8c:74:a3:be:f1:dd:2a:d4:02:b0:1b:bd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
Validity
Not Before: Dec 23 04:36:24 2025 GMT
Not After : Dec 26 09:40:24 2025 GMT
Subject: CN=7C5C3AF1081B8DB9CC271A259077DF3AAEF88729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:3e:7b:4e:ca:b7:30:ea:95:70:3d:28:72:
a7:6b:95:d1:4b:52:03:51:a0:b5:d5:72:c6:e5:f7:
e0:65:33:fd:f3:e4:04:4b:f8:0b:ce:16:d0:d7:7f:
a1:3b:81:31:0b:30:3f:87:80:7e:f7:bc:59:48:dc:
ef:e8:bf:a2:97:2d:e5:07:12:0d:31:55:fa:1a:b4:
ff:99:c1:c1:0e:f9:b3:0c:17:25:88:cd:a2:8b:c4:
f8:6f:a3:ed:07:c3:3a:c0:78:83:34:09:89:46:86:
86:36:73:ab:f9:6f:90:2a:c0:95:9d:2f:bd:5b:a0:
4e:58:b6:ca:72:93:fd:f6:68:81:3b:f9:e7:e3:8b:
f2:da:74:cf:81:68:19:e0:69:da:4f:22:30:b0:07:
a5:b5:41:57:d3:a4:f7:c4:76:e2:ce:07:d4:47:ea:
35:26:59:e7:e5:bb:12:69:6f:45:c6:a9:da:6b:e7:
dc:a6:32:c3:9a:34:48:8a:c2:68:81:23:0f:2d:22:
84:ba:85:25:1b:f8:1a:cc:5c:d0:08:ef:8e:25:fe:
5d:63:cb:02:55:e6:f3:77:be:7d:6b:94:ff:4a:6b:
b5:70:1f:6c:f1:1b:b2:a5:cf:6b:24:f6:f2:62:c2:
b6:23:45:c6:84:33:1b:10:39:c4:7d:f3:04:18:aa:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:3A:F1:08:1B:8D:B9:CC:27:1A:25:90:77:DF:3A:AE:F8:87:29
X509v3 Authority Key Identifier:
keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:d2:0d:5a:ca:83:50:b8:3a:a8:62:8c:90:57:9c:f4:bd:
f9:2e:49:4e:28:a4:3a:30:a9:a4:45:61:45:8b:9a:4c:40:52:
be:2c:16:21:26:88:7d:df:ae:6e:f7:f3:e3:e7:67:42:a3:ae:
46:16:17:56:a9:11:e6:3a:c7:3e:55:7f:74:9e:1a:00:d7:76:
d5:47:0c:f0:82:f8:1d:af:02:18:a1:7e:02:fb:73:17:0e:c1:
94:87:8e:71:04:64:31:a2:d1:89:67:07:82:4e:cb:55:e9:58:
16:e3:3d:28:d6:33:e6:0d:a1:53:1c:77:60:1c:04:63:07:4e:
24:2a:e5:cc:ab:08:61:7b:e4:26:54:91:6e:54:44:e9:1b:65:
8e:2c:32:5c:9a:24:89:bf:37:06:6a:32:4b:3f:8a:48:65:7a:
05:e7:3b:3b:f5:c9:24:fc:02:f4:a2:e8:a7:03:86:a1:75:18:
2f:6b:2f:15:ae:01:bd:11:d1:f4:5d:61:7b:7b:df:53:54:f7:
65:aa:1c:5b:df:44:e6:8e:13:ee:c2:bb:cb:e9:b4:bb:66:48:
6e:3a:c1:59:46:47:b9:74:8b:aa:e9:77:ff:f3:7a:70:7c:b5:
af:43:0b:f2:b3:3b:ce:15:a1:42:e4:05:6b:80:03:89:ca:2d:
d4:cd:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:20 2025 by rpki-client