This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft
File: 7B7F414EB90DB2AC9713729961F3D35102FEA537.mft (raw, json)
Hash identifier: K6zF98fPY4t3+eyPznGxyjfUom/fDllR0hNnk+PLgZQ=
Subject key identifier: 9A:CD:2A:50:40:CF:1C:1E:AD:6A:A2:2B:E6:14:13:2A:90:BD:99:F7
Authority key identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37
Certificate issuer: /CN=7B7F414EB90DB2AC9713729961F3D35102FEA537
Certificate serial: 6D0E9136D6ACAB2ABF7D60D2C8BD957F86364FC1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft
Manifest number: 01DE
Signing time: Wed 17 Dec 2025 03:41:57 +0000
Manifest this update: Wed 17 Dec 2025 03:36:57 +0000
Manifest next update: Sat 20 Dec 2025 14:38:57 +0000
Files and hashes: 1: 7B7F414EB90DB2AC9713729961F3D35102FEA537.crl (hash: o6oBzG8V1M2IDYasM3kgRbMbuWe5vJPmMQEFFNrI1kM=)
2: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: SJiBilo0yb+Xo2QIMXQYNjp32KQ3sSu+rr7Zt7LD6xo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl
rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 14:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0e:91:36:d6:ac:ab:2a:bf:7d:60:d2:c8:bd:95:7f:86:36:4f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B7F414EB90DB2AC9713729961F3D35102FEA537
Validity
Not Before: Dec 17 03:36:57 2025 GMT
Not After : Dec 20 14:38:57 2025 GMT
Subject: CN=9ACD2A5040CF1C1EAD6AA22BE614132A90BD99F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:33:5d:4c:cd:c5:11:ec:b5:9a:37:cf:be:
93:fe:a3:1b:b3:b3:6f:99:74:a8:cf:32:f6:57:16:
f7:e7:d8:34:4a:5e:09:8a:67:d9:15:5f:47:16:f1:
70:3a:ac:57:a5:0a:32:9b:e8:17:17:1b:ca:89:93:
5a:b2:45:06:b1:5e:9c:3f:d8:c2:96:3d:ae:df:45:
5d:f7:ea:61:08:e5:89:4b:26:78:68:8d:8a:44:cf:
22:7f:c7:ba:13:25:f1:5f:10:2d:e1:80:fc:7c:68:
e1:42:e6:1e:57:49:1a:9d:97:f2:59:07:18:b0:22:
bb:da:3d:e6:00:64:e3:c0:7c:16:f9:35:20:29:b3:
78:79:05:77:ed:83:bf:d6:6d:fa:47:42:59:df:a8:
01:d9:ac:b8:80:80:11:8e:b0:59:8f:b7:ac:3e:01:
6b:ab:85:e0:3d:a9:68:cb:b4:bc:cc:50:3c:57:26:
bf:b1:0c:56:fa:2a:65:a4:96:4c:10:83:f1:c5:b1:
ac:7a:9c:37:df:69:e5:3e:60:07:4d:08:f2:69:a5:
d3:16:c0:e0:32:3b:c4:dc:68:1f:73:7b:c7:0b:e4:
6c:12:d3:be:72:57:12:cc:73:ff:aa:d5:c8:d7:ee:
43:bf:44:c1:0b:21:0d:41:8a:63:ac:6e:6f:f9:3c:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CD:2A:50:40:CF:1C:1E:AD:6A:A2:2B:E6:14:13:2A:90:BD:99:F7
X509v3 Authority Key Identifier:
keyid:7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:01:4b:d5:f5:52:ea:49:ed:09:ba:6c:5b:0c:66:32:d9:9f:
3d:71:a2:28:fe:34:4d:bc:92:66:40:9a:d6:46:d1:43:86:58:
47:6d:d3:b2:75:cf:cf:53:98:99:c4:1a:80:42:5f:9b:a8:ef:
19:c1:5d:e0:f4:7a:3d:fa:4b:f3:37:fb:6b:ee:7d:7a:29:14:
8b:10:dc:f1:77:38:f7:26:18:67:88:30:44:96:33:0b:41:00:
95:f6:8e:26:d9:3a:30:dc:6e:0b:74:29:06:74:13:eb:a1:cb:
74:86:ed:a7:ca:b4:50:b2:66:85:fa:e7:02:6e:37:e9:a9:18:
ab:66:1a:eb:8e:c2:f7:da:67:89:04:e7:28:db:bb:e3:a0:d0:
34:78:9a:c0:59:ab:80:93:58:cc:2d:49:71:18:14:38:7d:0b:
30:e6:f4:c3:12:2b:5f:5a:ea:67:5f:9e:12:57:4c:48:dc:1a:
6a:2a:ad:a0:40:25:fc:f8:72:77:90:fd:06:46:83:d8:78:3e:
5a:76:7d:11:c9:fa:44:0d:dc:bd:d9:99:50:68:41:35:41:29:
3b:97:d8:8a:f5:6a:e9:35:14:b9:04:a4:02:8a:96:14:0d:79:
b4:4b:cf:f9:a6:a0:56:b1:10:54:66:b2:31:86:e4:22:03:46:
5f:14:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:37 2025 by rpki-client