This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: d8yJ1EowcNzoCKBcfzDzeg3XLlMJRFltyCfmrqCB0Hw= Subject key identifier: 31:3F:CF:8A:AE:2D:D4:F5:F9:64:2C:CD:B3:EA:94:E1:CA:4B:EE:62 Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 5FD23B97CD0EC149124130DDAD2200A1D5CD9DAE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 0537 Signing time: Thu 18 Dec 2025 20:50:38 +0000 Manifest this update: Thu 18 Dec 2025 20:45:38 +0000 Manifest next update: Mon 22 Dec 2025 07:28:38 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: J/nk5J9FH5FSJGSxYPhg6mU/QnNI4DgSyOj69wtbqDE=) 2: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=) 3: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d2:3b:97:cd:0e:c1:49:12:41:30:dd:ad:22:00:a1:d5:cd:9d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Dec 18 20:45:38 2025 GMT Not After : Dec 22 07:28:38 2025 GMT Subject: CN=313FCF8AAE2DD4F5F9642CCDB3EA94E1CA4BEE62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:d9:fd:a4:9e:92:1e:18:cd:00:3c:97:d2: 04:b9:55:dd:e5:5c:57:13:7b:2b:77:b4:6c:47:87: 3a:e4:38:ac:51:6f:c3:4f:fd:d6:f3:d0:89:07:e2: c8:6e:a6:4f:1c:b8:6f:e0:3b:75:3b:40:4e:81:eb: 1b:4d:00:5d:1d:28:35:c3:3e:3f:59:8c:6e:82:79: d0:92:80:59:2a:55:0a:bf:9e:11:f8:0a:32:65:41: 0a:cb:af:b1:54:0c:8e:34:b6:15:0d:ec:33:07:68: 23:89:48:01:17:0a:1c:1b:b2:d6:af:b9:ad:1a:6d: f2:79:7f:bd:9e:9e:8f:27:04:c8:5f:a1:5d:2d:4f: da:3e:d8:c6:a3:43:a1:02:28:88:28:59:93:1d:24: 20:d6:f2:5d:eb:6c:9f:9e:d4:9d:80:c1:76:3b:90: f4:b2:bf:3e:9a:22:46:74:9d:b5:81:17:54:17:36: fc:a2:0f:ff:16:a9:ce:30:34:d3:b0:8e:d6:86:91: 87:00:e3:04:bf:7c:bd:86:cb:e3:c0:8b:b3:bf:e7: c5:8a:c0:07:38:40:27:c2:d8:98:92:3b:36:10:4e: af:ea:d2:80:31:60:96:9c:7b:42:fe:39:5d:25:9c: e9:39:61:a8:af:4b:7a:0d:2e:00:df:5f:37:6a:31: c7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3F:CF:8A:AE:2D:D4:F5:F9:64:2C:CD:B3:EA:94:E1:CA:4B:EE:62 X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a7:16:96:56:4c:40:75:e0:c6:66:b2:ef:43:59:8a:3a:cb: 2e:fa:fe:74:8f:46:ad:ac:ce:75:3a:76:0b:9c:ce:30:90:c5: 9c:2c:0d:56:d2:26:69:d1:27:7f:9b:b4:b5:6f:46:53:a6:dd: 3c:e5:93:9f:06:3c:a4:0c:b5:06:6f:73:4c:34:1e:c9:80:8e: da:67:3b:b8:67:b9:5d:14:0a:01:c1:1d:fa:48:4b:dc:f0:0d: bb:5a:0d:12:eb:3b:53:02:bf:d3:ab:e9:93:94:32:c2:53:d8: 1f:92:18:6f:d0:e6:0d:57:5b:30:f9:72:85:c1:22:1c:1d:37: 3f:2d:45:7b:f7:0b:fd:2d:5c:9f:88:c4:36:ce:d6:b9:0a:cf: 86:1f:63:92:01:39:c8:2d:d6:34:23:c9:bd:b8:66:d7:17:50: f8:d0:84:75:5c:e3:cf:b6:a9:0a:3a:e0:28:76:0e:83:95:fa: 17:12:d4:38:f2:e1:18:ae:e7:67:25:f0:98:2d:a1:a9:1c:92: 01:a3:91:7d:1c:5a:30:d1:f8:0e:09:29:bc:ca:8e:70:c1:3c: 4f:45:70:5b:77:c4:b2:4a:e4:b0:4d:fb:9c:31:f7:1e:c9:c1: 01:98:20:e6:4e:dd:56:c9:0d:7b:47:12:c7:07:44:a2:b2:0b: c8:84:69:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUX9I7l80OwUkSQTDdrSIAodXNna4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MTIxODIwNDUzOFoX DTI1MTIyMjA3MjgzOFowMzExMC8GA1UEAxMoMzEzRkNGOEFBRTJERDRGNUY5NjQy Q0NEQjNFQTk0RTFDQTRCRUU2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOeQ2f2knpIeGM0APJfSBLlV3eVcVxN7K3e0bEeHOuQ4rFFvw0/91vPQiQfi yG6mTxy4b+A7dTtAToHrG00AXR0oNcM+P1mMboJ50JKAWSpVCr+eEfgKMmVBCsuv sVQMjjS2FQ3sMwdoI4lIARcKHBuy1q+5rRpt8nl/vZ6ejycEyF+hXS1P2j7YxqND oQIoiChZkx0kINbyXetsn57UnYDBdjuQ9LK/PpoiRnSdtYEXVBc2/KIP/xapzjA0 07CO1oaRhwDjBL98vYbL48CLs7/nxYrABzhAJ8LYmJI7NhBOr+rSgDFglpx7Qv45 XSWc6TlhqK9Leg0uAN9fN2oxxwsCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBQxP8+K ri3U9flkLM2z6pThykvuYjAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuacWllZM QHXgxmay70NZijrLLvr+dI9GrazOdTp2C5zOMJDFnCwNVtImadEnf5u0tW9GU6bd POWTnwY8pAy1Bm9zTDQeyYCO2mc7uGe5XRQKAcEd+khL3PANu1oNEus7UwK/06vp k5QywlPYH5IYb9DmDVdbMPlyhcEiHB03Py1Fe/cL/S1cn4jENs7WuQrPhh9jkgE5 yC3WNCPJvbhm1xdQ+NCEdVzjz7apCjrgKHYOg5X6FxLUOPLhGK7nZyXwmC2hqRyS AaORfRxaMNH4DgkpvMqOcME8T0VwW3fEskrksE37nDH3HsnBAZgg5k7dVskNe0cS xwdEorILyIRptg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:12:03 2025 by rpki-client