This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft
File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft (raw, json)
Hash identifier: zoXxMj7ud/M8C9NBCgCk5s1BQUAbHs1ZfHJBHy927xc=
Subject key identifier: 56:52:B0:65:5C:C2:71:2F:19:4A:09:BB:65:3B:6C:CA:00:6E:E4:E8
Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B
Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B
Certificate serial: 7034FBFB457084F8C0857AB49B4BC6DB370A1C1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft
Manifest number: E0
Signing time: Fri 19 Dec 2025 00:11:53 +0000
Manifest this update: Fri 19 Dec 2025 00:06:53 +0000
Manifest next update: Mon 22 Dec 2025 09:36:53 +0000
Files and hashes: 1: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl (hash: G3TlPW0C52XFZm+EewavhdPZMGcoWkgh3/IsMUKc1VA=)
2: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: I8nLPluTJWLYyGtu9yBeYoUlVfCol4rqRzuAbdB/G2g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl
rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 09:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:34:fb:fb:45:70:84:f8:c0:85:7a:b4:9b:4b:c6:db:37:0a:1c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B
Validity
Not Before: Dec 19 00:06:53 2025 GMT
Not After : Dec 22 09:36:53 2025 GMT
Subject: CN=5652B0655CC2712F194A09BB653B6CCA006EE4E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:19:0b:82:d5:1a:22:08:de:d7:0b:1d:ef:
cc:7d:48:e5:a6:0c:07:89:88:bd:4e:18:f0:03:42:
be:e4:31:44:98:a6:96:f6:26:a3:79:0e:d9:54:a4:
5e:12:a4:70:b4:26:4c:95:dd:8f:15:08:dc:71:34:
a1:72:de:a8:23:93:2a:97:7a:86:eb:5a:f3:78:c9:
70:f7:81:95:a1:fe:d1:38:0f:e0:a2:ef:cb:f0:5a:
e3:0a:d2:d2:da:3b:d0:ea:d4:2e:ff:14:11:59:7a:
fd:c9:97:41:56:21:a5:5a:98:74:c1:c3:5d:ee:06:
52:61:d3:99:7e:f8:d4:1c:d3:90:f5:27:b8:d7:50:
b7:04:19:07:e5:10:f9:2d:81:44:d4:0c:7f:d0:99:
a7:c2:fe:57:9c:5e:f4:51:92:cd:4a:6e:da:af:1e:
8b:4f:a6:f9:b9:c4:1f:29:64:d4:f0:92:64:f6:39:
ca:59:c0:ad:df:b0:dc:a7:a6:58:c5:fd:79:70:16:
f5:11:2b:d0:b4:70:f3:16:b7:3b:8f:3a:23:55:67:
0b:bc:ac:74:60:fb:f4:04:94:fd:14:52:02:91:af:
8c:e7:4b:65:84:4b:a1:85:27:f0:cc:1c:11:5f:a9:
87:87:fc:c9:00:36:8b:e9:e8:9d:ad:c3:5a:dc:07:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:B0:65:5C:C2:71:2F:19:4A:09:BB:65:3B:6C:CA:00:6E:E4:E8
X509v3 Authority Key Identifier:
keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:82:9f:3c:3e:f6:7d:25:ed:a5:72:11:b0:21:50:1c:06:f8:
ed:3b:fc:aa:e2:95:3c:f7:40:4a:bd:fc:69:a2:e2:89:78:9d:
22:92:8b:10:10:e5:41:27:47:ab:00:e7:80:50:86:78:ee:d4:
91:1e:32:65:be:2c:b9:55:fe:97:d1:04:ed:d3:de:e0:67:96:
b7:9e:f5:c0:99:92:b5:ad:88:7e:d6:f0:f8:64:ce:20:7d:d8:
2d:f2:0b:f3:98:17:54:8b:20:43:24:26:e4:ec:09:af:2a:59:
fb:92:e1:8e:27:d9:a4:63:d2:d2:46:01:0c:2a:05:13:60:05:
19:da:f1:2a:06:f6:b0:a9:b4:99:20:a9:27:29:85:b7:5a:63:
09:0e:10:f0:f1:de:50:41:29:fe:54:2a:94:7d:57:4e:83:e5:
9c:ed:bf:c6:65:46:2f:75:0e:ec:9e:a2:f6:ed:69:1e:51:b7:
67:46:76:3e:1f:92:3e:60:c4:75:e5:a4:5c:fa:91:0e:ef:23:
2e:14:53:a0:8a:9e:d4:a2:f8:07:3f:d9:b3:eb:30:18:4b:65:
aa:9f:3b:4c:4c:44:67:6e:b6:03:26:8f:11:6e:26:76:06:92:
96:01:e7:fe:4a:ef:f3:0e:37:fc:f6:a2:ed:40:24:35:8e:e9:
b6:1d:2b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:22:28 2025 by rpki-client