This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
File: 7195906BF48238F96B0510D75000910A519133F7.mft (raw, json)
Hash identifier: CzYuLnHJLbB4espOyW5QR9W0cCFi+f/lrUeu8aEMwEc=
Subject key identifier: 5C:EF:A5:72:A0:91:B2:90:F7:1E:9A:68:94:E0:5B:4C:97:72:7F:82
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Certificate issuer: /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial: 5437590169349738BB374594A9F9B79DEBE13EC0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
Manifest number: 01CA
Signing time: Wed 17 Dec 2025 22:11:36 +0000
Manifest this update: Wed 17 Dec 2025 22:06:36 +0000
Manifest next update: Sat 20 Dec 2025 23:42:36 +0000
Files and hashes: 1: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: qyj07jxP5UpkRTWItELJRs6g7k1icVMyd4ebBYyPW9Q=)
2: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=)
3: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=)
4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 23:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:37:59:01:69:34:97:38:bb:37:45:94:a9:f9:b7:9d:eb:e1:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
Validity
Not Before: Dec 17 22:06:36 2025 GMT
Not After : Dec 20 23:42:36 2025 GMT
Subject: CN=5CEFA572A091B290F71E9A6894E05B4C97727F82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:48:33:3a:0d:e5:f8:a4:93:33:36:45:be:
84:d9:d6:b9:53:5b:97:fd:e3:f0:c1:e3:d1:7a:3e:
ba:d3:e2:21:0c:18:dc:20:4e:5f:09:99:b0:7f:1a:
65:66:94:0c:c5:f2:c3:62:b9:bd:2a:c8:fb:d1:eb:
07:31:53:8d:3d:ba:ba:c8:db:c0:f0:e3:68:b5:33:
15:2c:70:b2:f7:4e:22:df:58:91:ae:be:a2:fe:7f:
cd:01:65:32:28:be:8d:bc:1a:c4:a4:93:38:4c:30:
3a:ad:9d:49:d7:10:96:24:4b:6c:ad:37:7b:28:d0:
9f:62:b1:8a:4b:53:5f:62:02:71:60:51:20:c3:a2:
87:e9:b4:e4:31:3f:c5:41:21:7b:44:1f:2f:b7:ec:
af:91:cd:68:76:12:4d:5a:ef:25:32:b0:b0:d2:cd:
7d:28:56:4f:05:ca:c4:9d:80:85:f6:48:80:96:81:
1b:50:51:e7:cd:6a:e0:39:b6:61:35:91:64:63:42:
45:79:0e:c5:62:9b:90:4f:5d:d0:e1:74:59:c8:dd:
ee:1e:ab:10:a6:ef:cc:81:27:8c:b1:40:01:29:a9:
88:2e:0a:97:28:6c:85:fc:0e:d9:12:f7:7a:0b:1f:
89:39:0f:c0:a6:53:3f:91:23:b6:8c:4a:55:1f:1b:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EF:A5:72:A0:91:B2:90:F7:1E:9A:68:94:E0:5B:4C:97:72:7F:82
X509v3 Authority Key Identifier:
keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:75:aa:8a:3b:19:d2:7c:2b:8e:9b:bd:ae:d5:b1:2a:9d:1e:
64:ca:73:11:f1:a6:73:c0:38:3b:1c:0f:16:d7:03:a0:57:bd:
9c:c5:b0:6d:f2:77:65:48:28:c1:fa:57:de:97:19:ff:f8:64:
d5:e7:87:4d:40:93:b7:ae:e8:3e:ad:1c:de:0c:67:1a:f1:cb:
e8:84:4f:f2:d9:b2:b3:70:68:7e:60:82:43:55:25:12:2a:e5:
16:03:30:82:2b:c5:c3:62:35:61:f5:23:97:dd:3a:3b:d3:53:
9a:1a:6f:2d:16:45:e3:4d:2b:fd:c8:00:df:b1:67:a6:cc:3a:
4d:7b:f8:54:9a:78:78:17:22:76:3d:0d:6d:16:81:8e:da:ec:
32:6e:64:ec:fe:f3:be:e2:2a:ab:b9:7e:6a:29:83:1c:39:11:
97:d4:d3:29:8e:80:53:48:0b:88:88:8e:f7:af:ca:28:cd:93:
82:00:08:e9:ed:5e:ae:4a:89:26:8d:51:e7:9e:79:a5:ca:9f:
a3:af:44:e2:5c:ec:51:f4:15:ba:7f:ef:56:d9:f7:92:4b:17:
f6:18:6f:2d:86:2b:7d:a5:fa:77:07:69:24:d8:8f:fe:f4:be:
8f:1c:61:1a:21:d6:c3:3e:7a:64:43:bf:0b:65:bb:a2:08:e4:
ae:78:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:33:14 2025 by rpki-client