This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
File: 7D9756BA26383A8A80C65F2856105B0FF5154379.mft (raw, json)
Hash identifier: g0fA9ArBvxy5yLtkvLhWIs255amUMocx2XHrL8oS4f8=
Subject key identifier: 39:74:60:4C:7A:B3:A3:A9:86:4C:4F:1C:18:2B:3A:AB:3A:23:C0:94
Authority key identifier: 7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
Certificate issuer: /CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Certificate serial: 644C69D0604E7005F16F75EC92189163662FCFAF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
Manifest number: 01F7
Signing time: Tue 23 Dec 2025 07:42:59 +0000
Manifest this update: Tue 23 Dec 2025 07:37:59 +0000
Manifest next update: Fri 26 Dec 2025 12:03:59 +0000
Files and hashes: 1: 7D9756BA26383A8A80C65F2856105B0FF5154379.crl (hash: YRtNhrrdRXyuVfa1RJgswBzxB6e/pJqu2Wr/yGqODSk=)
2: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: jmjpTwFqJBkm3124jZo6u0K/VkEahqOKTR/f2jeIcks=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 12:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4c:69:d0:60:4e:70:05:f1:6f:75:ec:92:18:91:63:66:2f:cf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Validity
Not Before: Dec 23 07:37:59 2025 GMT
Not After : Dec 26 12:03:59 2025 GMT
Subject: CN=3974604C7AB3A3A9864C4F1C182B3AAB3A23C094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:b8:8c:bb:4d:ca:4e:ab:86:53:ba:1c:30:
d3:23:28:0a:bb:d9:d4:66:52:18:f4:2d:3b:bb:a5:
60:71:05:7b:df:4a:dc:9b:a9:9d:0f:da:17:c3:7c:
93:05:26:9e:25:24:34:95:f9:0b:b3:0d:7c:e6:c2:
77:ec:a8:c2:4b:2b:0a:53:e5:ed:12:e0:db:b0:2c:
59:d0:ca:d6:b9:7c:93:96:69:d5:4d:90:82:88:9f:
27:b1:ae:e1:c0:d5:15:71:02:0c:69:8d:a3:6d:fb:
4b:97:69:47:a2:3e:88:09:4f:5d:a4:95:77:54:43:
84:c5:c1:e6:30:b8:94:34:fb:fa:27:5a:dd:5c:53:
c7:56:b7:b0:ab:23:61:12:4a:82:e7:59:cf:12:ee:
96:4a:90:ea:94:19:9f:4d:68:f2:75:d5:c6:e7:18:
76:52:b3:65:7c:d7:41:3d:22:1e:57:30:98:cd:66:
17:ca:fc:81:66:14:e0:d4:dd:28:31:de:71:2d:df:
c2:1e:d0:11:35:a0:55:63:e3:1c:6a:6f:50:25:d4:
c1:69:7e:a3:b3:71:6b:f7:b4:28:6f:c4:ae:82:51:
84:98:a5:44:59:64:ba:41:da:79:32:d8:32:6b:cd:
33:2c:2f:29:1e:ac:fd:9e:50:ed:85:55:67:8f:1c:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:60:4C:7A:B3:A3:A9:86:4C:4F:1C:18:2B:3A:AB:3A:23:C0:94
X509v3 Authority Key Identifier:
keyid:7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:28:8e:2b:7c:55:47:83:3d:20:3e:3f:c6:a2:89:97:fe:ed:
14:cc:9a:62:cc:00:df:52:b7:08:e4:eb:54:1c:8f:6a:10:66:
7a:b6:95:28:01:0d:82:74:57:18:f5:af:20:2e:b6:19:3a:1f:
67:de:9c:bf:e7:5a:29:79:72:b5:96:ec:bf:82:77:9c:7a:ad:
43:82:a0:9a:0f:cd:37:e4:de:85:35:73:f8:a9:89:19:ba:2f:
d3:7a:fe:62:f0:b1:67:8d:d4:93:00:e9:7e:4d:0f:1e:45:8e:
d4:79:c8:24:51:59:d6:01:50:fd:a2:35:e0:51:bd:b5:84:53:
0a:66:a5:64:d9:53:8c:06:6d:6f:72:24:67:19:64:88:63:23:
dd:c7:8a:f6:73:57:17:73:c4:68:fa:23:41:b7:f4:88:6b:4d:
12:41:1e:e4:0d:70:5b:f0:9c:b2:c3:b1:c2:65:02:63:69:86:
bf:2f:65:36:27:7c:f0:01:7c:28:21:1a:22:a9:69:7c:83:65:
71:2f:d6:e9:2a:8d:6a:b9:d3:39:c6:fd:8e:65:3d:a0:21:00:
bf:34:25:d2:b4:58:46:5b:4c:98:00:97:a2:24:59:62:58:ed:
fc:dd:7d:87:9d:bc:dc:c0:8e:4b:1d:1f:a4:57:3f:24:46:38:
f6:5f:ae:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:39:51 2025 by rpki-client