This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft
File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json)
Hash identifier: cqnFI+5RRokpLdrqjp4uU9WmN9APUxifTNBd/k1svL8=
Subject key identifier: 05:3C:99:B6:47:AA:F9:D6:91:7C:22:FF:7B:3B:9F:3B:B2:03:31:4B
Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA
Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA
Certificate serial: 05851AA40614299ED4F1450FDD3CDE366AF1316A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft
Manifest number: 01EB
Signing time: Sun 28 Dec 2025 22:01:31 +0000
Manifest this update: Sun 28 Dec 2025 21:56:31 +0000
Manifest next update: Thu 01 Jan 2026 09:06:31 +0000
Files and hashes: 1: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: PT+etizzGopHBcXlEfN07fe0//TlHAaZf9B8s+yuvu8=)
2: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: Rw+pxwTJP+hvGj9PdU0j+wE54RfccGnIIDVVcYYdmUc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl
rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 09:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:85:1a:a4:06:14:29:9e:d4:f1:45:0f:dd:3c:de:36:6a:f1:31:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA
Validity
Not Before: Dec 28 21:56:31 2025 GMT
Not After : Jan 1 09:06:31 2026 GMT
Subject: CN=053C99B647AAF9D6917C22FF7B3B9F3BB203314B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:63:0d:72:77:1c:94:8e:6a:e2:3d:e4:0d:
2f:c4:70:f1:98:90:9d:40:e6:2d:14:89:6a:89:9b:
58:c3:7a:56:c8:1d:a5:fc:3b:fe:61:20:5b:0c:0c:
f0:db:cb:5e:fa:aa:8c:cc:c7:a9:ed:41:34:34:45:
31:a8:56:11:66:1b:91:4d:16:a5:81:f0:13:ac:f8:
73:37:3e:53:a8:1d:3c:58:dd:ff:e3:04:ca:35:4b:
4a:28:b8:53:8c:2e:72:47:39:75:0b:67:73:9d:e6:
69:a7:a1:e4:92:5b:c7:8b:88:0b:db:14:9f:2b:68:
e7:e8:7b:f1:dd:86:ce:2e:f7:7d:11:88:c8:2b:66:
88:97:84:c8:01:f1:70:b4:f0:b3:5c:29:75:a9:af:
ed:86:b3:c6:1c:04:57:81:91:75:c9:8c:8b:16:9d:
38:b1:88:20:02:5c:90:35:78:af:1c:64:f7:08:01:
95:32:36:71:c5:7a:4e:18:67:b5:1f:6f:08:27:d5:
12:d3:13:2b:4a:9e:42:4b:36:2f:d3:31:54:30:f1:
ed:ac:0b:dd:5e:eb:18:50:c4:13:98:59:c9:d9:7c:
2e:00:4a:5b:60:f9:c2:77:12:80:03:e8:56:b6:3d:
b1:bd:00:ae:d0:b9:69:c1:60:d8:c7:5f:39:52:cd:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:99:B6:47:AA:F9:D6:91:7C:22:FF:7B:3B:9F:3B:B2:03:31:4B
X509v3 Authority Key Identifier:
keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7f:5a:f5:c3:6f:8d:d5:8f:38:dc:f8:1a:e1:a7:f6:83:62:
d5:9c:24:9a:3d:28:07:7a:37:87:84:39:6b:3c:af:bb:8b:74:
b1:8a:a1:34:4e:33:1e:62:18:1c:04:e8:17:4f:f2:13:28:17:
66:0e:2e:a2:67:27:e0:2c:40:be:79:89:09:70:08:a2:3e:8b:
61:6c:f9:a0:c4:af:6a:2c:f5:24:5d:59:02:b7:d0:42:d8:7c:
c2:a2:32:e8:bd:5c:50:e2:4b:15:3c:f0:2d:3c:30:61:57:9c:
94:cd:e8:43:d2:ff:d8:55:d4:c7:47:94:4e:f2:84:7f:a1:ef:
f8:3a:a4:9a:77:a3:c3:70:63:67:8d:7b:9d:1b:fc:dc:4d:86:
80:be:f9:93:14:b5:7b:9f:7c:a2:4e:ab:4e:e0:15:b3:71:5f:
7e:81:f2:07:77:25:11:91:10:be:19:4c:9e:d2:cf:09:8d:b9:
73:82:7a:b5:eb:8b:5a:92:b9:ed:98:23:1c:cf:08:51:ae:51:
05:e5:c5:73:9f:49:cd:04:0e:ea:8b:00:ae:2a:f8:e2:d0:a8:
35:20:70:bf:13:e7:f9:6a:1b:41:45:41:66:83:30:1c:d0:27:
d0:f9:60:cf:2a:0b:56:cc:7f:0c:d1:3b:ea:c4:15:69:a4:a2:
ec:94:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:04:36 2025 by rpki-client