This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
File: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft (raw, json)
Hash identifier: FyuRW/6Dm8RNobGTYxTLirBs/vXNbZFkcwlKH9hddRI=
Subject key identifier: 3F:36:1E:53:E7:38:C6:12:0C:53:D5:0D:B2:26:82:9B:F2:5E:88:0B
Authority key identifier: E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
Certificate issuer: /CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
Certificate serial: 2048B151D1DF7E9B8E75677D7B5199224AEE3D8D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
Manifest number: 0120
Signing time: Tue 23 Dec 2025 15:51:31 +0000
Manifest this update: Tue 23 Dec 2025 15:46:31 +0000
Manifest next update: Fri 26 Dec 2025 21:14:31 +0000
Files and hashes: 1: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: jDuBPuo8FXkwHvuSx3l3NpRnjG6RnX6zvR23Pm7QMR8=)
2: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl (hash: d3v0o+SWJ9m3Z1E3wVI6RoBGkFTzYnRet/pnxCFBES4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl
rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 21:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:48:b1:51:d1:df:7e:9b:8e:75:67:7d:7b:51:99:22:4a:ee:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
Validity
Not Before: Dec 23 15:46:31 2025 GMT
Not After : Dec 26 21:14:31 2025 GMT
Subject: CN=3F361E53E738C6120C53D50DB226829BF25E880B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:e8:ec:52:cc:9c:24:f0:71:55:9b:26:14:
27:46:24:80:56:92:59:88:f3:e4:17:07:88:5f:ae:
cc:0a:c5:f6:dc:9e:0e:0f:58:a4:24:34:01:9e:4d:
b4:42:f0:59:f8:1c:70:43:84:54:db:7c:f1:2b:d8:
4f:35:9a:ab:45:91:00:79:6c:f7:31:e6:46:0d:60:
cb:12:da:07:4a:1e:29:f8:1f:a9:51:59:74:76:21:
61:c5:4a:2b:95:1c:af:d9:27:b5:96:8a:ac:4b:d2:
23:9a:12:6a:4d:1b:ca:98:07:4b:7b:db:e7:ce:66:
26:f2:5f:7f:1c:19:ce:0d:85:ca:8b:b1:18:ba:ea:
7d:ff:56:8d:e7:54:e2:1b:10:a1:17:2a:e2:24:46:
11:91:14:90:06:da:4f:3a:dc:0b:c9:eb:e7:96:ff:
0e:c1:84:9c:6f:59:81:bf:36:3d:b0:cc:40:d4:d9:
3a:bc:82:62:e5:8f:03:a6:8b:32:1c:d6:d1:1c:29:
b6:0d:b2:04:c3:93:f1:10:3b:88:da:45:b3:ed:e1:
a4:e0:2e:71:e5:9c:8d:d6:69:52:ca:3e:5f:8d:b2:
7d:b5:d1:92:41:04:e4:4f:9b:57:d3:57:b2:b3:61:
2a:e6:c4:fe:5e:90:93:52:6a:ff:d0:c6:9d:77:bb:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:1E:53:E7:38:C6:12:0C:53:D5:0D:B2:26:82:9B:F2:5E:88:0B
X509v3 Authority Key Identifier:
keyid:E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:85:01:cb:a4:f4:67:5a:76:b7:a9:cb:ed:f2:09:ff:cb:1c:
ca:66:36:ea:d7:47:8d:6e:fc:d4:99:e7:be:cc:ec:ec:55:00:
39:91:54:9c:53:8c:94:a5:4f:c1:3d:40:ff:9e:d0:52:4b:55:
79:14:b7:da:cf:a4:a0:5a:ad:30:e3:59:14:07:f5:3a:c4:1c:
de:79:83:45:0c:2a:c4:85:04:a6:b2:df:c4:0e:ca:cd:92:38:
36:05:f0:cb:53:82:0f:f3:11:d2:2a:87:07:fb:95:c2:53:e9:
ca:02:ee:2d:b5:ac:66:a5:d3:35:34:d1:43:c3:45:7f:38:0d:
6c:97:4c:3b:7b:c3:8c:57:16:45:cd:7c:66:de:f3:ee:d6:35:
3a:73:50:30:79:be:d4:74:16:38:e0:18:17:27:d5:b8:bd:94:
e7:36:18:1f:17:64:dc:13:0f:58:e7:51:7c:9e:0f:6b:53:65:
7c:7f:c6:85:a0:2c:4f:49:a0:3c:40:c5:cf:1b:cb:16:71:50:
c1:e1:10:0a:78:7d:77:18:96:ce:69:be:06:60:3d:72:a3:aa:
d5:a6:1d:61:bb:f4:1b:21:60:0b:f0:71:63:f0:09:66:77:31:
54:5b:6f:38:a4:65:3a:e5:aa:b3:ef:60:f7:70:ce:33:5f:23:
69:b1:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:59:59 2025 by rpki-client