This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft (raw, json)
Hash identifier: d6fWzGL06ycKW1R+bBwsiyesnuHOis6Jpc7kTCdrpqU=
Subject key identifier: E6:89:98:8B:39:78:BD:DD:80:F0:90:8E:68:F6:13:C0:29:0E:DF:C2
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Certificate issuer: /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial: 6E3628AA55A30ACD76C453E7117D4770CA0126F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
Manifest number: 04B3
Signing time: Tue 23 Dec 2025 13:31:47 +0000
Manifest this update: Tue 23 Dec 2025 13:26:47 +0000
Manifest next update: Fri 26 Dec 2025 16:36:47 +0000
Files and hashes: 1: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: g5hlJx5VxwLWFsZdGKqn9r2RuteLPSgtrh1sr6LNmhM=)
2: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl (hash: wZxUue5m1Duiwu1TcTUwWoL/hIzJkD2msr3RVtalCW4=)
3: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: cp5DLnNWi9w3KmvCMrojjqhOWr4wL8E6xAvIA2F2SV4=)
4: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: iNZ3zu9tO0qa+gSNjTNjVY0ck8jJgMDSV+32JZtPZic=)
5: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: q9l5WC1lZSRDDfD6k6bjS5S0ZVdtq7f+RpluQ9hh5F0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 16:36:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:36:28:aa:55:a3:0a:cd:76:c4:53:e7:11:7d:47:70:ca:01:26:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Validity
Not Before: Dec 23 13:26:47 2025 GMT
Not After : Dec 26 16:36:47 2025 GMT
Subject: CN=E689988B3978BDDD80F0908E68F613C0290EDFC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:b1:b6:f9:9f:08:fe:27:b7:c6:bf:9e:50:
fa:8f:9d:3f:3e:d4:96:bf:97:48:7a:72:a9:72:09:
fa:0e:d3:3f:40:68:d0:00:e9:9f:37:56:54:97:7f:
ae:1a:c2:01:9a:5b:60:d6:b0:ff:0f:b8:bb:af:1a:
9c:f8:da:62:b6:a7:df:ad:9e:a3:ae:03:86:73:6c:
09:4b:47:69:33:b7:8c:2c:74:0f:28:7e:0a:61:59:
b0:88:39:b0:28:67:19:d5:1b:12:d3:42:50:33:5a:
aa:73:ea:04:ff:cd:7c:41:6a:2f:d5:20:40:2d:b4:
24:4a:6a:34:77:b6:3f:c8:d7:39:a2:1b:d4:f8:35:
ad:e8:35:56:97:6f:10:07:33:0a:1f:59:73:6a:b4:
12:a4:96:65:0b:eb:00:37:53:48:85:e9:82:21:d0:
c3:08:ca:97:09:ad:ad:89:f1:cf:74:43:fc:f0:e8:
76:b8:dc:94:1f:46:62:69:94:d9:27:86:33:4d:3d:
0a:61:81:6c:26:aa:d7:c7:81:67:71:a2:a5:c8:82:
5d:42:47:c5:db:66:d4:77:9a:29:e9:c7:99:7c:2c:
34:08:97:93:0e:cc:67:86:23:45:1b:43:40:1e:9a:
0f:43:1c:4a:fe:d9:02:bd:d9:7b:a4:0c:67:c0:f5:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:98:8B:39:78:BD:DD:80:F0:90:8E:68:F6:13:C0:29:0E:DF:C2
X509v3 Authority Key Identifier:
keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:40:8b:be:a6:fd:07:5f:80:46:b7:5b:c3:28:0e:c7:e4:d4:
fe:64:2f:7a:ef:fe:0d:5a:20:0c:52:4e:b5:7c:9e:6e:a7:71:
e0:6c:24:4a:17:dc:b6:f9:4f:48:65:e8:28:cf:63:51:6a:6c:
2f:7d:0c:58:82:71:7d:5a:94:4d:70:b9:33:57:62:91:9a:bb:
65:29:19:34:c6:a4:47:a8:66:08:82:e7:69:98:f0:96:59:20:
60:49:fa:98:ce:c1:5e:b6:1a:cb:4e:c7:26:f9:3c:4f:00:c3:
a9:05:a8:0c:95:c7:37:54:ae:52:c0:e7:86:9f:79:a7:46:02:
f1:1d:8e:1a:21:a2:1b:e9:92:33:32:19:df:d5:22:cc:4b:f5:
91:35:a6:65:95:70:b5:e3:67:93:0e:9e:a4:36:8f:6c:79:c9:
0b:ab:e1:1c:0c:62:d1:92:c2:88:44:6b:a8:20:60:93:2f:33:
bf:23:ba:8d:07:2d:43:96:71:3f:5d:c4:9d:15:e7:ce:13:28:
e3:1a:a1:21:fc:e7:af:8c:1d:a7:4e:6d:7e:c8:a1:35:9a:c3:
cb:fc:b9:18:b7:2b:15:e9:fb:0e:b5:7d:69:a8:bd:2f:c8:e1:
eb:ac:55:61:ef:15:ed:31:51:82:57:36:34:00:d8:55:7b:bb:
c9:61:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:00:58 2025 by rpki-client