This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json)
Hash identifier: LvFGgOtzF6D6Lly0CP4p4hxS9MSIL1Z4haShGD1YLXI=
Subject key identifier: E6:BD:BF:8A:20:31:DA:0F:5C:34:B8:73:3B:86:2D:22:15:D5:AC:BB
Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Certificate serial: 466460D5396BF49B4538D886A69880930519A447
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
Manifest number: C1
Signing time: Fri 19 Dec 2025 04:43:31 +0000
Manifest this update: Fri 19 Dec 2025 04:38:31 +0000
Manifest next update: Mon 22 Dec 2025 07:30:31 +0000
Files and hashes: 1: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: NaHe5YrxTvb1T+B86yAscpluwifFSNcBhISUAGBKlIw=)
2: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: juQ/cwjH1toIUGh+4Z6y41hGaf2rFqJaltHbfzkfdBc=)
3: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: CbiBxaX9ddBH1o7nomW/iHw3KqeexSYJrX7KRnYKypE=)
4: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: iSq6NwogxUEJNuToH4CRAdLPA94Ifhymd/i0qK2RpFY=)
5: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: +PmFbdoieOm1HYaiDNoJSgRpm6MfVAVtuXNpglouU7g=)
6: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: PLR5JgPEervTPecUXZiZDmLWFwTBu9T/3wAVKLsZTQQ=)
7: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: aO0x+zXgbPOIjgzHxX0fAcf+6eJJ6z747uBT9dWocuM=)
8: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: WYN4mrwjKunsGp4uZVpUx9nBxwBDSeavyWVXTw8bEXE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl
rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 07:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:64:60:d5:39:6b:f4:9b:45:38:d8:86:a6:98:80:93:05:19:a4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Validity
Not Before: Dec 19 04:38:31 2025 GMT
Not After : Dec 22 07:30:31 2025 GMT
Subject: CN=E6BDBF8A2031DA0F5C34B8733B862D2215D5ACBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:83:96:e7:44:ba:57:d7:13:e6:58:83:8c:
2a:7c:88:19:aa:32:8e:eb:8d:8a:8e:c3:f8:64:6f:
a4:9a:13:5e:f9:13:66:e6:61:c0:57:0a:0d:36:f5:
2c:6d:7a:07:57:de:44:d2:29:86:c0:a1:89:53:75:
61:5b:55:bf:c7:df:38:d3:68:63:39:64:b5:6d:3d:
a0:46:04:bd:d0:fc:68:98:1e:25:62:e5:db:2f:42:
95:b5:60:64:69:95:e9:31:f8:94:b6:71:b1:f5:0f:
c7:4f:ad:78:5a:ad:a0:fd:c6:7a:a4:85:53:f8:f9:
bc:f8:93:d5:e1:58:ce:7c:08:e5:8f:ee:49:86:9e:
3c:d7:bb:93:42:49:ec:d4:8d:6a:88:f1:fe:6f:5b:
96:68:cf:ab:06:ba:6a:94:4e:08:5a:e6:ed:09:76:
91:a2:04:eb:48:ba:0d:88:8e:6c:55:37:88:a9:38:
22:e9:65:8e:7e:4b:d9:41:db:c6:05:c6:26:2a:51:
bc:d1:de:1e:15:5e:a6:6c:8d:e0:11:cc:db:b1:4c:
6c:be:49:06:03:cd:a2:96:33:2b:a4:97:c4:ea:c8:
84:c0:68:48:80:07:35:91:c0:fd:50:49:dc:f3:fa:
ef:a3:f5:b8:66:1d:2e:2c:e7:fb:5d:ed:aa:0a:04:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:BF:8A:20:31:DA:0F:5C:34:B8:73:3B:86:2D:22:15:D5:AC:BB
X509v3 Authority Key Identifier:
keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:43:53:eb:46:f4:2e:a8:ee:9c:9f:f3:ca:0e:75:4a:9b:67:
f5:57:c5:ea:c6:22:01:54:17:21:f9:97:05:16:22:cc:4f:45:
91:19:ed:2d:20:a5:7b:dd:c6:7f:c2:c9:8a:b2:65:19:e8:47:
67:4d:76:77:1a:bc:9b:e6:0b:4c:5a:46:74:fc:2c:9d:88:cf:
b2:7c:3f:09:6e:40:46:79:f1:9d:e0:d7:b4:38:25:73:15:2f:
29:10:92:3f:8a:18:05:7f:3a:af:a8:7d:ea:cb:56:8a:dd:5e:
15:48:a2:00:97:40:67:6e:c7:0c:1d:bb:e6:dc:8f:2c:15:e0:
9a:82:44:10:db:25:fe:10:6f:6e:dd:e0:13:be:ed:15:9b:bc:
65:5b:ad:03:4d:9f:cc:1a:8e:83:b3:9d:3b:20:c9:97:7f:3c:
8c:32:28:97:e1:76:23:06:59:7d:1d:d7:b6:d3:c4:e6:fd:07:
f1:45:15:ed:09:b3:82:c0:ed:29:f7:93:71:f0:30:4b:c0:0b:
f6:7e:6b:8c:5a:5f:d0:79:ed:00:c8:c9:c7:3e:ed:c5:9e:ff:
67:3e:c9:49:a1:1c:23:3e:6d:8f:d0:3c:0a:02:93:a1:46:62:
77:7f:0c:b3:5d:23:60:de:ac:fd:78:97:2f:77:cd:7d:61:c1:
c4:0b:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:43:10 2025 by rpki-client