This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json)
Hash identifier: PjPcTPBSqXCWzaqJgGEM3gl3JGWYGjIta8PLliTcbtQ=
Subject key identifier: 73:87:25:5A:BE:02:3C:E5:A4:03:EB:88:CE:34:D6:56:E2:E9:1F:4F
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial: 2599B0AAF63D5FCA397C8E879F0B52AF11122D45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
Manifest number: 0254
Signing time: Thu 18 Dec 2025 12:42:24 +0000
Manifest this update: Thu 18 Dec 2025 12:37:24 +0000
Manifest next update: Sun 21 Dec 2025 22:08:24 +0000
Files and hashes: 1: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: kHI75bwIvIzicsWXh5XwN4lPfHoKJB9bI/nvUR/Wzmg=)
2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: eoTBfzq8y4bEDLADbH3GXH2pd0CIGqJzNCdlfnqwOuA=)
3: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 22:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:99:b0:aa:f6:3d:5f:ca:39:7c:8e:87:9f:0b:52:af:11:12:2d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Validity
Not Before: Dec 18 12:37:24 2025 GMT
Not After : Dec 21 22:08:24 2025 GMT
Subject: CN=7387255ABE023CE5A403EB88CE34D656E2E91F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:fc:69:ad:91:a3:37:be:5d:e3:9e:b3:5b:
11:3d:40:f6:3a:fd:18:9c:3d:10:99:db:33:f6:d5:
25:42:88:ad:08:f3:94:6d:a1:3e:76:8b:84:09:21:
0f:be:ad:8e:a6:7c:1c:1c:1e:4c:7c:d4:79:71:f1:
80:01:c8:07:eb:2a:ba:63:3c:84:a7:3d:a4:45:de:
98:7e:55:fe:30:9f:d6:a1:20:a9:55:b4:35:3a:9b:
a8:42:0d:43:23:81:4f:93:0e:71:6f:fb:07:c1:0e:
88:7d:77:14:91:2d:f6:f6:9a:2b:3c:b4:46:ba:5b:
65:95:df:8e:96:89:dc:29:78:c1:d1:7e:90:f6:6b:
55:c2:ca:fb:04:45:d9:2c:f8:39:a8:82:f8:f2:9c:
12:99:16:a2:c3:c3:3e:b7:f4:89:85:0d:08:98:d8:
59:41:a0:87:60:68:44:42:18:5a:cf:ee:ff:be:b2:
08:2f:17:b9:ab:66:50:21:d5:21:ec:96:29:b4:dd:
06:26:55:7f:2e:c9:d5:49:98:87:24:50:76:d1:10:
02:fc:2d:f5:12:7c:ff:81:79:3f:3d:16:4f:96:95:
3b:5b:e2:0c:05:96:32:3a:c5:00:02:27:68:3d:b0:
3b:5b:9c:58:d0:95:4f:c3:c7:90:66:00:7a:42:d5:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:25:5A:BE:02:3C:E5:A4:03:EB:88:CE:34:D6:56:E2:E9:1F:4F
X509v3 Authority Key Identifier:
keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ed:38:0f:f6:2a:79:d7:6e:4d:f9:ae:3e:0e:12:b9:0c:c9:
8a:ab:9d:07:40:ae:b4:2e:11:bc:30:63:5d:61:6a:36:98:0c:
b3:db:e3:d9:29:fc:df:a4:b8:9d:87:58:4a:d3:0b:f4:43:24:
fd:6a:e4:ba:6c:b9:0d:ad:8a:73:2a:af:a4:e4:36:25:42:d9:
0c:77:42:58:f4:ae:ac:a2:ca:d2:52:5c:3c:6c:94:2c:77:5d:
32:28:32:4f:3d:00:07:8a:1f:12:c9:cd:a0:ca:92:68:cb:f1:
d3:79:93:0d:9f:e3:8f:ad:e6:a1:4f:70:c1:4f:0c:5d:26:35:
34:16:fd:ef:57:5a:c5:07:14:b6:82:5e:12:a6:46:09:ba:af:
5f:d3:17:8a:bf:05:a1:a2:3d:46:3b:bb:08:45:35:14:81:fb:
2a:d8:7a:60:53:41:a2:7b:2e:fa:65:c6:48:93:99:29:e4:3e:
9b:a6:30:1b:f5:69:f3:b5:83:70:98:68:64:24:27:1a:e5:8f:
cf:fa:47:81:eb:a7:64:11:aa:b7:cd:4b:f9:9c:17:54:bc:5e:
a9:36:85:47:e2:36:18:1f:a3:fd:3d:91:34:35:a3:27:d2:30:
fb:75:cb:5c:8d:fb:f0:f2:26:20:39:da:18:e4:96:e4:1f:9c:
08:1e:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:57:29 2025 by rpki-client