This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json)
Hash identifier: vEaVrxkrMPwpAqVCYluVQ/GAC9gzQnM7ojM6AlRwo4Q=
Subject key identifier: A7:53:8F:E3:62:11:DD:81:8A:94:82:1F:C0:69:F1:9E:F6:49:58:75
Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4
Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4
Certificate serial: 5DFE0E9375A57445D376A398002870C4E3EC90AC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
Manifest number: 0157
Signing time: Mon 22 Dec 2025 23:12:45 +0000
Manifest this update: Mon 22 Dec 2025 23:07:45 +0000
Manifest next update: Fri 26 Dec 2025 04:59:45 +0000
Files and hashes: 1: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: inxuG0Qy/EDeARKsQkF/Pyoq7ds7jkP42hDgPf0xx6I=)
2: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Via8twfYiTOYYUS4MnDOw8zvlMb40Ue2urMBm24mYnU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl
rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:fe:0e:93:75:a5:74:45:d3:76:a3:98:00:28:70:c4:e3:ec:90:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4
Validity
Not Before: Dec 22 23:07:45 2025 GMT
Not After : Dec 26 04:59:45 2025 GMT
Subject: CN=A7538FE36211DD818A94821FC069F19EF6495875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:52:38:e9:fb:af:f4:2f:1d:17:43:b4:7a:
8c:7c:59:aa:3d:d1:dc:6d:94:f7:ea:22:c8:25:64:
49:5f:80:77:9e:54:f6:69:b8:5c:b7:11:50:79:d2:
fb:f3:10:08:b1:3f:fd:08:fd:e6:a7:05:a3:79:80:
c3:33:2a:ad:da:4c:f8:b0:6c:fa:d1:5d:65:9a:4f:
fd:00:00:00:83:f8:c4:39:d0:1f:32:4c:dd:28:13:
18:30:40:00:4c:bc:4c:24:a9:ce:fe:6b:00:4c:81:
8b:d3:60:6e:ec:01:02:3e:4a:c2:a2:e1:a0:9f:df:
04:fe:1c:77:1c:0e:6e:c5:73:d4:e7:2b:28:d3:c8:
7c:18:49:48:fb:c2:65:b3:4b:5e:4c:a5:41:17:17:
f1:30:21:5f:e7:83:3e:a6:db:53:98:a1:db:3b:25:
4d:89:0e:91:63:35:55:37:2b:b5:d3:73:59:ed:ed:
57:1c:2b:3d:8f:fa:3d:e3:ad:90:6a:e8:8c:fa:8a:
9d:79:bb:d7:c0:99:43:2b:f3:dd:ca:2a:4d:c0:da:
50:f9:1c:ff:35:64:42:8c:1f:e1:c9:3b:b2:55:6c:
22:1c:b9:94:d1:1d:70:f8:ed:24:3d:17:ed:99:0e:
e6:b0:77:7c:c2:dc:19:61:58:f8:0c:40:f1:33:24:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:53:8F:E3:62:11:DD:81:8A:94:82:1F:C0:69:F1:9E:F6:49:58:75
X509v3 Authority Key Identifier:
keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9e:05:13:61:31:83:f8:f5:b6:eb:9d:5f:ca:55:dc:e5:de:
e2:88:89:c4:6d:c5:ab:c2:7e:38:6f:9a:a8:3c:23:0e:28:e8:
b7:1a:6b:a9:a5:29:a5:07:33:01:d4:74:cc:72:fa:1e:0d:cd:
5b:a0:76:e4:ce:4c:fb:0e:3d:83:38:0e:86:7a:ef:01:c5:52:
c1:7e:79:50:d8:9d:32:c8:a4:34:0c:30:a1:58:be:9c:3f:11:
32:75:91:a3:ec:2e:e5:3f:2c:76:f5:28:12:54:48:6a:5f:3c:
a5:c1:33:08:37:6c:e5:e7:2d:32:e1:86:29:e5:96:d9:10:66:
fc:0d:15:84:0b:e0:d5:86:1e:ca:81:d5:09:f5:89:8a:00:c9:
f3:2a:33:1d:1b:3e:1d:f3:b0:59:19:dd:b5:eb:e3:c6:0b:fd:
69:9c:b4:11:6a:07:0a:49:2c:ac:4a:95:93:67:9f:42:ae:22:
45:58:6b:31:d7:d1:87:c9:7e:06:26:6c:b0:82:76:30:b5:12:
08:e3:21:09:86:31:f5:37:36:ca:46:2a:5d:c0:18:d5:7b:15:
7f:9d:75:35:4d:48:35:d9:05:5f:17:1f:de:93:4f:67:7e:e6:
97:6d:f9:0f:7b:ac:8d:e9:fb:94:95:21:19:5e:f1:2f:92:55:
27:63:2d:d7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXf4Ok3WldEXTdqOYAChwxOPskKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5
M0RBRThCNDAeFw0yNTEyMjIyMzA3NDVaFw0yNTEyMjYwNDU5NDVaMDMxMTAvBgNV
BAMTKEE3NTM4RkUzNjIxMUREODE4QTk0ODIxRkMwNjlGMTlFRjY0OTU4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7VI46fuv9C8dF0O0eox8Wao9
0dxtlPfqIsglZElfgHeeVPZpuFy3EVB50vvzEAixP/0I/eanBaN5gMMzKq3aTPiw
bPrRXWWaT/0AAACD+MQ50B8yTN0oExgwQABMvEwkqc7+awBMgYvTYG7sAQI+SsKi
4aCf3wT+HHccDm7Fc9TnKyjTyHwYSUj7wmWzS15MpUEXF/EwIV/ngz6m21OYods7
JU2JDpFjNVU3K7XTc1nt7VccKz2P+j3jrZBq6Iz6ip15u9fAmUMr893KKk3A2lD5
HP81ZEKMH+HJO7JVbCIcuZTRHXD47SQ9F+2ZDuawd3zC3BlhWPgMQPEzJMkRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUp1OP42IR3YGKlIIfwGnxnvZJWHUwHwYDVR0j
BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw
QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB
RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2
ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw
QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIyeBRNhMYP49bbrnV/KVdzl3uKIicRtxavC
fjhvmqg8Iw4o6Lcaa6mlKaUHMwHUdMxy+h4NzVugduTOTPsOPYM4DoZ67wHFUsF+
eVDYnTLIpDQMMKFYvpw/ETJ1kaPsLuU/LHb1KBJUSGpfPKXBMwg3bOXnLTLhhinl
ltkQZvwNFYQL4NWGHsqB1Qn1iYoAyfMqMx0bPh3zsFkZ3bXr48YL/WmctBFqBwpJ
LKxKlZNnn0KuIkVYazHX0YfJfgYmbLCCdjC1EgjjIQmGMfU3NspGKl3AGNV7FX+d
dTVNSDXZBV8XH96TT2d+5pdt+Q97rI3p+5SVIRle8S+SVSdjLdc=
-----END CERTIFICATE-----
Generated at Wed Dec 24 20:23:48 2025 by rpki-client