This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json)
Hash identifier: eDWHVtTysyYpQ9YdvbM+tmVs8GOjgwvCPv8h4t8Ipa8=
Subject key identifier: 3B:15:EB:3C:BB:71:AB:3E:36:32:55:89:8E:3F:45:6E:67:D9:A2:27
Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1
Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1
Certificate serial: 10CC2B83B91710757A523BB2C28C94934BDA8B32
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
Manifest number: E7
Signing time: Thu 18 Dec 2025 17:51:12 +0000
Manifest this update: Thu 18 Dec 2025 17:46:12 +0000
Manifest next update: Sun 21 Dec 2025 20:20:12 +0000
Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: HYqN+1XTKrEqmWnKv3DKgM9gKmt9aTD2c3sLRy2NAR0=)
2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl
rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 20:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:cc:2b:83:b9:17:10:75:7a:52:3b:b2:c2:8c:94:93:4b:da:8b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1
Validity
Not Before: Dec 18 17:46:12 2025 GMT
Not After : Dec 21 20:20:12 2025 GMT
Subject: CN=3B15EB3CBB71AB3E363255898E3F456E67D9A227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:08:53:7d:ea:48:fe:51:90:04:68:99:52:
e3:6a:e8:d7:dc:29:d0:73:f7:18:11:b3:6e:26:75:
c6:ef:21:e4:ee:a2:31:68:f5:4e:ac:fc:93:53:cd:
7a:81:65:b1:70:7f:07:60:2c:7a:68:43:62:6a:3d:
84:eb:2b:42:bc:53:cf:eb:48:6c:cb:9a:f3:65:0f:
f7:e8:76:10:b4:47:84:d9:84:28:83:ed:88:bf:b5:
3b:02:86:f3:b8:f2:a9:80:86:8e:2b:d3:7c:76:55:
4c:e2:b1:25:22:8a:f6:2c:11:0d:e2:84:a3:ec:2b:
a7:71:e8:e4:f3:40:f6:20:92:80:20:eb:a3:5c:62:
ec:ee:1b:3b:13:32:07:5d:ed:78:13:8f:47:0c:24:
45:41:f4:66:18:bc:29:a9:a3:b3:8e:2f:95:cf:e7:
a0:0a:ef:13:6c:1b:55:20:c4:0b:be:05:4f:ec:cd:
2c:96:df:4c:f4:aa:65:15:0d:f8:1a:f0:bf:c1:99:
2b:ba:d2:b3:38:42:e2:d0:e9:0c:47:ae:a7:e0:94:
f1:56:75:9d:17:be:1f:19:4d:4d:6a:50:aa:27:cc:
b8:4a:45:37:31:f5:6b:8a:14:f2:1c:ad:f3:42:59:
7a:f1:cb:e1:f4:21:04:7e:d9:c4:fd:ef:1d:1d:ae:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:EB:3C:BB:71:AB:3E:36:32:55:89:8E:3F:45:6E:67:D9:A2:27
X509v3 Authority Key Identifier:
keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ec:95:2b:e2:b6:41:f2:55:f3:a0:3f:11:73:be:6f:32:92:
d8:d2:03:ad:15:29:51:85:b8:a2:5a:75:4f:0b:4e:f1:ed:bc:
92:97:70:6c:09:d3:a7:30:c1:fb:7f:0e:60:91:c1:15:91:6c:
93:48:9f:12:02:76:55:e7:20:0a:f8:81:9f:6c:bd:7c:ef:47:
86:04:64:ff:b7:d0:1e:18:bc:aa:0b:4d:9e:f0:24:0b:ca:45:
bd:12:eb:7e:d6:4b:18:5a:0f:43:f0:ff:68:7b:35:78:57:2d:
f4:ae:6a:97:48:b7:dc:17:3f:7a:3e:be:bf:68:ac:e8:8d:1e:
c0:f8:8e:70:02:ec:7e:b0:ac:d0:6f:a3:13:c9:4d:e1:c7:5a:
a4:a8:c8:76:4d:e4:ff:8f:53:2b:8b:8e:51:c3:b9:df:18:3a:
50:22:f4:47:b9:76:99:e3:06:de:b1:83:62:5d:ad:f9:16:a6:
fe:95:2b:8d:5c:fd:be:9a:f5:ef:36:e9:8a:64:8f:7c:a5:c8:
0a:0a:1b:08:3f:b2:ab:b0:2a:8c:ae:68:a3:41:1f:33:43:0f:
0f:48:f6:2d:21:fc:38:36:1d:a4:a3:f8:f1:2e:18:b3:c4:7c:
6a:2f:44:c0:11:24:e8:d7:a2:2a:9b:f0:9f:99:0e:e2:af:53:
b3:e2:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:37:36 2025 by rpki-client