This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
File: 1762D22131EE967D86536D2B475A9A8C08CE6003.mft (raw, json)
Hash identifier: 7mTWsNXvw8sJuv4RBNmUl7UnH6mKRCTZ0BAEVk1jaSo=
Subject key identifier: 30:5F:A3:C8:C1:06:F6:F2:C8:35:AC:D4:4B:1A:C6:68:5C:94:16:0F
Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03
Certificate issuer: /CN=1762D22131EE967D86536D2B475A9A8C08CE6003
Certificate serial: 335783A6B6F404FF7D6E0239A2F6FDD78B95FA4A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
Manifest number: 035F
Signing time: Sat 20 Dec 2025 11:41:28 +0000
Manifest this update: Sat 20 Dec 2025 11:36:28 +0000
Manifest next update: Tue 23 Dec 2025 19:39:28 +0000
Files and hashes: 1: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: uumiLUQfphgqskF7mpd6oqfDDTxMSTqQ7X8YmHylWvY=)
2: 1762D22131EE967D86536D2B475A9A8C08CE6003.crl (hash: rCzBYkBaTvfvsB72Qo9u4ypc8MMftw6cAswfxbIeMNk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl
rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 19:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:57:83:a6:b6:f4:04:ff:7d:6e:02:39:a2:f6:fd:d7:8b:95:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003
Validity
Not Before: Dec 20 11:36:28 2025 GMT
Not After : Dec 23 19:39:28 2025 GMT
Subject: CN=305FA3C8C106F6F2C835ACD44B1AC6685C94160F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:6b:3c:d9:ee:69:7b:45:5f:4b:45:62:87:
a1:40:c8:78:0a:8d:fb:ab:dc:71:43:2a:53:61:ee:
b5:85:ec:06:6f:4e:18:0f:fd:03:36:b7:86:f0:56:
e1:54:3a:52:bf:7e:c4:42:43:c1:0c:9d:01:56:aa:
87:ef:fe:be:9e:8f:0c:b8:ca:53:02:9d:cd:1d:1f:
9d:a8:47:a6:6d:f4:82:bc:a1:4d:99:da:4a:61:e4:
62:ff:9f:c1:9d:bd:a7:67:11:ae:47:26:4f:36:d6:
f1:2b:cc:13:19:6b:f7:7b:ec:bf:bd:76:29:a1:09:
ef:f4:e1:36:01:6d:33:33:9c:03:3c:9f:07:d1:3c:
25:ba:78:1e:49:7e:42:0a:d3:52:85:09:2d:00:21:
21:be:23:13:75:5f:95:68:be:09:44:48:0b:cd:80:
d6:21:6f:f8:71:3f:a3:84:69:b1:72:8c:7a:ae:de:
8e:a6:8f:b6:f2:81:4e:c6:89:c6:26:91:15:a2:3f:
f4:e2:88:a5:bd:af:ff:34:94:70:50:03:d9:a6:93:
46:f6:d4:96:15:6c:55:98:5f:e4:5c:d8:0e:09:83:
cb:a4:d1:cc:51:c1:14:de:9b:a7:90:6d:dc:f7:13:
af:71:ca:c5:97:3e:5d:7d:4c:07:ec:51:35:06:d8:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:A3:C8:C1:06:F6:F2:C8:35:AC:D4:4B:1A:C6:68:5C:94:16:0F
X509v3 Authority Key Identifier:
keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a8:a2:9f:af:04:0a:f0:7e:50:da:13:27:52:3a:a0:24:87:
58:f8:b9:a6:16:03:28:2a:3a:26:2c:17:fe:c0:05:ed:7f:c1:
62:bb:a2:f0:b4:dd:79:ee:fe:0f:54:b1:19:04:a6:15:c6:d8:
de:4c:d7:a3:bc:30:f4:45:ef:57:ab:bf:11:c8:10:a7:9c:e9:
9c:ba:b8:33:03:44:85:44:6b:83:47:e7:e1:3b:ad:8f:b4:ef:
94:f0:74:db:98:4d:cc:a6:e8:5c:89:ff:ec:a9:11:91:e8:71:
63:8f:00:cf:ce:81:70:2c:57:2e:15:1d:9d:3e:2d:4a:d0:a9:
2b:31:09:53:3b:72:c9:7c:64:0b:c6:b0:85:0c:08:bd:b5:47:
23:01:11:63:39:a2:be:ec:ec:4f:8d:34:82:ee:02:4f:36:cd:
15:bd:4f:e0:02:5d:a7:cd:42:51:6b:5a:82:57:cb:9d:58:1e:
21:f9:56:f9:07:85:e0:ed:6c:97:a8:56:62:04:d6:02:cf:6f:
93:f1:7c:4b:d8:15:2b:cd:17:47:d2:99:00:04:9c:53:3f:dc:
41:86:2c:23:b4:87:0e:1e:59:a5:0d:17:de:be:bc:eb:8a:f7:
eb:ea:07:36:25:7c:a6:97:d4:8b:42:22:56:7d:63:57:a9:56:
44:9e:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 17:08:44 2025 by rpki-client