This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
File: 781285AE1A8C595D354913D0B93F6982FCDFD898.mft (raw, json)
Hash identifier: 6bJ2Hsx+c7PLGLk8i6kNr6605y4Sy3YrRWM2DpwNI/4=
Subject key identifier: F1:91:0F:B8:68:73:67:FC:8C:BC:78:BA:A0:BA:79:A3:0E:08:3F:1A
Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
Certificate issuer: /CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Certificate serial: 0103534DD3F5C5110CB1E314526935A975DEC350
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
Manifest number: 01CE
Signing time: Thu 18 Dec 2025 00:21:15 +0000
Manifest this update: Thu 18 Dec 2025 00:16:15 +0000
Manifest next update: Sun 21 Dec 2025 02:12:15 +0000
Files and hashes: 1: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: 2BdVqKJM7wkCXb7z3xWM42z8nq2M+ZXCEKBrPXEyNn4=)
2: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: rVykKz8Sijcwgrjh36jl66i5jYhje07nNSzwkGxxcIo=)
3: 781285AE1A8C595D354913D0B93F6982FCDFD898.crl (hash: PfTPtLbDtqKu8I4GFxMR9P75rJ8EmyefunsshWHNnhw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl
rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 02:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:03:53:4d:d3:f5:c5:11:0c:b1:e3:14:52:69:35:a9:75:de:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Validity
Not Before: Dec 18 00:16:15 2025 GMT
Not After : Dec 21 02:12:15 2025 GMT
Subject: CN=F1910FB8687367FC8CBC78BAA0BA79A30E083F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0b:1c:37:a6:e9:23:67:0c:7e:7d:e3:20:04:
65:0f:76:71:48:76:e4:a2:69:d2:6b:3b:21:8b:5d:
a5:bc:f0:0c:06:07:3d:16:7e:32:77:22:ff:6f:61:
b4:6f:56:c1:b7:56:db:19:19:d8:a5:61:98:e7:9a:
fa:4e:0a:c6:7d:66:34:97:4b:06:fd:ca:a2:31:36:
7f:ed:17:6b:bd:ca:fe:67:73:64:34:de:ef:03:3d:
0a:b0:d6:de:dd:80:92:3f:0d:92:22:ba:e6:ba:48:
2c:fe:51:93:3d:bd:9e:6b:82:b6:c5:66:00:1a:e7:
5a:dd:eb:1a:c1:6e:b6:80:e5:c2:3b:b9:4f:82:5a:
8a:7f:b7:c6:1d:de:a7:94:57:d9:9d:01:1f:22:68:
ac:23:83:d7:85:49:e9:6c:fb:38:bf:91:c1:a9:d7:
5a:f9:89:0a:f8:27:8c:e8:0b:96:a0:c0:cf:5f:11:
ef:ec:6a:23:f5:fd:9d:6b:9b:4d:df:7e:40:9a:1c:
a8:56:f9:ba:3e:40:d8:ce:79:cb:aa:f7:b6:e9:d4:
b3:de:dc:9e:f8:71:f9:14:0d:1b:90:41:2c:69:f2:
42:44:2b:96:36:98:db:ce:0d:47:7e:1d:91:57:ed:
ef:c9:49:2e:b8:bb:76:fd:52:d0:2c:84:2c:f1:8d:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:0F:B8:68:73:67:FC:8C:BC:78:BA:A0:BA:79:A3:0E:08:3F:1A
X509v3 Authority Key Identifier:
keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:73:12:63:26:4a:be:4b:ab:fa:4d:99:f8:e6:cd:fe:d7:8f:
4b:00:9a:76:2b:99:37:a2:fc:0c:bf:16:16:92:f9:cd:80:2a:
d5:ef:64:65:51:40:12:16:4f:73:4e:d5:f5:d9:06:41:cf:11:
fa:c8:75:89:fa:4c:9e:d1:a5:b9:59:be:6c:3f:6b:2c:f8:48:
02:c4:ee:15:33:b5:96:76:36:77:ea:8e:df:f3:93:a9:54:64:
4e:2a:ba:b3:b3:c2:7d:29:31:9e:03:13:a4:c2:78:d3:91:08:
04:3b:fc:db:5b:b8:00:62:f0:f5:98:84:10:15:1e:6a:3c:02:
45:4c:0a:4a:08:72:d7:e0:3a:82:ed:0b:b6:3f:bc:32:91:e9:
ed:da:32:58:41:86:bd:3d:81:65:b8:1a:a8:19:ac:e9:cb:51:
aa:e3:e8:3d:69:9e:44:b5:8a:78:8b:7b:c9:0a:f6:e3:6f:14:
c1:5d:f6:7f:5b:0d:e7:70:b7:b9:cc:b0:ba:73:59:04:96:87:
d9:aa:2f:78:c8:43:9f:ea:94:0a:75:2c:48:10:07:65:da:67:
bd:de:98:da:9a:d9:3a:1a:4a:b1:f9:c5:be:3a:14:d9:31:ef:
77:03:2f:46:1b:70:37:ac:c8:62:d7:29:2d:fb:01:6f:43:17:
55:5e:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:33 2025 by rpki-client