This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json)
Hash identifier: srug+5cfisEBtc92BhlnUkio5p/K+xKizS6drSO/Z5o=
Subject key identifier: 61:07:29:7F:D1:A4:D6:B5:A5:63:39:9D:84:93:15:64:50:62:F9:05
Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374
Certificate serial: 3E94CDD8D8F4946CF74E1E3104796B45754B586F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
Manifest number: FA
Signing time: Thu 25 Dec 2025 00:31:27 +0000
Manifest this update: Thu 25 Dec 2025 00:26:27 +0000
Manifest next update: Sun 28 Dec 2025 06:39:27 +0000
Files and hashes: 1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=)
2: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: CnFWPxLBDg2autGwd8uFUbqEDQqwMZNtF2VjdC0E8SA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl
rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 06:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:94:cd:d8:d8:f4:94:6c:f7:4e:1e:31:04:79:6b:45:75:4b:58:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374
Validity
Not Before: Dec 25 00:26:27 2025 GMT
Not After : Dec 28 06:39:27 2025 GMT
Subject: CN=6107297FD1A4D6B5A563399D849315645062F905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:8d:1e:9c:9e:29:3f:98:e1:d2:4d:07:72:
fb:c9:2b:c7:99:6f:61:b5:5f:8b:d0:f6:f6:0f:be:
4f:28:17:d0:26:a9:1f:71:0a:98:82:07:3e:cd:8f:
64:00:bd:c9:4c:da:8b:ca:58:85:85:a8:2b:7d:2f:
8e:30:ee:af:88:48:4a:bc:14:f9:1d:c9:75:a8:1b:
9e:64:37:29:d1:4c:73:32:4a:47:05:3b:42:7a:21:
70:e8:36:ad:4d:12:65:9c:30:09:e1:fe:53:eb:05:
27:42:f4:fc:22:8a:6f:a6:d1:a4:a7:88:56:65:22:
2e:0c:a3:b6:90:7a:b1:d3:e1:58:7d:39:28:85:6c:
df:a7:87:10:ab:bc:96:6c:95:23:f0:c9:bc:18:a3:
a3:00:1f:74:1a:9a:5a:5f:50:a5:87:53:62:c8:08:
f2:60:c3:96:81:a3:46:fa:ed:08:6e:9b:e1:1c:f7:
f8:47:53:20:97:2f:f4:40:e1:8c:e6:99:fb:84:25:
26:a2:c4:f4:43:52:f5:64:28:cc:fd:01:1b:26:15:
18:5b:95:21:ef:e6:5e:b5:79:9a:5a:a4:33:60:38:
41:98:1e:2d:b5:37:0d:fb:d1:56:fe:93:26:0d:ab:
4c:9c:d3:9a:5a:01:74:56:b5:b2:97:78:b5:ae:3d:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:07:29:7F:D1:A4:D6:B5:A5:63:39:9D:84:93:15:64:50:62:F9:05
X509v3 Authority Key Identifier:
keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d8:1f:f6:48:bb:6b:81:03:d7:ae:30:b5:c4:99:21:44:b7:
1c:f1:2a:18:33:b7:46:08:52:1b:80:e0:f2:65:c1:b7:05:96:
5c:8d:5b:e2:6f:f9:59:69:38:33:a7:35:35:0a:00:1a:b2:a9:
12:dc:1f:cf:8d:17:07:64:28:43:27:75:93:d3:ed:95:34:b8:
74:76:29:ff:5f:49:74:64:91:b9:d0:95:23:16:c1:e2:9e:fa:
5c:5f:38:59:28:a8:8f:8f:61:03:ae:d4:1d:5c:8a:08:4b:54:
a9:da:77:c3:74:4c:ae:6e:f5:2b:7a:40:29:3e:b2:c7:7e:70:
77:18:54:e8:2c:e1:64:95:0e:b6:39:3f:42:87:77:14:74:66:
ee:aa:d0:b0:da:6e:37:75:1d:b5:3e:72:ac:91:02:77:56:d7:
11:92:1c:9f:56:19:0d:e7:91:77:d7:58:12:1d:80:be:03:23:
6d:5f:66:0f:42:19:be:a7:14:29:e8:6d:d7:ba:d3:89:aa:c5:
4c:19:75:2a:bc:d7:45:f9:5c:b2:36:05:d4:b2:ab:2b:64:87:
9a:78:5e:25:7a:da:ac:90:a6:e9:b4:8a:f2:e9:54:4d:6a:c2:
94:4e:76:28:47:af:52:50:86:a6:be:72:1a:77:98:39:95:7e:
8c:b4:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:32:42 2025 by rpki-client