This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json)
Hash identifier: 7fMt7clFe5+21Mjftpa40rpIzmb8/oT2e0kNPYqWRiQ=
Subject key identifier: 7D:F9:B1:5C:D5:64:25:96:C1:53:35:B8:BB:3F:DE:BC:B3:34:38:0F
Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Certificate serial: 7EC4A607E680570628C5E23D3C4B05F47DAFB003
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
Manifest number: B1
Signing time: Wed 17 Dec 2025 23:00:52 +0000
Manifest this update: Wed 17 Dec 2025 22:55:52 +0000
Manifest next update: Sun 21 Dec 2025 03:40:52 +0000
Files and hashes: 1: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: +4jn9yUTCERVA3g9fI3ooLPb8eRAkmcilsOk4E3ZshQ=)
2: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: eSAbtueEpJZRBDA0ANlTuPd/iwQRhZw6rSGSlWYVEdk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl
rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 03:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c4:a6:07:e6:80:57:06:28:c5:e2:3d:3c:4b:05:f4:7d:af:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Validity
Not Before: Dec 17 22:55:52 2025 GMT
Not After : Dec 21 03:40:52 2025 GMT
Subject: CN=7DF9B15CD5642596C15335B8BB3FDEBCB334380F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:26:2b:fb:92:c7:ed:ca:0a:98:f6:ed:eb:
14:42:d3:2c:f8:63:9b:3e:1b:e0:49:71:8b:e5:11:
c7:3e:e3:b4:39:39:03:d9:dd:cb:b1:31:22:c1:a7:
ea:60:12:50:76:61:57:c3:e3:cf:f3:82:45:bc:d4:
b1:35:53:f4:7f:ee:db:34:82:e8:d8:5e:37:7a:b0:
48:b8:4c:5e:ce:0f:05:ca:0b:7f:63:b6:c2:25:48:
93:52:5b:50:1a:36:2b:05:af:40:8e:90:bf:21:85:
b3:b3:65:2c:1a:dc:f5:e6:69:21:c9:db:6a:08:9b:
0a:0e:bb:87:8a:44:3f:15:b5:30:74:9d:dd:f8:e2:
dc:05:d4:e9:1c:ae:da:e0:ca:d2:14:f3:ed:f7:04:
77:ae:54:16:69:ac:8b:e1:c2:7c:df:6e:f7:7e:79:
e4:fd:07:7a:8a:33:2c:68:5f:23:69:07:84:36:61:
d0:b7:a0:88:8b:5c:84:76:0a:04:1d:3e:bd:63:b5:
9b:99:38:0d:66:6e:b0:40:04:5a:c5:fa:fe:05:90:
cf:2f:59:3b:ad:df:ea:c1:79:43:df:b4:3d:17:2f:
af:53:35:8a:d4:81:a8:40:b4:b6:b8:e8:3c:4f:d8:
40:17:75:9e:1c:49:ef:5e:3c:ed:2f:b7:cb:1d:2f:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F9:B1:5C:D5:64:25:96:C1:53:35:B8:BB:3F:DE:BC:B3:34:38:0F
X509v3 Authority Key Identifier:
keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:f2:2e:bd:a9:22:1e:bb:f3:64:fe:79:76:f1:71:61:a6:
cf:3d:5a:24:ce:fa:f4:c2:c7:4d:b4:ef:8d:69:3f:e9:45:ff:
30:b8:20:58:e6:42:6b:63:ca:e6:86:4a:d3:fa:84:3b:43:85:
7b:e9:ae:28:c7:aa:6d:d3:07:e0:14:5e:d1:5a:13:31:6c:09:
01:51:09:d2:39:c2:ec:43:bd:f3:81:b2:d0:cd:6d:10:b8:22:
82:55:f3:bf:4c:af:70:61:39:83:1f:93:4d:ac:36:12:e3:e1:
e3:f2:ce:37:a9:a3:2f:01:a0:61:f2:da:4f:22:77:f9:83:02:
75:0f:1b:fd:60:4d:cf:9c:cb:c1:58:b9:f8:0a:1c:ab:0d:a6:
92:e1:87:bd:4c:d2:45:65:d3:74:d3:94:06:c6:38:25:14:e7:
75:17:68:df:13:c5:e6:a3:2f:35:70:7d:30:17:02:cc:ba:4a:
7a:b5:65:b1:57:3e:39:27:65:db:0f:4a:69:f5:16:c2:91:fd:
60:d0:61:7e:f8:33:c3:fa:53:97:02:66:88:5c:d2:0e:b1:80:
9b:99:17:67:b4:ad:c8:77:4b:ee:a0:cb:d3:08:3c:fb:29:99:
a5:5e:ca:68:40:9c:5f:a7:1e:4a:8f:58:3a:a1:11:7c:2b:15:
73:77:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:16 2025 by rpki-client