This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json)
Hash identifier: BoHNduxj0l/DMzcje38DDrpDO6XrX2gSlLZOxWkB7Sw=
Subject key identifier: 65:56:2A:C3:84:A5:AF:1D:23:F0:0F:78:65:E1:20:A6:A8:4D:06:B4
Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B
Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B
Certificate serial: 3B7CA1D2FD94AF790AA68260EFFD8E7116D1730C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
Manifest number: 0137
Signing time: Tue 16 Dec 2025 19:43:59 +0000
Manifest this update: Tue 16 Dec 2025 19:38:59 +0000
Manifest next update: Sat 20 Dec 2025 05:12:59 +0000
Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: P5yCgbu9DWbENSWLIGGLUtu/mg9FMdAYFSOg4TOSKnE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl
rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 05:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7c:a1:d2:fd:94:af:79:0a:a6:82:60:ef:fd:8e:71:16:d1:73:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B
Validity
Not Before: Dec 16 19:38:59 2025 GMT
Not After : Dec 20 05:12:59 2025 GMT
Subject: CN=65562AC384A5AF1D23F00F7865E120A6A84D06B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:00:f7:cd:0a:47:a6:52:60:b9:23:61:1d:
58:2d:41:10:f3:bb:28:f4:44:0d:64:b3:fc:58:0b:
5f:35:27:a2:86:8f:8b:28:fa:89:91:39:2f:1c:ae:
b5:57:10:12:2b:be:58:78:e8:8b:98:7c:92:93:d9:
5b:f7:e8:3e:aa:48:c5:a8:a4:64:fc:bb:b0:76:fc:
1d:f0:45:88:15:2f:5f:cc:a7:85:ff:b0:61:9e:92:
8b:43:fa:26:c9:2e:b4:15:b0:2d:6d:26:df:04:78:
7f:85:c9:5f:0c:ea:4c:e3:ac:3a:7c:9d:c9:f3:a0:
d2:88:5e:9e:66:f3:bf:b4:ae:e9:c5:6f:44:f0:3c:
aa:a1:07:1e:97:c5:81:11:dc:7f:a0:a8:b4:99:1c:
32:4d:c9:21:cd:c4:4b:a1:38:bf:2d:58:55:88:ef:
ea:98:6a:92:00:4d:ba:48:0f:d0:6a:a6:a4:b4:da:
52:ae:63:13:06:c3:d4:63:15:39:2b:16:fa:c9:46:
6d:c4:75:23:c2:5b:f7:41:2e:ee:f2:89:90:bd:6f:
42:f7:43:89:90:e9:d2:6e:3a:6e:47:9a:08:74:72:
5e:47:f4:ea:1a:49:53:13:a5:3a:5d:e0:50:3a:5a:
7b:6e:b1:18:de:56:02:c8:bc:95:f8:f8:1d:c4:c5:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:2A:C3:84:A5:AF:1D:23:F0:0F:78:65:E1:20:A6:A8:4D:06:B4
X509v3 Authority Key Identifier:
keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2a:7d:f3:a5:f3:7b:bf:28:21:d1:42:c2:76:e8:c2:3a:bf:
db:24:ad:9f:96:68:b9:77:e0:63:32:82:e3:c3:4f:43:c0:06:
6e:88:6a:56:a9:aa:57:75:07:e8:2f:6b:f1:3b:44:2e:22:60:
39:9e:48:96:86:3f:3f:9d:bb:3a:78:93:f7:a6:c8:f9:3a:8c:
a5:30:16:97:7e:b9:41:c2:75:b5:28:4e:7a:0e:35:64:15:da:
0c:16:21:64:89:13:39:e9:f2:88:82:b4:84:dd:0b:ea:a0:ad:
d9:30:35:71:b6:75:aa:15:f0:3d:5e:3e:34:70:1f:c6:8e:8c:
ca:a4:07:ec:ec:e2:3b:21:72:66:e3:6c:f7:88:52:46:32:5d:
2f:3a:85:1b:85:dc:84:78:18:5f:11:db:4b:62:61:cc:c0:bb:
98:3d:12:58:ea:6d:cf:fd:a5:cd:2b:d5:8b:be:2b:ac:df:c6:
79:ad:06:ca:78:19:f8:97:18:c2:35:4a:7f:cb:77:e9:69:c8:
0c:79:34:df:6d:83:58:2f:1f:cf:76:a5:23:b0:fd:2d:9a:f8:
51:4e:6f:d9:e2:72:d0:13:e8:e4:b1:84:94:3a:ba:7d:12:11:
99:09:58:b5:ce:37:fe:2b:65:8e:ad:2b:90:17:e8:19:fd:66:
a8:ce:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:08:31 2025 by rpki-client