This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json)
Hash identifier: VYOEdqpiNCgtKsHKFKIi/NDlHOQHHKnAZPVErlUJ7QU=
Subject key identifier: B6:49:70:92:E3:A3:F1:DC:CE:5F:64:F6:1F:34:01:35:8C:33:F9:89
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial: 424E419776AEBFFE24EDB96066B48DFB56430A24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
Manifest number: 04D7
Signing time: Tue 23 Dec 2025 22:02:46 +0000
Manifest this update: Tue 23 Dec 2025 21:57:46 +0000
Manifest next update: Sat 27 Dec 2025 08:51:46 +0000
Files and hashes: 1: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE=)
2: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=)
3: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=)
4: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: ryaE/izFvKb50RmFTsvTd9uhbRZaeR/WJjExYGfG7og=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 08:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4e:41:97:76:ae:bf:fe:24:ed:b9:60:66:b4:8d:fb:56:43:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Validity
Not Before: Dec 23 21:57:46 2025 GMT
Not After : Dec 27 08:51:46 2025 GMT
Subject: CN=B6497092E3A3F1DCCE5F64F61F3401358C33F989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:f1:4d:49:63:42:12:7c:2f:4b:34:2b:45:
d7:04:d8:3f:0a:2f:60:b3:8a:4b:91:ff:9d:1b:6e:
da:fa:f2:48:40:c4:ff:49:fa:73:da:35:51:3f:d8:
52:98:16:85:9d:6d:a8:92:e6:10:3c:47:3d:0e:07:
a8:58:5e:95:31:5b:7d:03:e6:7c:f7:a5:15:26:2f:
85:11:a4:2c:8e:53:a7:40:4f:aa:46:79:36:8c:20:
ce:73:37:17:96:f6:30:f3:24:9f:f4:60:d9:2f:cf:
7d:c6:6b:7d:2b:c7:f5:27:d0:24:7a:5f:e8:b7:9f:
60:e7:eb:df:4f:7b:96:72:ec:ff:05:2e:16:15:9f:
09:44:1a:81:69:0c:cb:df:fd:92:ca:7e:61:a7:89:
3b:9b:8d:26:1e:9d:b7:61:9a:76:cc:0c:9a:ed:9a:
80:95:6e:25:f2:f8:a5:f8:2c:9d:8b:aa:1f:63:71:
08:6c:82:e5:35:ef:f4:e7:06:d0:a4:0c:1f:21:06:
1e:32:99:00:e7:8c:d9:24:5d:f9:65:c2:a8:21:b0:
da:8f:1e:9b:84:12:a3:86:39:a0:3a:2e:27:4d:11:
50:75:93:8d:44:97:c9:df:6f:b2:7e:08:55:7e:8e:
c9:d8:00:dc:ab:69:88:9e:07:64:32:3d:ab:de:62:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:49:70:92:E3:A3:F1:DC:CE:5F:64:F6:1F:34:01:35:8C:33:F9:89
X509v3 Authority Key Identifier:
keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:aa:ac:fc:70:8d:38:a0:47:dc:aa:58:7b:b1:b0:95:41:1f:
d9:f1:42:c4:19:c4:be:62:24:55:16:f8:cb:1f:d6:83:dc:0c:
94:19:e0:0f:2b:03:e0:cb:1d:4a:ea:d9:59:cd:db:e6:38:d9:
40:d1:fa:d4:fc:e1:29:ab:dd:da:02:1c:32:0c:ca:aa:8d:40:
4c:2c:3d:85:01:ab:9c:e9:37:29:f0:5a:dc:d7:c5:e7:d0:9f:
a8:1e:03:16:19:c4:65:3c:03:82:2d:d6:7a:9a:a5:fa:b6:37:
37:24:52:aa:e7:3d:21:de:f9:83:97:2e:e1:85:95:73:34:8e:
2e:70:e5:3d:ad:2c:c2:7a:87:a8:60:ed:3c:e2:a9:3c:7c:80:
6f:c6:03:1b:06:fa:98:4e:42:72:7d:6c:4a:8a:ee:80:58:05:
78:b7:c8:8d:d7:98:1f:1e:5a:b5:e9:dd:fa:3f:67:cb:55:3d:
7e:58:89:15:e8:fc:18:7f:62:4c:86:f2:8a:fd:b8:57:1b:63:
6b:3c:11:85:7a:90:8b:62:77:9d:ef:85:eb:f4:02:29:ac:da:
9b:66:76:36:16:3e:68:af:1e:7d:9a:4c:55:6c:69:d0:22:ae:
00:76:29:14:fd:cd:a7:c2:11:7c:ab:60:7e:2f:a6:1e:56:f9:
24:c5:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:25:19 2025 by rpki-client