This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
File: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json)
Hash identifier: DpqHVKlOSkb6zqSWcsrIpuQD6O3WEKGRN3alxFUiork=
Subject key identifier: 8B:00:77:AB:42:60:DB:38:D3:A9:AB:41:DD:77:3E:E4:49:92:8A:E6
Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
Certificate issuer: /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Certificate serial: 6F007E94F7294BEA8C6C7A01D892612965430CA8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
Manifest number: 0127
Signing time: Tue 23 Dec 2025 16:52:32 +0000
Manifest this update: Tue 23 Dec 2025 16:47:32 +0000
Manifest next update: Fri 26 Dec 2025 20:27:32 +0000
Files and hashes: 1: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: 7Av//tJaFwT8z6GFSW7uk6ehjT5V0e5+FTRipECyI0I=)
2: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: MWGkE6CsRSWqMBYLVPUy9HMPTSzmfg1RhCwIFa2snrk=)
3: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: YM9KbHhAudmxJLriUiNFwnyRKQIeMezebhltKdO9iVg=)
4: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: qkf+7wpzA/AZ72CLc+Jt7s0XKVXBzDYOldkfFem/lQU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 20:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:00:7e:94:f7:29:4b:ea:8c:6c:7a:01:d8:92:61:29:65:43:0c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Validity
Not Before: Dec 23 16:47:32 2025 GMT
Not After : Dec 26 20:27:32 2025 GMT
Subject: CN=8B0077AB4260DB38D3A9AB41DD773EE449928AE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:9b:3b:f9:6d:0a:13:28:e1:2c:1b:00:0a:
81:35:56:e7:88:6d:03:bd:87:ba:a5:86:93:dc:40:
e9:34:60:41:15:e7:4f:56:d0:7a:8d:18:a6:93:48:
7c:34:93:b2:52:5c:c6:da:d8:88:0d:c7:0c:22:41:
8b:1a:41:13:77:bc:c0:f2:80:38:c4:06:91:17:73:
47:7a:6a:f1:38:18:8c:80:03:79:88:cf:25:76:c7:
0b:5f:f6:84:d0:1b:4f:c5:7e:36:75:90:84:e1:3c:
e4:39:5d:c4:58:6a:9c:be:a1:a3:25:4a:9f:e6:6d:
bf:a8:42:e7:14:23:40:44:d8:0c:fd:78:ac:99:cb:
e7:68:e2:4f:c2:66:11:69:d0:20:c3:57:a7:3a:dd:
c3:14:60:37:97:be:4e:fc:ad:ed:ea:23:35:ec:4a:
3c:58:19:41:a0:3c:d0:44:7d:8b:2d:29:4c:45:c0:
79:45:df:da:f3:06:40:6a:3d:46:1f:6c:a1:9c:11:
be:0a:9b:cc:2d:bc:9b:a4:f8:62:63:a8:ba:79:b1:
f6:fa:5e:60:24:c7:51:b7:19:09:d7:34:53:bb:91:
2b:5e:ff:9b:1b:f3:54:15:27:99:3b:96:8b:e0:4d:
97:19:4e:53:03:12:32:bc:7c:06:6b:f9:e4:5a:02:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:77:AB:42:60:DB:38:D3:A9:AB:41:DD:77:3E:E4:49:92:8A:E6
X509v3 Authority Key Identifier:
keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:52:ee:25:c8:c0:a0:71:31:f9:b7:b8:d1:a2:2f:8c:e3:66:
37:89:26:dc:9b:83:14:24:0b:6d:9a:0e:2b:92:88:cc:68:7a:
a3:46:a5:1c:f3:7b:21:9e:1a:31:33:d0:52:db:da:e6:0b:23:
10:56:df:f8:9c:ed:e7:98:ad:27:cb:ad:f3:1b:a1:4b:a2:7a:
df:e5:cd:3a:f5:36:88:a7:ee:c5:64:8b:cb:76:88:b6:f9:5a:
97:c1:b6:23:cc:58:35:73:3c:51:20:f2:a0:c3:88:35:42:a5:
50:ee:39:34:41:4a:63:86:71:c2:95:6c:9a:fa:8e:52:da:f3:
7a:2b:98:37:30:2b:8d:2d:2b:bc:96:15:63:39:ae:f3:eb:a6:
3e:fb:8c:a2:8f:62:09:c8:49:59:69:bd:01:b4:3f:2c:41:f7:
06:f4:c5:d5:aa:f5:15:99:d6:da:fb:f6:b1:a8:cb:0d:eb:ea:
c4:4f:c5:7b:f9:20:fe:f6:eb:75:3f:97:85:2b:21:9a:a8:7e:
02:88:46:91:b4:0d:ab:f4:42:8b:0b:f9:7b:1d:83:ec:59:61:
4d:9e:65:59:e0:da:d8:c9:86:70:42:58:e5:c0:a4:b8:f5:74:
90:58:f8:23:37:6f:46:84:e6:57:83:55:cf:13:dc:01:b1:2d:
9a:b3:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:03:33 2025 by rpki-client