This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
File: 77629696624E40462330DA2AF610D32809C89E5A.mft (raw, json)
Hash identifier: Lv1H+VzzA/S6/NlA3rddifjnacaPTASPTJOyzgsP37M=
Subject key identifier: 20:C5:82:15:2B:06:FA:CD:1A:A1:4E:63:BB:0E:7D:CF:0C:61:B6:E7
Authority key identifier: 77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
Certificate issuer: /CN=77629696624E40462330DA2AF610D32809C89E5A
Certificate serial: 700AD1A90601CD8F433DDF47CD17016CE8A8C29E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
Manifest number: 0532
Signing time: Thu 18 Dec 2025 14:40:41 +0000
Manifest this update: Thu 18 Dec 2025 14:35:41 +0000
Manifest next update: Sun 21 Dec 2025 15:37:41 +0000
Files and hashes: 1: 77629696624E40462330DA2AF610D32809C89E5A.crl (hash: AtTPgavGDmTVlMR1dE8sAbTHe0KOF/09cwX9dOWHLC4=)
2: 3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (hash: MZpBnWfk42SFeduiN6RL28Su7KTp0RDTjQY3tu04WHo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl
rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 15:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0a:d1:a9:06:01:cd:8f:43:3d:df:47:cd:17:01:6c:e8:a8:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77629696624E40462330DA2AF610D32809C89E5A
Validity
Not Before: Dec 18 14:35:41 2025 GMT
Not After : Dec 21 15:37:41 2025 GMT
Subject: CN=20C582152B06FACD1AA14E63BB0E7DCF0C61B6E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:c8:cc:54:f5:bf:73:1d:23:a9:16:6e:b4:
8c:9a:fa:ca:08:2b:ff:49:d3:72:ec:8b:60:09:61:
4b:e8:48:23:34:a7:42:e9:6d:b6:31:0e:50:12:be:
05:c4:ed:0a:24:14:36:35:b4:29:86:73:09:70:43:
3b:f1:1f:71:48:7a:40:81:6e:32:de:8d:b8:7c:79:
cb:d5:af:a5:6d:9b:6f:1c:91:d8:9a:af:07:0c:02:
4e:0b:81:3d:32:e8:f8:f3:7e:79:b6:b5:ed:1a:6a:
85:a9:8a:d6:ce:62:83:6b:e5:f0:f7:23:39:e5:50:
2d:28:64:bf:c0:88:a1:c0:d2:e4:8e:03:d2:f5:e5:
00:4a:1d:c6:eb:61:39:98:84:17:15:f8:73:da:6d:
1e:76:93:2c:86:51:ba:fd:b9:fd:3d:a6:72:a9:2e:
89:03:e0:a2:34:73:74:a8:7b:fa:b0:89:b2:29:4c:
53:44:a4:e8:7d:7e:12:ef:ce:25:05:30:00:aa:7a:
e7:21:4d:27:4d:68:f8:c7:65:53:06:74:4c:a7:2b:
5e:f9:66:8e:1c:37:d9:b9:d1:1a:2f:b3:b1:8a:c0:
b8:95:31:b7:f7:86:8b:75:04:78:6a:a8:19:c4:31:
fc:e5:d1:e5:ee:da:c5:c2:b4:33:20:ce:7b:47:1d:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:82:15:2B:06:FA:CD:1A:A1:4E:63:BB:0E:7D:CF:0C:61:B6:E7
X509v3 Authority Key Identifier:
keyid:77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:18:f9:1a:1e:a5:e3:bb:cd:d8:20:85:96:65:4b:4a:52:92:
52:45:c9:d7:3f:e9:d3:cf:8d:5b:e6:e5:1e:31:e1:6c:af:8b:
dd:75:23:d9:c7:43:04:14:8e:39:c0:02:4d:5e:d5:b3:7d:d4:
37:ef:d8:a3:59:1f:09:d6:bf:4d:36:cb:bc:6b:dc:01:20:45:
02:ab:41:bf:8a:e9:94:5e:9a:c3:a1:dc:8f:46:50:b3:7c:5b:
71:67:8d:9e:6b:32:22:fd:bf:ff:18:42:d1:bf:70:53:85:ec:
31:d4:23:4e:b2:08:5e:e0:f3:16:68:3b:87:c4:62:44:fc:e5:
45:5e:44:b4:bb:1a:a0:a4:b9:11:66:ad:19:38:04:64:d5:ee:
47:ee:d6:1a:cc:44:ee:e4:12:72:cc:7f:f0:07:7a:d0:c3:e4:
5e:0f:8d:f4:5e:72:f9:28:2f:04:dd:a5:06:c8:aa:50:46:dd:
87:75:c4:5c:29:bd:d2:87:59:b7:1a:b2:f3:1f:2c:04:53:a8:
bd:9f:9e:39:00:e8:a3:4e:38:21:de:d4:68:52:4a:b1:fc:96:
0d:ca:66:e3:65:ce:12:e9:d0:f6:89:d1:fc:cf:fd:34:e9:aa:
63:ba:17:98:76:7a:73:9f:0b:da:25:3a:18:0a:c0:1e:5f:e5:
d7:8b:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:12:47 2025 by rpki-client