This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
File: 232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json)
Hash identifier: CzPSya/oHSqsfoBKNogGy8nbzkGk4MVoGMwgUJL+xhU=
Subject key identifier: 33:67:81:35:F3:66:29:6A:9C:87:C6:F9:3E:E3:EA:70:BD:50:22:17
Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70
Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870
Certificate serial: 55096442BE068C06D35E639D086AAE1F3D1CF7D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
Manifest number: 02C5
Signing time: Thu 18 Dec 2025 04:01:38 +0000
Manifest this update: Thu 18 Dec 2025 03:56:38 +0000
Manifest next update: Sun 21 Dec 2025 07:24:38 +0000
Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: OrYEci2LXcYUd7zO3w5vMjUiO57zzyli3tlZ6qJrtVM=)
2: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: XNogttLvKE1PbizdNHSijzCBlucttQF0IJH5bENh5ro=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl
rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 07:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:09:64:42:be:06:8c:06:d3:5e:63:9d:08:6a:ae:1f:3d:1c:f7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870
Validity
Not Before: Dec 18 03:56:38 2025 GMT
Not After : Dec 21 07:24:38 2025 GMT
Subject: CN=33678135F366296A9C87C6F93EE3EA70BD502217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:97:c8:3e:0f:d5:b1:95:1e:c9:49:0a:65:
3d:5f:23:a6:38:9a:9c:29:b7:06:b5:ec:c9:0e:1e:
91:df:fb:d2:69:11:74:ae:fe:c4:4f:87:55:fc:1c:
43:45:e9:89:31:24:70:3d:2b:0d:13:42:d5:35:c7:
a6:ce:4a:a2:d2:d5:21:7f:5d:a7:df:3d:76:b7:e5:
58:78:b4:77:6a:79:39:10:77:35:ee:dc:b6:28:c6:
57:e1:bc:21:fe:cf:31:1e:d6:0c:5f:67:fc:25:da:
88:6e:f8:f9:8c:e4:0d:4e:1a:ff:3b:2e:a7:b2:cf:
58:e7:1f:42:59:30:0c:97:74:9b:ba:e8:89:cd:74:
6b:93:a1:59:8e:18:25:90:4a:b1:17:47:a1:21:a7:
74:5b:b4:d9:5c:30:df:93:af:19:b0:24:ab:ef:bf:
8d:fd:d3:8a:ff:ee:e8:a4:f8:fd:38:44:0b:34:cf:
4c:45:18:4e:1d:a5:05:3a:06:b9:6b:c0:a9:da:b7:
2e:85:d3:aa:8f:85:c9:2d:6b:ce:f4:ce:e3:ba:1d:
0f:43:54:38:c9:63:ec:61:08:02:47:c2:c2:63:d6:
84:b4:fe:30:8e:a9:82:bf:c9:b6:67:93:06:48:19:
8d:8d:ef:e3:d1:11:82:e0:70:a8:45:c8:a9:44:6e:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:67:81:35:F3:66:29:6A:9C:87:C6:F9:3E:E3:EA:70:BD:50:22:17
X509v3 Authority Key Identifier:
keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:30:dd:cc:33:8e:fd:02:5c:da:6c:d1:8e:d1:9d:98:e1:ec:
7a:00:9f:1e:34:e3:d5:f1:48:03:50:ca:28:b9:df:1c:fd:e9:
9d:95:a7:5a:2a:79:08:7c:bc:b8:4d:71:29:f6:a2:67:02:ab:
ee:69:3f:39:fe:8b:d5:ff:8d:6b:a2:f1:59:21:c5:37:a2:d6:
02:76:2c:e1:1b:ed:53:be:65:d9:5b:f5:ee:a3:ae:03:e6:0a:
1b:41:4d:a9:31:a2:72:ea:f3:0e:e0:75:43:68:86:7e:0b:e5:
db:53:3b:24:5c:bc:e2:cc:b9:26:70:fd:89:2e:5c:47:16:35:
7a:b0:77:06:a8:8e:e9:c0:2e:63:23:ae:e7:4f:36:86:ef:28:
1d:1c:21:1a:8a:aa:57:3a:6d:23:f4:42:fb:c4:3c:26:63:dd:
c8:a5:a7:76:19:59:5f:06:62:e2:56:de:f0:65:c4:ed:ba:87:
30:8d:1f:8c:fa:56:1b:db:1c:40:5d:1e:27:68:12:67:65:5e:
61:f8:f6:c1:a4:68:e8:f3:4e:98:4f:25:5c:5a:f1:33:a9:59:
c9:da:de:58:5c:b8:59:f3:18:39:1c:2c:01:4e:4a:a9:70:7b:
03:ce:82:56:49:df:13:5c:e2:c2:bc:83:5b:d6:c8:a2:1b:ae:
90:02:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:57:37 2025 by rpki-client