This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json)
Hash identifier: UQ/uF3NhflK2zBrwKhsFs+bpUv1Zz9rGAuZFpDHd8EU=
Subject key identifier: 83:B1:51:6C:A3:7B:3A:8F:A5:23:1E:E8:9B:9A:87:D9:E5:2B:B8:43
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial: 4A22289768D0C890A4AA5C2628BE2FD2E7A06617
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
Manifest number: 0148
Signing time: Thu 18 Dec 2025 23:52:05 +0000
Manifest this update: Thu 18 Dec 2025 23:47:05 +0000
Manifest next update: Mon 22 Dec 2025 09:28:05 +0000
Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: LnL5rKuE8NBatYV1AyqYlb4etr1iLQ0bGumJCnTHOLY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 09:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:22:28:97:68:d0:c8:90:a4:aa:5c:26:28:be:2f:d2:e7:a0:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Validity
Not Before: Dec 18 23:47:05 2025 GMT
Not After : Dec 22 09:28:05 2025 GMT
Subject: CN=83B1516CA37B3A8FA5231EE89B9A87D9E52BB843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:b7:0c:0f:b6:f8:06:2e:8c:ab:f3:a9:ea:
56:80:3a:0e:de:f1:f4:88:c2:33:8b:98:95:6b:9b:
58:57:ed:5d:74:ce:f3:05:e8:76:98:d1:66:74:e9:
57:f8:28:87:16:42:f9:8d:2b:62:c0:d0:6f:d0:a9:
cd:ca:b7:48:60:c9:c8:5b:ef:e0:ea:3f:4d:b1:40:
95:99:f8:59:ed:49:ad:ec:27:2a:d9:7d:30:35:92:
84:5f:d8:9d:9c:17:34:f1:18:d2:68:cb:13:77:a6:
2b:49:d4:36:c3:a3:a0:c1:71:ab:44:46:fc:02:05:
b8:7a:ed:8d:b9:78:f6:24:11:c6:e7:b1:21:10:40:
86:e0:98:85:f3:04:f6:35:57:f5:14:cb:fb:01:78:
bc:90:1d:fb:86:38:fa:74:70:7d:46:fd:d8:8f:85:
fd:f9:58:06:12:67:26:cc:d5:0e:67:8b:5d:3f:44:
a8:d9:33:c1:4b:5e:ca:e1:bc:02:35:7e:5a:b5:7a:
22:d5:4a:15:69:69:a9:21:03:57:ca:e1:43:a0:c1:
72:18:82:9c:68:5e:a9:fc:da:90:58:b0:ef:2f:ff:
bc:29:41:f7:a3:cb:b2:c4:7f:bf:46:9e:59:5c:d1:
1e:c3:aa:51:d6:44:bd:35:09:87:48:2f:80:c9:ba:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:51:6C:A3:7B:3A:8F:A5:23:1E:E8:9B:9A:87:D9:E5:2B:B8:43
X509v3 Authority Key Identifier:
keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:16:ec:85:87:eb:a2:81:58:63:1b:a7:c9:73:df:52:28:
11:4c:3b:22:85:c0:28:11:ad:05:25:61:f2:3a:e9:58:94:43:
63:7d:78:59:de:8c:11:19:92:16:c4:77:04:08:16:1a:ec:e9:
b6:e5:e8:f5:70:be:d9:e3:fa:65:ad:6b:76:08:25:8a:74:76:
95:2c:13:29:35:37:48:ee:fa:d7:90:5b:bb:0d:24:01:be:53:
f6:e5:54:90:33:20:33:e7:55:ca:a4:89:a9:68:6e:de:b9:96:
29:d2:94:79:08:25:5d:45:2b:75:68:d0:73:57:6d:34:94:76:
14:f6:1e:24:39:62:50:29:8f:62:b3:1b:bf:35:77:9f:30:df:
75:51:f1:d1:85:df:22:cc:e0:0c:c6:f5:a3:8b:28:e9:85:e7:
2a:61:5d:7b:8b:45:61:9a:ad:aa:8c:81:c7:a0:4e:40:c0:12:
d1:a0:85:a3:db:d6:b6:2f:34:41:46:66:ad:92:36:60:6c:e9:
10:d2:1d:42:5b:3b:67:76:d7:85:c6:b3:8e:0c:af:9a:18:81:
52:6d:f2:a3:bc:4e:16:ea:5a:32:d6:1c:97:61:90:2d:e8:0b:
68:ab:23:ac:0e:1f:b2:9b:37:87:a0:ec:ab:65:63:8b:a3:88:
d3:e1:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:26:09 2025 by rpki-client