This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json)
Hash identifier: zuscuWfEuF7WXtX3TqviwOstYQIZL3lorvBJIgYlxtU=
Subject key identifier: 76:F3:69:71:53:03:25:F2:3D:EA:9E:E6:E2:DF:F4:4A:5E:65:FD:18
Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66
Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66
Certificate serial: 5F9498F7F7A272A2DDAEA19B7B120C98370B6A85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
Manifest number: E4
Signing time: Sun 14 Dec 2025 21:50:57 +0000
Manifest this update: Sun 14 Dec 2025 21:45:57 +0000
Manifest next update: Thu 18 Dec 2025 00:43:57 +0000
Files and hashes: 1: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: qW0lDqGbzEn5Chp5UHx0ZKLGHi10fNvruwBcqtv0xi0=)
2: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=)
3: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl
rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 00:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:94:98:f7:f7:a2:72:a2:dd:ae:a1:9b:7b:12:0c:98:37:0b:6a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66
Validity
Not Before: Dec 14 21:45:57 2025 GMT
Not After : Dec 18 00:43:57 2025 GMT
Subject: CN=76F36971530325F23DEA9EE6E2DFF44A5E65FD18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:22:85:15:72:77:eb:78:02:b0:fb:d0:de:
92:8b:2d:81:79:35:be:10:83:7d:8b:8c:58:72:72:
1a:25:c6:e9:e0:9b:5b:b9:ec:65:f1:95:96:6b:74:
f9:c8:1b:20:2a:98:df:a1:38:59:a6:05:3e:42:3f:
19:b1:cc:49:d8:4e:6e:ed:1d:d4:d0:fb:97:c3:b3:
9e:d6:9a:77:7b:58:e0:04:85:d6:ed:52:10:13:6f:
78:4b:44:54:8f:fc:49:c8:bd:1e:e4:8e:11:fc:30:
dc:45:53:16:02:ea:5b:79:ed:c0:2c:c1:ea:3b:ab:
69:9a:20:82:a6:cb:c7:0b:75:f4:4f:bf:de:65:e0:
f5:a8:5d:bd:74:54:6c:41:7e:a1:94:a0:d8:89:a9:
96:89:89:a4:03:36:72:f0:6a:f3:6a:13:26:3e:45:
b1:04:12:9c:66:99:79:09:25:c3:23:cc:5e:9a:02:
88:3a:65:ca:22:c6:01:b9:72:7c:c5:df:ee:14:53:
c9:57:95:90:f7:f3:90:f6:f5:4c:fc:2c:c6:bf:b3:
4d:e6:3a:b0:07:ae:35:79:e0:dd:c7:70:e1:f2:be:
0d:9b:54:9c:df:e4:26:ac:62:86:05:eb:73:54:44:
ce:cf:59:8c:e0:16:19:d7:47:ed:47:f0:fa:37:01:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F3:69:71:53:03:25:F2:3D:EA:9E:E6:E2:DF:F4:4A:5E:65:FD:18
X509v3 Authority Key Identifier:
keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9c:6d:09:eb:f3:95:a8:e4:95:91:66:1a:6c:5d:a9:2d:97:
6f:6b:63:65:af:a4:a6:21:82:f6:3e:8e:d5:6f:4a:30:8c:5e:
f8:60:45:48:b4:3b:eb:1e:05:3f:ae:34:ef:d7:ca:8f:47:87:
98:be:87:3e:02:05:34:f9:27:ef:70:92:5e:0c:da:dc:9d:34:
e8:0f:62:f4:ef:c8:d8:fb:86:89:51:d2:28:0c:19:8d:6e:59:
b8:76:25:40:be:fd:c5:b1:f2:2c:27:8e:39:d6:75:a7:93:e1:
6c:43:f6:8c:3f:c7:a6:db:2b:0b:7d:81:26:f0:4e:e0:85:f7:
b9:74:ee:56:ed:99:ed:96:9f:39:bb:b2:69:05:74:0f:29:fe:
04:5f:25:06:db:45:a9:74:9d:0f:b6:38:b7:31:b7:be:71:a9:
92:93:f8:57:cc:4e:41:53:8b:2e:0f:f3:af:f4:55:12:fa:2c:
e7:ad:d2:4e:55:91:44:70:1d:47:01:d0:0b:81:96:f0:1b:69:
42:af:b5:73:79:c5:11:6f:2a:b0:26:7f:c5:b2:da:5e:80:c7:
47:ec:ad:8b:d2:3b:b3:ea:5b:42:0b:05:45:e3:b8:f9:ce:c2:
8b:74:89:8d:30:7b:99:2a:a8:9e:2e:99:30:ca:66:48:cb:cc:
db:9c:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:53:50 2025 by rpki-client