This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json) Hash identifier: IfGjy30lIbg6ZtDAl2fxsfVlUfpFC+ExRQECoU2WcEc= Subject key identifier: C2:E6:08:73:CD:77:ED:AA:C6:F2:3A:CE:C7:C7:D1:1D:96:35:AD:CD Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Certificate serial: 52478CC0DE6FE22D85CC736F514F5BA695D036E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft Manifest number: DE Signing time: Mon 01 Dec 2025 13:00:58 +0000 Manifest this update: Mon 01 Dec 2025 12:55:58 +0000 Manifest next update: Thu 04 Dec 2025 21:48:58 +0000 Files and hashes: 1: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=) 2: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: LHh+5cnqkbczPQwNnUT3AkgdiIQIGOo4h5BjIMY9afM=) 3: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:47:8c:c0:de:6f:e2:2d:85:cc:73:6f:51:4f:5b:a6:95:d0:36:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Validity Not Before: Dec 1 12:55:58 2025 GMT Not After : Dec 4 21:48:58 2025 GMT Subject: CN=C2E60873CD77EDAAC6F23ACEC7C7D11D9635ADCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:e9:d5:04:18:06:fc:8e:0c:f4:64:d7:90: b9:ff:90:86:bc:9c:54:5f:1c:70:3d:05:59:47:9a: c6:fc:b4:37:a1:5d:38:03:66:6f:01:0c:c5:1b:aa: f6:34:d0:7d:5f:76:be:62:26:27:ab:64:4f:eb:a5: f4:ff:88:a8:61:91:f5:37:9c:9d:39:c4:52:df:ba: 60:d4:bd:9b:e3:59:f0:e7:fe:7d:4e:a5:f4:0c:fa: b3:24:d1:78:0a:0e:85:b8:77:97:28:df:6a:c7:50: 56:87:e2:24:53:6e:05:5b:d6:c5:74:37:d2:1b:7c: 60:30:26:1e:30:8d:ff:3b:42:67:07:7c:6f:cb:09: 3d:b1:b3:58:26:07:d7:33:6e:a0:bc:a0:96:98:38: be:09:24:11:72:e8:0d:c2:94:df:7f:4a:57:8b:a0: 46:20:1b:f7:c4:49:60:d9:a7:37:99:11:48:ea:f4: d6:f4:c4:6f:98:6b:d1:ce:ca:2e:04:e7:85:c9:e8: b3:38:3e:24:bd:a1:8c:dc:88:e7:41:9b:c8:84:22: 28:f5:f8:0b:cb:34:89:55:0a:ba:07:e8:19:c3:1f: ae:60:c2:15:0a:17:d9:8a:b3:d2:5e:b2:a0:cd:2c: a8:5d:2c:02:85:ec:d2:54:c0:d7:7b:03:ce:e2:af: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E6:08:73:CD:77:ED:AA:C6:F2:3A:CE:C7:C7:D1:1D:96:35:AD:CD X509v3 Authority Key Identifier: keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:9e:5d:d5:9a:03:11:f7:1e:4c:58:62:f2:c6:49:b5:7c:60: 10:65:35:62:c1:57:9e:86:cf:de:3e:3f:44:eb:60:04:b3:6b: ae:48:98:b1:a6:fa:65:96:8c:dc:8c:bc:de:c7:e6:ff:20:d0: ba:54:97:bc:97:e9:28:d3:b8:2b:b9:91:14:cd:d2:08:f0:e4: 10:78:36:60:eb:a9:3a:71:f6:49:d2:77:9a:fe:e4:78:8b:b7: a7:bb:6a:c6:51:6a:b1:ab:c7:ae:a1:23:68:5c:32:63:37:f9: 1d:ed:c9:1d:ca:75:64:b0:97:3f:d0:a5:ef:20:d1:64:2b:9c: e3:66:3c:70:b1:82:2e:67:2e:1a:5f:82:59:43:97:86:5b:4b: 5f:95:5c:7c:e8:75:d1:e4:19:19:ba:21:da:a2:28:08:0a:18: 02:18:dc:76:e4:fb:59:0e:77:86:a5:92:73:8b:95:4c:94:34: e1:4d:b2:94:79:7e:d3:71:94:18:8c:bc:34:5d:5f:2f:22:53: 1d:fd:fd:30:b7:a4:8b:f4:2c:9b:2b:c5:03:da:36:97:09:f1: 32:1a:2e:6a:3f:48:55:dd:bc:2c:5b:79:ee:de:a9:33:17:82: f2:bd:24:b2:0b:58:16:fc:8d:f0:31:bd:2d:26:f8:49:5b:54: 80:b7:60:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkeMwN5v4i2FzHNvUU9bppXQNuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3 NzRGQ0M2NjAeFw0yNTEyMDExMjU1NThaFw0yNTEyMDQyMTQ4NThaMDMxMTAvBgNV BAMTKEMyRTYwODczQ0Q3N0VEQUFDNkYyM0FDRUM3QzdEMTFEOTYzNUFEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIr+nVBBgG/I4M9GTXkLn/kIa8 nFRfHHA9BVlHmsb8tDehXTgDZm8BDMUbqvY00H1fdr5iJierZE/rpfT/iKhhkfU3 nJ05xFLfumDUvZvjWfDn/n1OpfQM+rMk0XgKDoW4d5co32rHUFaH4iRTbgVb1sV0 N9IbfGAwJh4wjf87QmcHfG/LCT2xs1gmB9czbqC8oJaYOL4JJBFy6A3ClN9/SleL oEYgG/fESWDZpzeZEUjq9Nb0xG+Ya9HOyi4E54XJ6LM4PiS9oYzciOdBm8iEIij1 +AvLNIlVCroH6BnDH65gwhUKF9mKs9JesqDNLKhdLAKF7NJUwNd7A87ir2B/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwuYIc8137arG8jrOx8fRHZY1rc0wHwYDVR0j BBgwFoAUa6CHqMG/RrvUdI0j+eNLkndPzGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzUwMDc2Ny05MjI3LTQzZWMtYTUyNS0yZTk3ZDVhMDNmMDkvMC82QkEwODdBOEMx QkY0NkJCRDQ3NDhEMjNGOUUzNEI5Mjc3NEZDQzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3NzRG Q0M2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRC OTI3NzRGQ0M2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANyeXdWaAxH3HkxYYvLGSbV8YBBlNWLBV56G z94+P0TrYASza65ImLGm+mWWjNyMvN7H5v8g0LpUl7yX6SjTuCu5kRTN0gjw5BB4 NmDrqTpx9knSd5r+5HiLt6e7asZRarGrx66hI2hcMmM3+R3tyR3KdWSwlz/Qpe8g 0WQrnONmPHCxgi5nLhpfgllDl4ZbS1+VXHzoddHkGRm6IdqiKAgKGAIY3Hbk+1kO d4alknOLlUyUNOFNspR5ftNxlBiMvDRdXy8iUx39/TC3pIv0LJsrxQPaNpcJ8TIa Lmo/SFXdvCxbee7eqTMXgvK9JLILWBb8jfAxvS0m+ElbVIC3YGI= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:36 2025 by rpki-client