This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: 6c1W1P+mL2lvU0yw9NBy+fb2kRSn+SwhlrVOEaZzvNc= Subject key identifier: B2:D9:43:25:83:02:2A:7C:7D:22:CF:01:7F:67:96:5D:91:52:18:7A Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 48191AAF3B6F13182A7EA8DF44DF04A7986AC725 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 0389 Signing time: Wed 17 Dec 2025 12:21:38 +0000 Manifest this update: Wed 17 Dec 2025 12:16:38 +0000 Manifest next update: Sat 20 Dec 2025 23:30:38 +0000 Files and hashes: 1: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) 2: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: qvcz7QBfdCbrEfvphl56YvSD119I22UwA6cMjQk2g9A=) 3: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 4: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:19:1a:af:3b:6f:13:18:2a:7e:a8:df:44:df:04:a7:98:6a:c7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Dec 17 12:16:38 2025 GMT Not After : Dec 20 23:30:38 2025 GMT Subject: CN=B2D9432583022A7C7D22CF017F67965D9152187A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:17:ec:ed:d5:b4:ad:ca:9c:04:94:0e:76: 16:38:bb:7d:a3:cc:ae:08:44:65:47:e5:91:57:4a: a2:6c:6d:fa:d8:f3:72:81:59:21:ac:59:fc:bd:89: 68:75:40:04:c2:a7:10:50:e7:a3:8e:41:54:73:70: c7:3e:64:c5:b6:a6:c1:1e:42:98:59:11:48:91:26: f8:9a:ed:b3:2b:a1:43:c9:a8:e2:b8:cc:83:6c:96: 20:d0:80:2c:89:18:31:04:54:ab:a9:5f:53:98:20: 30:96:e2:19:ba:30:8f:b0:a7:6d:6d:f9:9b:eb:3f: 04:85:7f:62:aa:2b:fe:ad:91:f1:ab:d9:00:3c:f3: d0:71:0c:c1:14:dc:f9:27:3b:d7:94:d8:d0:a3:89: ef:12:bc:40:12:64:42:00:87:b7:42:9a:c7:a0:9d: 59:b7:1f:36:cf:ff:f2:1b:87:d8:8d:79:76:e2:0c: 9e:41:d7:46:a7:18:1a:45:cc:1b:14:78:e2:2e:4f: b5:42:3b:cb:c6:96:02:23:97:99:3a:22:fb:4b:3c: c3:e0:27:87:b6:d2:b5:5e:13:9f:88:e6:f9:8a:1d: 93:da:db:26:81:35:59:8e:2f:68:4e:65:41:de:b6: 14:bf:93:f6:d9:fd:60:80:a8:e1:a0:86:9d:3a:c1: 6b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D9:43:25:83:02:2A:7C:7D:22:CF:01:7F:67:96:5D:91:52:18:7A X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3b:5d:eb:95:8a:4a:20:6d:44:7f:05:69:0e:9a:2e:88:e1: bf:a1:cf:e5:97:8d:7c:44:4f:80:bd:7d:aa:d1:04:df:21:2b: 9f:8d:90:be:b1:8e:9b:35:02:34:4a:be:75:3f:ed:de:40:30: 62:89:84:0e:a1:83:e4:5d:af:7c:14:bc:68:c0:d5:11:05:04: 8c:f8:ef:8c:b5:3c:4e:39:90:59:dc:c8:d7:0f:e4:b6:1a:b6: c6:8a:56:09:6f:ea:11:72:48:53:7b:b9:85:15:46:6e:5c:a7: 90:71:0b:7e:b1:fd:13:94:34:db:c4:5b:56:45:f6:ba:bf:46: d1:69:cb:69:14:de:0f:65:f7:1b:91:03:b5:fb:e6:f4:19:ca: 5d:b1:a8:39:76:7e:c0:42:b4:19:52:d8:58:42:d1:af:de:28: 34:3b:bf:79:49:26:fd:97:5f:22:63:10:32:97:dd:cc:a1:47: 19:ed:5a:e7:78:4a:a3:e7:0a:67:7e:dd:8a:85:c1:55:93:92: e5:a5:f3:18:43:8a:1b:ee:43:91:29:a2:7b:be:be:a3:3a:54: 48:32:62:83:98:7d:b2:e6:fb:49:4f:b7:cf:01:14:07:f6:65: 39:cd:ee:4c:51:5b:19:c6:da:8f:57:85:b2:a2:60:78:22:db: 98:53:87:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBkarztvExgqfqjfRN8Ep5hqxyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTEyMTcxMjE2MzhaFw0yNTEyMjAyMzMwMzhaMDMxMTAvBgNV BAMTKEIyRDk0MzI1ODMwMjJBN0M3RDIyQ0YwMTdGNjc5NjVEOTE1MjE4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGShfs7dW0rcqcBJQOdhY4u32j zK4IRGVH5ZFXSqJsbfrY83KBWSGsWfy9iWh1QATCpxBQ56OOQVRzcMc+ZMW2psEe QphZEUiRJvia7bMroUPJqOK4zINsliDQgCyJGDEEVKupX1OYIDCW4hm6MI+wp21t +ZvrPwSFf2KqK/6tkfGr2QA889BxDMEU3PknO9eU2NCjie8SvEASZEIAh7dCmseg nVm3HzbP//Ibh9iNeXbiDJ5B10anGBpFzBsUeOIuT7VCO8vGlgIjl5k6IvtLPMPg J4e20rVeE5+I5vmKHZPa2yaBNVmOL2hOZUHethS/k/bZ/WCAqOGghp06wWv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUstlDJYMCKnx9Is8Bf2eWXZFSGHowHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY7XeuVikogbUR/BWkOmi6I4b+hz+WXjXxE T4C9farRBN8hK5+NkL6xjps1AjRKvnU/7d5AMGKJhA6hg+Rdr3wUvGjA1REFBIz4 74y1PE45kFncyNcP5LYatsaKVglv6hFySFN7uYUVRm5cp5BxC36x/ROUNNvEW1ZF 9rq/RtFpy2kU3g9l9xuRA7X75vQZyl2xqDl2fsBCtBlS2FhC0a/eKDQ7v3lJJv2X XyJjEDKX3cyhRxntWud4SqPnCmd+3YqFwVWTkuWl8xhDihvuQ5Eponu+vqM6VEgy YoOYfbLm+0lPt88BFAf2ZTnN7kxRWxnG2o9XhbKiYHgi25hTh+E= -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:55 2025 by rpki-client