This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft File: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft (raw, json) Hash identifier: i5NgAT8Gl5RQ/+4l8vXqWyWu1Fj7scbUQ3LY3Gs9f5g= Subject key identifier: 40:DF:B6:49:28:57:D9:FF:D7:E8:E8:F6:AE:7A:E8:C8:8B:C2:21:99 Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 0A2E609DCED353E71B096B89604ABC1844BA807D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft Manifest number: 03D3 Signing time: Wed 17 Dec 2025 05:51:30 +0000 Manifest this update: Wed 17 Dec 2025 05:46:30 +0000 Manifest next update: Sat 20 Dec 2025 08:42:30 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: HBCSlYe9SztvZ5iSEatkCght6QFzU9643YFr0LJkHe0=) 2: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl (hash: WSqyXOMKpsbdHQ2WUGWHRqsCtnMBt54wybdIKq0+Zpw=) 3: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8=) 4: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: nbSzLxkTgg1Fhd955VZ38kl51XuK78f19xIlXEphedE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2e:60:9d:ce:d3:53:e7:1b:09:6b:89:60:4a:bc:18:44:ba:80:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Dec 17 05:46:30 2025 GMT Not After : Dec 20 08:42:30 2025 GMT Subject: CN=40DFB6492857D9FFD7E8E8F6AE7AE8C88BC22199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:33:be:66:b5:b1:5d:69:47:42:9a:a4:36: 10:c3:c0:f9:cf:33:67:3c:21:69:8b:00:67:45:b5: f2:cd:36:b4:f6:73:e0:13:14:e9:29:8b:a1:ac:12: e5:83:b2:1a:4d:8c:e0:cb:6d:c7:db:0a:ee:a3:98: 8c:32:c5:4d:aa:ad:fa:2c:08:95:58:fe:19:8d:83: 60:37:27:23:91:f9:01:22:83:f2:02:fe:9a:05:7d: d6:df:9f:b2:31:fe:89:45:3e:86:7f:1a:0a:8e:ec: ff:df:f3:b1:08:d0:87:c0:6c:18:c4:75:ea:0d:ef: 9c:5e:78:89:ea:84:5a:f0:fa:7a:56:76:d5:51:86: ea:e1:8d:2e:d9:56:63:2b:20:ba:05:7b:be:db:6c: 03:21:39:33:27:17:39:0f:4f:33:c5:d3:33:5d:57: 6e:98:bb:5e:17:71:fd:5d:f4:31:a2:27:a3:16:f0: 9f:22:60:b3:eb:c0:a3:3a:27:93:b2:f8:f3:5b:5f: 09:b0:4f:f5:0a:ab:c2:3f:40:9f:f7:9e:d7:92:06: e1:35:6e:7f:3a:0a:fa:99:ed:57:75:b0:ef:fb:4f: 32:40:9b:f5:c5:29:e1:f4:c4:18:8d:14:3e:b0:5f: fd:b3:55:b5:cc:93:39:16:71:c0:7c:1e:bf:1c:9f: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DF:B6:49:28:57:D9:FF:D7:E8:E8:F6:AE:7A:E8:C8:8B:C2:21:99 X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ba:67:e4:70:02:9f:66:f3:70:ff:11:23:27:58:8a:8c:65: 4d:21:3f:8d:71:bc:3f:50:78:8c:84:53:21:39:99:32:f4:e4: 36:8d:8c:7c:63:3a:61:12:50:b8:86:4b:0b:50:60:4f:86:31: a8:3f:2d:f9:e6:26:d9:7e:46:ed:82:a0:7a:7f:12:8d:62:fb: f8:8d:ac:29:de:3e:f1:1f:05:82:23:32:72:79:30:a9:f9:e9: 6f:f0:d5:d5:e6:97:96:04:f2:52:6d:6b:2b:68:57:22:57:45: 5c:a5:1c:c1:7f:05:73:ed:df:bc:bc:11:19:97:5a:5b:c8:8b: 0a:f1:4b:0d:d3:43:ee:85:70:a3:ea:f3:9c:eb:0d:23:89:ee: ac:86:0e:97:62:22:ff:79:a8:1a:fc:72:88:5a:a1:c5:cc:af: b4:3d:c5:14:1d:59:6f:28:c5:2c:c8:b3:5f:02:92:e2:ec:ea: 58:c3:38:f0:cb:23:f5:3d:ac:15:1f:44:70:c0:92:d0:62:0f: 6b:66:6e:25:8f:fd:91:9f:87:bc:25:75:f0:aa:3e:65:f1:fc: dc:3e:2a:08:40:ee:8b:62:ed:f3:94:97:42:39:2c:a8:a2:25: f8:79:0e:e2:da:e0:8b:ed:87:28:be:be:00:ac:14:c2:20:e3: 84:26:a3:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCi5gnc7TU+cbCWuJYEq8GES6gH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNTEyMTcwNTQ2MzBaFw0yNTEyMjAwODQyMzBaMDMxMTAvBgNV BAMTKDQwREZCNjQ5Mjg1N0Q5RkZEN0U4RThGNkFFN0FFOEM4OEJDMjIxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzjO+ZrWxXWlHQpqkNhDDwPnP M2c8IWmLAGdFtfLNNrT2c+ATFOkpi6GsEuWDshpNjODLbcfbCu6jmIwyxU2qrfos CJVY/hmNg2A3JyOR+QEig/IC/poFfdbfn7Ix/olFPoZ/GgqO7P/f87EI0IfAbBjE deoN75xeeInqhFrw+npWdtVRhurhjS7ZVmMrILoFe77bbAMhOTMnFzkPTzPF0zNd V26Yu14Xcf1d9DGiJ6MW8J8iYLPrwKM6J5Oy+PNbXwmwT/UKq8I/QJ/3nteSBuE1 bn86CvqZ7Vd1sO/7TzJAm/XFKeH0xBiNFD6wX/2zVbXMkzkWccB8Hr8cn1t/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQN+2SShX2f/X6Oj2rnroyIvCIZkwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4 NjMxRUY0MTJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABW6Z+RwAp9m83D/ESMnWIqMZU0hP41xvD9Q eIyEUyE5mTL05DaNjHxjOmESULiGSwtQYE+GMag/LfnmJtl+Ru2CoHp/Eo1i+/iN rCnePvEfBYIjMnJ5MKn56W/w1dXml5YE8lJtaytoVyJXRVylHMF/BXPt37y8ERmX WlvIiwrxSw3TQ+6FcKPq85zrDSOJ7qyGDpdiIv95qBr8cohaocXMr7Q9xRQdWW8o xSzIs18CkuLs6ljDOPDLI/U9rBUfRHDAktBiD2tmbiWP/ZGfh7wldfCqPmXx/Nw+ KghA7oti7fOUl0I5LKiiJfh5DuLa4Ivthyi+vgCsFMIg44Qmozc= -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:30 2025 by rpki-client