This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft File: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft (raw, json) Hash identifier: V1j1AvjoZUSXNK3gWh2nVeHv5ICLgmGVEniGnh7eCMk= Subject key identifier: 0E:4C:58:EF:70:F7:9B:D2:4C:52:50:C4:D0:E5:7D:F8:41:38:A2:32 Authority key identifier: 6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF Certificate issuer: /CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Certificate serial: 3EC5E1142CD2A11F4F13324C9F15B4B684056496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft Manifest number: 039E Signing time: Tue 02 Dec 2025 06:11:56 +0000 Manifest this update: Tue 02 Dec 2025 06:06:56 +0000 Manifest next update: Fri 05 Dec 2025 13:05:56 +0000 Files and hashes: 1: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl (hash: G4mX9FCeTQ+ehUB87BE24lnZE241WPR463T1T0cIOgg=) 2: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: /EB5uVPByNIi8kXY9MVULDEpqEYMsLoCXri+MR4evTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c5:e1:14:2c:d2:a1:1f:4f:13:32:4c:9f:15:b4:b6:84:05:64:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Validity Not Before: Dec 2 06:06:56 2025 GMT Not After : Dec 5 13:05:56 2025 GMT Subject: CN=0E4C58EF70F79BD24C5250C4D0E57DF84138A232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:df:2d:c6:ad:b4:3d:5a:12:c4:d8:43:b5: 63:af:c8:6f:e1:ca:cd:34:4a:25:dc:4f:51:45:32: 88:15:6f:1f:e0:0c:12:fa:85:4e:dc:a9:55:8b:9b: 56:6d:78:aa:60:ec:4a:14:99:58:76:e8:89:d9:34: 2c:34:9f:06:85:32:a2:3d:36:d1:52:78:b9:47:8e: 61:66:82:77:f3:3a:34:8c:7a:f6:dd:9e:13:2c:0a: f9:38:02:fa:76:b9:86:30:78:30:15:90:e4:d1:af: b1:32:7d:69:d6:85:38:4f:0a:21:f5:82:d5:ad:e7: 2b:1f:56:0e:0f:12:a1:51:ca:4c:d3:0a:a6:d9:b0: 4b:af:c5:3b:74:c2:cd:94:ed:80:bf:9b:f6:57:cb: a9:c3:51:94:b1:a3:96:5e:92:dd:96:9e:42:c7:31: 01:7a:dd:73:f6:b8:e3:3d:90:56:a7:2f:67:80:ec: 9a:cd:c3:7a:fb:10:81:c4:0c:0f:cf:da:44:c8:a1: 42:f4:2e:3b:01:c3:90:fc:8e:36:42:a3:f8:ff:7e: ba:73:5e:4c:3c:44:15:67:a7:c0:f6:95:35:87:62: 13:b1:1c:41:c0:21:58:8e:f3:dc:97:60:06:4e:fb: 1d:99:ee:fe:43:32:a4:51:bd:5b:4a:0e:32:c5:ac: da:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4C:58:EF:70:F7:9B:D2:4C:52:50:C4:D0:E5:7D:F8:41:38:A2:32 X509v3 Authority Key Identifier: keyid:6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e1:49:9c:c6:dd:e7:9b:9c:c3:9f:1e:45:1e:61:35:29:b6: 1d:44:c5:ab:b1:ba:83:a9:c7:88:17:78:25:b9:de:c6:cd:9f: 0c:18:7b:31:3c:6f:aa:f7:74:2f:db:e2:f4:ba:11:cc:30:4a: 69:80:9f:7c:2b:c3:07:d3:31:08:70:d3:de:3e:d6:65:73:4b: 9d:a2:ea:aa:b0:e6:f2:d7:fa:cd:8c:4d:c8:12:03:f6:6e:00: a9:12:5c:ce:19:14:8d:29:f1:89:f5:a6:3a:1c:0e:63:fc:90: 8a:85:47:8d:5e:8b:8b:65:94:8b:cc:5e:38:99:87:c5:12:3d: 34:f8:a2:2f:41:e7:5c:aa:3c:4d:75:56:44:a4:fd:20:9a:1b: 1d:d1:6f:46:e2:c0:5c:f7:2c:b4:0c:45:57:fc:ed:cc:f3:11: 91:5b:10:09:7d:44:c4:41:4c:7c:79:4f:f9:30:fa:68:e1:ad: 96:74:33:fd:94:d6:7d:5a:fb:59:c3:45:2c:8e:68:bb:13:f3: 7a:2f:46:c9:ae:8c:6b:4f:fb:d7:fe:2c:c5:e7:ac:e8:3b:63: a5:48:43:9c:35:b6:57:9e:78:e9:63:90:f3:74:43:bb:4e:cb: 10:1d:03:d5:8a:63:50:02:3c:ca:6d:7f:80:f8:e9:b2:99:36: 52:8d:36:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsXhFCzSoR9PEzJMnxW0toQFZJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZB RUY4RURFRjAeFw0yNTEyMDIwNjA2NTZaFw0yNTEyMDUxMzA1NTZaMDMxMTAvBgNV BAMTKDBFNEM1OEVGNzBGNzlCRDI0QzUyNTBDNEQwRTU3REY4NDEzOEEyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvt8txq20PVoSxNhDtWOvyG/h ys00SiXcT1FFMogVbx/gDBL6hU7cqVWLm1ZteKpg7EoUmVh26InZNCw0nwaFMqI9 NtFSeLlHjmFmgnfzOjSMevbdnhMsCvk4Avp2uYYweDAVkOTRr7EyfWnWhThPCiH1 gtWt5ysfVg4PEqFRykzTCqbZsEuvxTt0ws2U7YC/m/ZXy6nDUZSxo5Zekt2WnkLH MQF63XP2uOM9kFanL2eA7JrNw3r7EIHEDA/P2kTIoUL0LjsBw5D8jjZCo/j/frpz Xkw8RBVnp8D2lTWHYhOxHEHAIViO89yXYAZO+x2Z7v5DMqRRvVtKDjLFrNqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkxY73D3m9JMUlDE0OV9+EE4ojIwHwYDVR0j BBgwFoAUbjyJ5qPjxhpzFYo8/4KQn6747e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWFhOGNiZS03MThiLTQ5NTMtYjc4OS02MGZhODU3YWVjOGQvMC82RTNDODlFNkEz RTNDNjFBNzMxNThBM0NGRjgyOTA5RkFFRjhFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZBRUY4 RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3 ODktNjBmYTg1N2FlYzhkLzAvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4Mjkw OUZBRUY4RURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzhSZzG3eebnMOfHkUeYTUpth1ExauxuoOp x4gXeCW53sbNnwwYezE8b6r3dC/b4vS6EcwwSmmAn3wrwwfTMQhw094+1mVzS52i 6qqw5vLX+s2MTcgSA/ZuAKkSXM4ZFI0p8Yn1pjocDmP8kIqFR41ei4tllIvMXjiZ h8USPTT4oi9B51yqPE11VkSk/SCaGx3Rb0biwFz3LLQMRVf87czzEZFbEAl9RMRB THx5T/kw+mjhrZZ0M/2U1n1a+1nDRSyOaLsT83ovRsmujGtP+9f+LMXnrOg7Y6VI Q5w1tleeeOljkPN0Q7tOyxAdA9WKY1ACPMptf4D46bKZNlKNNsg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:11 2025 by rpki-client