This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: 4p/eGv644Nu/SjJHzDPmxeuF2xy8sLNWTb9n1mvanV8= Subject key identifier: 59:DE:41:D4:82:40:10:46:92:A2:9B:9D:F8:C0:71:75:59:49:2F:63 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 23751ACCD00456729CEAD943DD56BDD2F68B23CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 0234 Signing time: Sun 14 Dec 2025 21:00:03 +0000 Manifest this update: Sun 14 Dec 2025 20:55:03 +0000 Manifest next update: Thu 18 Dec 2025 05:55:03 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) 2: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: bcozp+TqNk1kaEF+dk8YVKMUJCmSkDFVdZHdPypKc+4=) 3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 4: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 05:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:75:1a:cc:d0:04:56:72:9c:ea:d9:43:dd:56:bd:d2:f6:8b:23:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Dec 14 20:55:03 2025 GMT Not After : Dec 18 05:55:03 2025 GMT Subject: CN=59DE41D48240104692A29B9DF8C0717559492F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:c0:f6:26:39:39:dd:14:b4:dc:ce:5a:ae: a8:94:84:6f:a3:b9:e1:9f:f9:a7:86:3f:97:b3:a5: 15:5b:3f:09:fe:ba:1a:46:58:f7:35:09:6b:85:0b: 04:eb:b1:51:9b:39:ec:62:f3:69:57:71:a0:d9:cc: a5:66:b4:21:c6:63:ab:cb:2b:78:79:a3:ca:6d:50: 71:54:41:11:b9:cf:d4:1c:39:27:85:e2:e8:a4:28: 33:00:f8:20:cc:e7:8a:11:93:88:04:92:78:8f:63: ff:14:ba:47:b7:62:18:c5:9a:d9:f3:71:6c:3f:80: 37:fa:5f:da:27:07:f4:ae:5d:b8:3e:f5:e8:cc:8b: 0c:f2:16:33:81:73:9a:fc:46:37:d9:81:44:2f:a6: 16:e0:aa:a1:19:34:ad:ef:2a:52:e7:9f:88:fd:1e: a8:6b:da:c7:3d:29:e9:2e:1d:c0:89:ff:0f:15:09: e6:a1:e0:9a:9f:5b:08:e3:48:d3:73:29:d4:8d:a3: 72:6c:99:b5:33:7f:d5:de:b8:28:91:cd:66:df:3a: 41:1e:14:c4:88:70:63:69:7a:f6:76:f8:b7:ce:f4: f4:5e:4c:0d:e2:21:92:1b:c2:8f:4e:24:ef:90:c2: 6e:ce:f4:fb:af:d0:6c:7d:5c:a9:b7:f6:fc:1f:2f: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DE:41:D4:82:40:10:46:92:A2:9B:9D:F8:C0:71:75:59:49:2F:63 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c2:83:a3:4b:13:c0:49:8f:14:35:bb:fb:52:ba:7d:a9:5f: d4:12:a3:2b:90:e3:5f:f0:38:c6:bc:55:9a:95:6a:91:2b:b5: bd:ad:71:52:74:f1:5f:c4:28:c9:a7:3d:73:49:9c:90:8a:e1: 18:5a:33:f7:12:42:97:28:3a:0e:ae:c1:da:dc:6c:78:60:99: b5:5d:ba:04:8c:dd:93:4c:8c:88:46:db:aa:3b:57:36:b4:70: a1:0c:e2:2a:5b:52:65:36:85:9b:47:dd:cc:2c:ea:81:61:11: 57:98:e9:01:f0:f2:34:44:d8:ec:08:e7:b7:69:b0:c6:08:ff: ce:c3:b1:cb:f7:ff:19:bd:a9:e2:5a:50:51:0f:a8:c4:9f:05: 23:e7:33:b7:16:01:b1:ac:1d:8c:eb:fd:1e:49:df:a9:00:f0: 56:20:ce:97:4a:d8:40:c1:33:46:bd:be:15:0f:ba:d3:1e:8b: 1b:14:01:01:0d:1f:6f:6b:31:61:55:05:dc:f2:b6:0f:00:2c: d6:fa:db:9f:14:c3:70:fc:e6:a2:f1:88:5e:f2:31:7b:c3:10: 64:2c:cb:46:64:af:e7:03:24:c9:07:be:c0:76:a4:53:ac:5e: 91:26:04:3d:2d:22:04:60:70:2c:40:f3:d5:0a:a8:e8:59:cd: 1b:63:e0:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3UazNAEVnKc6tlD3Va90vaLI80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTEyMTQyMDU1MDNaFw0yNTEyMTgwNTU1MDNaMDMxMTAvBgNV BAMTKDU5REU0MUQ0ODI0MDEwNDY5MkEyOUI5REY4QzA3MTc1NTk0OTJGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLcD2Jjk53RS03M5arqiUhG+j ueGf+aeGP5ezpRVbPwn+uhpGWPc1CWuFCwTrsVGbOexi82lXcaDZzKVmtCHGY6vL K3h5o8ptUHFUQRG5z9QcOSeF4uikKDMA+CDM54oRk4gEkniPY/8Uuke3YhjFmtnz cWw/gDf6X9onB/SuXbg+9ejMiwzyFjOBc5r8RjfZgUQvphbgqqEZNK3vKlLnn4j9 Hqhr2sc9KekuHcCJ/w8VCeah4JqfWwjjSNNzKdSNo3JsmbUzf9XeuCiRzWbfOkEe FMSIcGNpevZ2+LfO9PReTA3iIZIbwo9OJO+Qwm7O9Puv0Gx9XKm39vwfL9u5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWd5B1IJAEEaSopud+MBxdVlJL2MwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzCg6NLE8BJjxQ1u/tSun2pX9QSoyuQ41/w OMa8VZqVapErtb2tcVJ08V/EKMmnPXNJnJCK4RhaM/cSQpcoOg6uwdrcbHhgmbVd ugSM3ZNMjIhG26o7Vza0cKEM4ipbUmU2hZtH3cws6oFhEVeY6QHw8jRE2OwI57dp sMYI/87Dscv3/xm9qeJaUFEPqMSfBSPnM7cWAbGsHYzr/R5J36kA8FYgzpdK2EDB M0a9vhUPutMeixsUAQENH29rMWFVBdzytg8ALNb6258Uw3D85qLxiF7yMXvDEGQs y0Zkr+cDJMkHvsB2pFOsXpEmBD0tIgRgcCxA89UKqOhZzRtj4Nc= -----END CERTIFICATE-----Generated at Mon Dec 15 21:52:11 2025 by rpki-client