This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft
File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json)
Hash identifier: /TBzi67t75NUC5bV8CM62iOWXZx5USx98W3IaBWoIEA=
Subject key identifier: A5:BA:C0:36:B8:93:0E:7E:6F:B8:68:DD:21:92:3B:62:EB:57:45:A2
Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA
Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA
Certificate serial: 1F31BDEFE943831602327DB08D8BC82765C5A898
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft
Manifest number: E6
Signing time: Wed 03 Dec 2025 11:21:29 +0000
Manifest this update: Wed 03 Dec 2025 11:16:29 +0000
Manifest next update: Sat 06 Dec 2025 18:02:29 +0000
Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: hvRP0dGsoLeNXL5TshJF5q68l1OJ7GV0CMu3xiy1gCw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl
rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:31:bd:ef:e9:43:83:16:02:32:7d:b0:8d:8b:c8:27:65:c5:a8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA
Validity
Not Before: Dec 3 11:16:29 2025 GMT
Not After : Dec 6 18:02:29 2025 GMT
Subject: CN=A5BAC036B8930E7E6FB868DD21923B62EB5745A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:57:5d:8f:4b:cb:60:9c:64:6c:86:df:c9:
1c:4b:88:b3:ff:81:44:43:f1:05:02:0f:8b:55:f2:
a5:7a:17:22:21:f4:e2:86:52:0e:ba:fc:62:d5:99:
a6:d2:b1:f1:fd:89:dc:8b:78:fa:06:da:1d:6a:87:
71:ce:89:e3:8d:6c:c3:ac:6b:5f:b0:f4:88:6e:26:
09:fe:56:b4:17:1b:94:11:6f:cf:54:02:3e:47:b4:
c9:4e:7f:3b:13:e9:3d:c5:ee:54:f2:96:72:65:7e:
15:57:0c:09:d5:3a:0a:a4:09:c4:e4:99:5c:1a:91:
63:92:a8:7e:80:2d:53:4e:d8:38:ae:5d:cf:f7:2a:
e2:a8:d4:4e:47:7e:01:43:a9:2d:f5:28:fe:ca:44:
f0:13:c9:49:e0:7c:45:49:36:b8:a3:ef:b6:ad:70:
9e:40:ad:7a:19:df:33:63:25:45:a4:b4:12:f0:22:
59:18:92:c8:fa:9b:6b:f1:11:ce:23:1f:ba:1c:c9:
60:ae:0d:8e:f0:2f:35:a9:91:7f:87:e1:0f:74:42:
48:01:03:48:84:b1:91:d9:af:68:2b:25:30:b8:51:
61:9e:e5:20:b7:d8:b0:7e:7a:2d:79:1f:c1:9f:e2:
cb:96:af:f3:34:e3:0e:0a:45:1f:7c:81:5c:04:86:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:C0:36:B8:93:0E:7E:6F:B8:68:DD:21:92:3B:62:EB:57:45:A2
X509v3 Authority Key Identifier:
keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ad:1a:d9:b3:30:e1:3a:c9:55:b1:24:91:6b:34:e0:e8:e5:
b8:9f:86:9e:98:4b:4b:67:13:3b:d6:45:03:e3:a7:bb:58:59:
91:91:64:79:53:d6:39:a4:c6:cf:6f:ca:c1:bd:37:fe:54:c4:
80:05:3f:dd:44:0f:86:0b:5b:79:71:86:af:9c:32:47:0e:c3:
65:4f:3e:70:07:aa:29:f1:d3:cb:2c:3c:2a:12:ba:0b:1e:cf:
e4:d6:6b:0e:1e:26:98:33:e1:ad:01:4a:a9:21:a4:49:04:b0:
9c:ca:42:58:e4:6e:ca:0e:28:51:f1:03:bc:b3:86:49:76:e7:
5f:31:51:e0:79:37:9f:f8:81:24:c3:be:4f:c4:06:fd:7a:f5:
55:cf:ad:28:9b:51:c1:0d:90:cc:d1:12:a0:d1:8d:cb:21:fa:
dd:b7:f0:d4:90:80:e4:dc:34:46:a0:57:2a:58:02:44:5c:90:
40:79:8e:81:8b:6a:f2:84:1c:00:19:5d:5b:22:25:4f:84:3b:
c4:a7:8a:da:cb:52:a0:89:1f:03:25:09:b6:5f:b5:27:48:a4:
69:79:4d:fc:f3:3a:d5:e1:3a:1e:d1:65:01:55:08:7d:39:00:
7e:95:c8:24:18:ff:9d:55:8f:3b:3c:c7:2d:13:96:8e:10:fc:
6b:30:ef:f8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHzG97+lDgxYCMn2wjYvIJ2XFqJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0
NjBEN0VDQTAeFw0yNTEyMDMxMTE2MjlaFw0yNTEyMDYxODAyMjlaMDMxMTAvBgNV
BAMTKEE1QkFDMDM2Qjg5MzBFN0U2RkI4NjhERDIxOTIzQjYyRUI1NzQ1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEw1ddj0vLYJxkbIbfyRxLiLP/
gURD8QUCD4tV8qV6FyIh9OKGUg66/GLVmabSsfH9idyLePoG2h1qh3HOieONbMOs
a1+w9IhuJgn+VrQXG5QRb89UAj5HtMlOfzsT6T3F7lTylnJlfhVXDAnVOgqkCcTk
mVwakWOSqH6ALVNO2DiuXc/3KuKo1E5HfgFDqS31KP7KRPATyUngfEVJNrij77at
cJ5ArXoZ3zNjJUWktBLwIlkYksj6m2vxEc4jH7ocyWCuDY7wLzWpkX+H4Q90QkgB
A0iEsZHZr2grJTC4UWGe5SC32LB+ei15H8Gf4suWr/M04w4KRR98gVwEhkl3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpbrANriTDn5vuGjdIZI7YutXRaIwHwYDVR0j
BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD
N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE
N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh
NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz
MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALqtGtmzMOE6yVWxJJFrNODo5bifhp6YS0tn
EzvWRQPjp7tYWZGRZHlT1jmkxs9vysG9N/5UxIAFP91ED4YLW3lxhq+cMkcOw2VP
PnAHqinx08ssPCoSugsez+TWaw4eJpgz4a0BSqkhpEkEsJzKQljkbsoOKFHxA7yz
hkl2518xUeB5N5/4gSTDvk/EBv169VXPrSibUcENkMzREqDRjcsh+t238NSQgOTc
NEagVypYAkRckEB5joGLavKEHAAZXVsiJU+EO8SnitrLUqCJHwMlCbZftSdIpGl5
TfzzOtXhOh7RZQFVCH05AH6VyCQY/51Vjzs8xy0Tlo4Q/Gsw7/g=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:04 2025 by rpki-client