This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: qGaKKYpSiq0g60MtCuetiXSSZbGVl8PpWF44pHXT9KM= Subject key identifier: A3:5D:2F:46:DE:4B:28:4C:89:8A:90:7A:9E:22:D8:07:04:B6:31:4F Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 2E747D8FAA50C9A730ADA2C6CBD58037F125CE06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 03FA Signing time: Wed 03 Dec 2025 02:21:50 +0000 Manifest this update: Wed 03 Dec 2025 02:16:50 +0000 Manifest next update: Sat 06 Dec 2025 12:54:50 +0000 Files and hashes: 1: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: efsIQImdOkK9gyMaGfe3KK04giLo1CIy2nbSmiIavVs=) 2: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=) 3: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=) 4: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:74:7d:8f:aa:50:c9:a7:30:ad:a2:c6:cb:d5:80:37:f1:25:ce:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Dec 3 02:16:50 2025 GMT Not After : Dec 6 12:54:50 2025 GMT Subject: CN=A35D2F46DE4B284C898A907A9E22D80704B6314F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:8b:1c:e0:af:6b:09:bb:13:72:08:64:0c: 71:60:8c:bb:80:4d:e4:c1:53:9c:9b:e7:1e:4a:82: 1b:f3:3d:bf:ef:2e:9d:bd:56:1e:41:b6:ad:0b:2c: db:30:89:c5:e6:82:6f:db:3d:fd:b3:10:6d:40:87: 05:72:e4:61:d4:f7:79:61:dc:37:8c:7e:d8:8d:1b: f6:55:dc:a4:ca:58:e4:f2:8f:f4:e2:66:66:62:8b: 2c:f1:94:60:7e:97:46:83:f5:59:cb:51:93:cb:16: 89:28:a2:5b:58:2c:3d:13:e1:fc:9d:c8:d6:1d:76: 98:4b:e2:24:b8:29:63:9e:b0:e2:64:84:c9:0c:fd: 93:b1:0c:8b:39:81:41:ae:17:74:39:a8:1f:54:1d: 37:d4:5b:2f:f1:6a:5f:b1:6f:6d:c7:f5:e1:ec:78: 94:6f:a2:3f:d3:cb:8e:d9:b2:53:3a:73:b5:5b:7d: da:80:67:0a:b7:f1:20:f7:90:36:f3:e5:4a:8f:b1: f2:d4:3e:37:6a:2a:4e:0e:64:bf:97:3b:f6:de:c1: 64:1d:0e:1a:ae:51:f9:49:89:eb:79:20:00:97:bb: 34:f4:d7:dd:36:0f:03:e0:13:b3:9f:b8:70:e9:22: e4:64:87:67:5d:8f:ed:d3:1a:0c:ca:5e:ea:c0:cf: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5D:2F:46:DE:4B:28:4C:89:8A:90:7A:9E:22:D8:07:04:B6:31:4F X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4e:e4:5e:ca:eb:9c:0f:71:56:cb:d3:2c:c7:0f:57:d8:a7: 09:6a:20:1c:4f:40:d4:16:10:8e:7f:da:ed:a1:09:e8:ce:e8: 88:17:ce:0d:4c:dc:80:4b:6d:16:1e:ff:5f:75:c3:bd:15:b7: 4d:1a:18:a1:49:55:ea:ee:99:c7:bd:8a:38:d5:2f:50:01:39: 98:09:92:f0:4d:83:26:6c:b3:36:39:40:28:ff:9f:24:fe:5f: 4b:ff:1b:37:e8:c5:45:8e:81:1c:f5:56:0d:58:27:ce:f0:87: 5c:dc:b1:64:c8:7e:ba:93:ab:41:84:0a:63:ee:42:d5:31:02: 90:3c:d0:65:89:f1:4c:08:e5:35:54:7d:ce:32:e7:f1:bf:8d: aa:40:2b:1b:c9:6b:0c:0a:b3:fe:2c:34:db:05:ae:e3:0d:d5: 29:f9:b2:5b:dc:c9:f4:30:68:0b:86:28:3e:5f:51:61:55:45: 47:8a:ce:03:3b:8a:f6:0c:0a:a7:bc:8b:b5:4c:50:15:ed:7a: c7:03:d6:49:4b:30:cc:20:e4:3a:b9:ef:63:8a:08:c6:45:07: 57:b5:76:68:af:c9:85:89:7a:88:2b:bb:8c:23:11:6f:63:78: f3:86:a9:88:2a:36:5b:b7:41:44:e5:f7:ee:20:6d:07:f0:7f: 83:2b:ec:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnR9j6pQyacwraLGy9WAN/ElzgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNTEyMDMwMjE2NTBaFw0yNTEyMDYxMjU0NTBaMDMxMTAvBgNV BAMTKEEzNUQyRjQ2REU0QjI4NEM4OThBOTA3QTlFMjJEODA3MDRCNjMxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqYsc4K9rCbsTcghkDHFgjLuA TeTBU5yb5x5KghvzPb/vLp29Vh5Btq0LLNswicXmgm/bPf2zEG1AhwVy5GHU93lh 3DeMftiNG/ZV3KTKWOTyj/TiZmZiiyzxlGB+l0aD9VnLUZPLFokooltYLD0T4fyd yNYddphL4iS4KWOesOJkhMkM/ZOxDIs5gUGuF3Q5qB9UHTfUWy/xal+xb23H9eHs eJRvoj/Ty47ZslM6c7VbfdqAZwq38SD3kDbz5UqPsfLUPjdqKk4OZL+XO/bewWQd DhquUflJiet5IACXuzT01902DwPgE7OfuHDpIuRkh2ddj+3TGgzKXurAz9ClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo10vRt5LKEyJipB6niLYBwS2MU8wHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdO5F7K65wPcVbL0yzHD1fYpwlqIBxPQNQW EI5/2u2hCejO6IgXzg1M3IBLbRYe/191w70Vt00aGKFJVerumce9ijjVL1ABOZgJ kvBNgyZsszY5QCj/nyT+X0v/GzfoxUWOgRz1Vg1YJ87wh1zcsWTIfrqTq0GECmPu QtUxApA80GWJ8UwI5TVUfc4y5/G/japAKxvJawwKs/4sNNsFruMN1Sn5slvcyfQw aAuGKD5fUWFVRUeKzgM7ivYMCqe8i7VMUBXtescD1klLMMwg5Dq572OKCMZFB1e1 dmivyYWJeogru4wjEW9jePOGqYgqNlu3QUTl9+4gbQfwf4Mr7KA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:40 2025 by rpki-client