This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft File: 6189E4F67BE53DF65282F8E1BB63165CCA784862.mft (raw, json) Hash identifier: sfq94btYm1FU9ZR0nzhVFanG9lnLESsFYtinxrXpZ/I= Subject key identifier: 35:E2:6B:40:0A:21:1C:03:76:A5:47:58:8C:EF:C7:E6:CF:72:A7:ED Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Certificate serial: 5CCBD3ADE85A9C15057F06C7FE8E3E88FF9E6391 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft Manifest number: 01A4 Signing time: Mon 15 Dec 2025 01:02:25 +0000 Manifest this update: Mon 15 Dec 2025 00:57:25 +0000 Manifest next update: Thu 18 Dec 2025 01:41:25 +0000 Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: TA4sXIkX/1vgSRuW9l2sSfoKt1o5FCsmy++oilBd+h0=) 2: 6189E4F67BE53DF65282F8E1BB63165CCA784862.crl (hash: mC0qbZ1jV9KCdpnMqqbf3qdMI28c9AEHu+hbOXcmEDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 01:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cb:d3:ad:e8:5a:9c:15:05:7f:06:c7:fe:8e:3e:88:ff:9e:63:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Validity Not Before: Dec 15 00:57:25 2025 GMT Not After : Dec 18 01:41:25 2025 GMT Subject: CN=35E26B400A211C0376A547588CEFC7E6CF72A7ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:4b:d8:7c:4f:6b:bd:34:1e:fd:33:86:f5: c8:7c:b6:45:a6:12:52:eb:7c:64:3b:9a:4d:16:eb: 38:2c:b1:26:fd:f9:6b:8e:2a:68:f6:76:bc:21:64: 90:f9:68:bc:61:6b:aa:2f:be:36:7e:20:ab:3b:86: dd:45:a1:4d:12:8d:eb:3b:41:07:45:08:8b:13:c1: 45:04:ae:28:76:b9:5f:6d:f1:b7:db:23:e4:88:94: 85:72:d4:3d:d7:cf:b7:9d:bc:c2:ee:c2:f0:01:e2: 4f:b1:b9:51:1e:ab:18:37:0d:fd:fc:ca:a8:dd:31: 51:19:51:e5:5e:8d:55:ad:36:0e:4a:72:de:8c:78: ea:85:c1:ed:32:57:0d:1b:20:72:83:5b:f8:0d:0c: 44:ff:e4:a8:e3:e7:4f:64:eb:38:c3:6f:00:40:7e: 22:0c:bb:d1:d7:c0:1b:6e:75:95:c9:b9:a3:41:5c: 02:1d:32:c6:89:8b:2c:c9:d1:e5:c6:c8:f5:78:89: c9:eb:8b:a9:4d:75:40:6e:77:13:62:62:f1:6c:7b: 07:56:db:e3:7e:ce:3d:ec:63:2f:34:97:ed:a0:9f: 69:5e:20:3d:f0:47:ec:cf:6f:a2:1c:c2:44:9d:fa: 29:7b:6d:f3:f6:9a:53:4f:be:f6:e8:06:3e:33:df: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E2:6B:40:0A:21:1C:03:76:A5:47:58:8C:EF:C7:E6:CF:72:A7:ED X509v3 Authority Key Identifier: keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:31:03:bb:a0:db:54:75:43:e1:eb:aa:da:fb:58:55:65:a8: 0d:17:44:f1:1c:4a:38:88:af:99:05:80:f8:4d:41:72:77:25: 08:5d:57:ec:c5:59:ba:b2:67:30:b6:fa:ea:ab:bd:3f:7f:23: db:92:f4:eb:a0:0b:ea:67:85:0f:cc:58:07:89:1b:68:53:ea: bc:e1:3b:73:7a:d3:f2:6f:1b:f6:a3:42:ab:44:58:1e:10:71: a9:e1:60:a0:3f:b7:a0:9e:8d:60:31:da:8e:28:bc:7b:1f:69: 19:8b:ee:3b:bc:b1:97:05:50:99:f7:13:0d:08:d8:92:0f:12: 7b:ed:28:bd:f1:5e:8e:af:59:b3:a9:52:b5:3c:a0:10:68:d0: e9:16:29:6c:04:51:8e:44:c4:d2:06:67:11:10:fd:a0:2d:be: 85:47:b5:05:58:04:66:48:ae:9b:af:a8:0f:ac:5f:b2:cc:78: 07:c9:0e:b6:bf:7e:0b:65:bd:a1:79:9f:1a:47:ba:77:0a:3f: 6c:cb:7d:a3:b4:99:9e:04:ff:8b:27:95:47:fd:70:56:82:a4: 7f:6b:6a:dd:06:b8:60:f6:4d:b2:49:19:8e:86:61:a6:a0:61: d3:ea:60:0d:8b:78:28:20:02:92:7a:2b:8e:59:c6:ca:f3:bb: a7:b5:22:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMvTrehanBUFfwbH/o4+iP+eY5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND QTc4NDg2MjAeFw0yNTEyMTUwMDU3MjVaFw0yNTEyMTgwMTQxMjVaMDMxMTAvBgNV BAMTKDM1RTI2QjQwMEEyMTFDMDM3NkE1NDc1ODhDRUZDN0U2Q0Y3MkE3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SEvYfE9rvTQe/TOG9ch8tkWm ElLrfGQ7mk0W6zgssSb9+WuOKmj2drwhZJD5aLxha6ovvjZ+IKs7ht1FoU0Sjes7 QQdFCIsTwUUErih2uV9t8bfbI+SIlIVy1D3Xz7edvMLuwvAB4k+xuVEeqxg3Df38 yqjdMVEZUeVejVWtNg5Kct6MeOqFwe0yVw0bIHKDW/gNDET/5Kjj509k6zjDbwBA fiIMu9HXwBtudZXJuaNBXAIdMsaJiyzJ0eXGyPV4icnri6lNdUBudxNiYvFsewdW 2+N+zj3sYy80l+2gn2leID3wR+zPb6IcwkSd+il7bfP2mlNPvvboBj4z31jdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNeJrQAohHAN2pUdYjO/H5s9yp+0wHwYDVR0j BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4 NDg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2 NUNDQTc4NDg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQxA7ug21R1Q+Hrqtr7WFVlqA0XRPEcSjiI r5kFgPhNQXJ3JQhdV+zFWbqyZzC2+uqrvT9/I9uS9OugC+pnhQ/MWAeJG2hT6rzh O3N60/JvG/ajQqtEWB4QcanhYKA/t6CejWAx2o4ovHsfaRmL7ju8sZcFUJn3Ew0I 2JIPEnvtKL3xXo6vWbOpUrU8oBBo0OkWKWwEUY5ExNIGZxEQ/aAtvoVHtQVYBGZI rpuvqA+sX7LMeAfJDra/fgtlvaF5nxpHuncKP2zLfaO0mZ4E/4snlUf9cFaCpH9r at0GuGD2TbJJGY6GYaagYdPqYA2LeCggApJ6K45Zxsrzu6e1IjI= -----END CERTIFICATE-----Generated at Tue Dec 16 07:28:46 2025 by rpki-client