This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: ARO/PjCDkXYKlRkRm7joZiYeUXTbwfgdJeiugIQxpTA= Subject key identifier: DB:A2:70:E8:DC:03:A6:3F:28:21:96:FB:88:3C:4C:9D:62:F9:0C:B8 Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 48BCE12080C3A01C1B0EE1C3B58D04E8FD0E167F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 01A3 Signing time: Tue 02 Dec 2025 13:30:41 +0000 Manifest this update: Tue 02 Dec 2025 13:25:41 +0000 Manifest next update: Fri 05 Dec 2025 19:06:41 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) 2: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: vqh4Agl8aOIKcyiaqpK/DoxWWJNoktfP2hacspdXmj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bc:e1:20:80:c3:a0:1c:1b:0e:e1:c3:b5:8d:04:e8:fd:0e:16:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Dec 2 13:25:41 2025 GMT Not After : Dec 5 19:06:41 2025 GMT Subject: CN=DBA270E8DC03A63F282196FB883C4C9D62F90CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:d9:47:1f:5b:be:c2:a3:1b:9b:c9:57:cb: 12:b7:cc:1e:8c:e4:25:69:e9:93:59:18:14:b0:bb: 4d:7a:a9:a4:b4:91:e5:c6:e8:07:9e:68:e8:7f:39: 58:ff:20:01:8a:7a:d9:f3:67:d7:68:f1:8f:f5:43: f8:07:a0:9a:a2:d5:ed:a7:fe:1b:ff:40:2e:cb:20: 56:13:02:2e:eb:a3:53:2b:1e:02:68:b9:73:f4:1d: 71:78:29:fe:53:8a:56:7c:aa:1d:d6:be:da:c8:bc: b9:1c:fe:48:14:c5:14:e9:a3:25:de:d5:5c:bd:00: d3:7f:d1:5c:71:d3:60:ef:b9:46:70:9f:36:23:32: 44:30:3c:73:0d:b8:cc:38:11:e7:2d:65:b4:ff:58: 02:d5:83:33:5a:d1:c5:8b:94:3c:26:c2:c5:57:e3: 74:81:3d:9f:03:77:44:ee:3c:21:c1:e8:60:6f:ab: 36:c7:13:3d:53:1b:4f:b6:cd:8b:5b:46:b5:7f:83: 58:f2:c2:7b:df:95:d7:f8:aa:1a:d3:c5:1c:b8:b2: 41:6a:c5:8d:42:d8:84:3e:33:89:b1:cf:20:78:04: a7:ad:c1:12:3d:36:18:7f:0d:47:69:15:71:6e:1b: 51:2f:97:56:e4:3b:db:c5:45:3e:3b:87:04:4f:c1: ce:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A2:70:E8:DC:03:A6:3F:28:21:96:FB:88:3C:4C:9D:62:F9:0C:B8 X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:60:49:e8:fe:5e:e3:2b:9b:d5:15:1a:1e:9f:9a:35:3b:78: 19:12:87:3e:22:ef:25:65:05:ef:8f:4d:51:85:2f:f7:e9:a1: c6:fe:8d:e1:52:29:88:59:26:42:0a:5e:9d:b1:07:b0:8a:f7: 54:6e:1b:ba:42:26:b4:07:82:82:85:c7:78:7e:27:55:ed:7c: 93:52:8d:0e:5e:f1:0f:a9:25:cd:7c:bb:67:7b:35:28:46:19: ee:9b:f8:79:2a:63:fe:70:61:65:60:cf:00:b2:cb:43:8e:b3: da:b5:d1:ad:70:44:7e:33:23:9c:c6:a7:49:3c:6f:03:26:51: 57:99:af:1b:dc:ae:ba:2a:16:76:ae:e4:9d:14:fd:9e:07:12: c5:9f:f4:b7:0f:09:12:e6:7d:6e:fb:98:77:d3:45:dc:50:af: 47:f7:96:b0:78:8f:c9:45:1c:db:6a:56:1a:07:d1:3c:d4:a4: 4c:58:f0:e0:f7:f2:00:6e:1f:e6:b3:0f:27:aa:1c:bc:8c:25: 10:6a:74:b9:c9:ee:93:f1:23:c4:4c:6d:9f:ac:ec:7f:9e:7e: 8c:db:0f:6c:9a:25:68:68:fe:5f:3a:23:bc:7c:67:0d:a5:cd: 85:b6:0e:35:93:02:d3:57:69:8a:0d:33:e8:8d:3f:19:1b:93: 8a:9a:6d:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLzhIIDDoBwbDuHDtY0E6P0OFn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNTEyMDIxMzI1NDFaFw0yNTEyMDUxOTA2NDFaMDMxMTAvBgNV BAMTKERCQTI3MEU4REMwM0E2M0YyODIxOTZGQjg4M0M0QzlENjJGOTBDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHNlHH1u+wqMbm8lXyxK3zB6M 5CVp6ZNZGBSwu016qaS0keXG6AeeaOh/OVj/IAGKetnzZ9do8Y/1Q/gHoJqi1e2n /hv/QC7LIFYTAi7ro1MrHgJouXP0HXF4Kf5TilZ8qh3WvtrIvLkc/kgUxRTpoyXe 1Vy9ANN/0Vxx02DvuUZwnzYjMkQwPHMNuMw4EectZbT/WALVgzNa0cWLlDwmwsVX 43SBPZ8Dd0TuPCHB6GBvqzbHEz1TG0+2zYtbRrV/g1jywnvfldf4qhrTxRy4skFq xY1C2IQ+M4mxzyB4BKetwRI9Nhh/DUdpFXFuG1Evl1bkO9vFRT47hwRPwc63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26Jw6NwDpj8oIZb7iDxMnWL5DLgwHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpgSej+XuMrm9UVGh6fmjU7eBkShz4i7yVl Be+PTVGFL/fpocb+jeFSKYhZJkIKXp2xB7CK91RuG7pCJrQHgoKFx3h+J1XtfJNS jQ5e8Q+pJc18u2d7NShGGe6b+HkqY/5wYWVgzwCyy0OOs9q10a1wRH4zI5zGp0k8 bwMmUVeZrxvcrroqFnau5J0U/Z4HEsWf9LcPCRLmfW77mHfTRdxQr0f3lrB4j8lF HNtqVhoH0TzUpExY8OD38gBuH+azDyeqHLyMJRBqdLnJ7pPxI8RMbZ+s7H+efozb D2yaJWho/l86I7x8Zw2lzYW2DjWTAtNXaYoNM+iNPxkbk4qabUM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:54 2025 by rpki-client