This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: GsTJuy2z55PrzYcl885mJgZzr/JhGSkpvM9MwbjyfOE= Subject key identifier: 08:E2:E5:29:51:C3:3C:60:61:F5:C4:4E:80:D9:9B:F6:AF:28:5E:72 Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 2B86D4F6A5C30E3D788B63F0E162A1C515872495 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 01E4 Signing time: Wed 03 Dec 2025 01:31:30 +0000 Manifest this update: Wed 03 Dec 2025 01:26:30 +0000 Manifest next update: Sat 06 Dec 2025 04:32:30 +0000 Files and hashes: 1: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: pFpz4oKKzIV1mM66AOjCRbdAN6xndRmIPN8Dw6MIaoY=) 2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:86:d4:f6:a5:c3:0e:3d:78:8b:63:f0:e1:62:a1:c5:15:87:24:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Dec 3 01:26:30 2025 GMT Not After : Dec 6 04:32:30 2025 GMT Subject: CN=08E2E52951C33C6061F5C44E80D99BF6AF285E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:63:a8:93:53:0e:67:b4:4c:50:03:12:49: 45:a9:b0:50:18:0e:4f:fe:8a:f5:40:e3:8e:cc:ea: 10:30:91:37:ff:39:ec:98:49:97:05:00:dd:8d:a1: e9:54:e7:e5:c9:8a:e6:b3:b0:06:0d:2c:f8:9d:04: 4c:23:72:0e:22:e4:dc:85:2c:3f:a4:f8:79:b6:6c: 9e:fd:f8:ab:ae:b5:66:30:b3:68:d4:22:0d:5e:95: 83:ff:7c:b4:f0:f5:24:36:98:e9:64:24:83:ce:b3: a6:c5:e7:49:48:66:0b:3e:d8:0d:40:52:6a:fc:d2: dd:43:ae:37:94:08:94:35:ef:cb:97:7e:93:e2:58: f7:59:00:26:21:54:36:e2:ed:0d:39:7a:87:48:a4: 24:47:79:f9:e0:c6:2f:d3:13:71:95:fc:24:f8:84: 13:76:b8:85:91:db:a9:bf:d3:3c:1c:82:39:78:a8: ab:59:1f:15:ce:53:e3:27:af:7e:95:22:7a:5a:12: d5:cb:c3:17:7e:2f:44:7e:cb:ef:21:1e:41:cc:b4: 96:10:c5:5b:18:ff:03:b3:ff:9d:06:d2:86:0e:f6: a2:c6:a1:e2:e1:60:50:60:b7:30:6c:1d:a3:fe:57: 17:fa:dc:b8:22:ad:0a:34:76:76:f1:71:01:d0:f5: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E2:E5:29:51:C3:3C:60:61:F5:C4:4E:80:D9:9B:F6:AF:28:5E:72 X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0c:f3:87:44:d4:42:f6:92:9c:4b:90:6e:63:b9:ae:f5:f0: 16:05:ac:03:34:95:d7:19:b5:c4:f7:e9:d4:8d:ae:c5:2d:a3: f9:8b:25:44:3c:be:05:74:c6:9d:f3:af:69:c5:7d:cb:25:22: be:5f:09:82:aa:b1:42:3e:e2:e8:6a:28:41:18:d7:29:c6:ee: 39:bc:3f:18:f3:fb:ea:91:70:94:e9:fb:bd:83:b5:15:3b:89: ee:c1:21:f8:79:1d:67:bc:73:c8:92:7d:29:9d:87:1e:ce:b8: 14:ee:4f:7d:69:89:75:33:ee:99:d9:cc:bd:1e:da:5e:5a:32: 59:af:e1:21:e2:e9:17:49:1f:2d:4b:01:75:33:31:59:81:83: ba:0d:62:8e:3f:97:e4:1f:ec:70:7b:10:44:10:f0:b7:cb:62: 2c:f9:17:d2:dd:4a:05:38:75:49:c0:3d:5f:d8:be:8c:62:ef: c3:76:18:c2:da:a3:27:03:51:7d:13:60:71:6c:27:5c:42:3e: 64:9d:65:d9:4a:55:54:39:82:89:0d:44:0c:bd:b3:c4:b1:51: 8a:61:0c:c1:45:d0:19:d6:70:99:ef:6a:e7:a5:d2:f4:5d:4b: 53:f7:09:70:01:88:1a:00:ba:a8:e1:74:68:66:3f:01:23:1c: 3a:bc:22:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4bU9qXDDj14i2Pw4WKhxRWHJJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNTEyMDMwMTI2MzBaFw0yNTEyMDYwNDMyMzBaMDMxMTAvBgNV BAMTKDA4RTJFNTI5NTFDMzNDNjA2MUY1QzQ0RTgwRDk5QkY2QUYyODVFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhO2Ook1MOZ7RMUAMSSUWpsFAY Dk/+ivVA447M6hAwkTf/OeyYSZcFAN2NoelU5+XJiuazsAYNLPidBEwjcg4i5NyF LD+k+Hm2bJ79+KuutWYws2jUIg1elYP/fLTw9SQ2mOlkJIPOs6bF50lIZgs+2A1A Umr80t1DrjeUCJQ178uXfpPiWPdZACYhVDbi7Q05eodIpCRHefngxi/TE3GV/CT4 hBN2uIWR26m/0zwcgjl4qKtZHxXOU+Mnr36VInpaEtXLwxd+L0R+y+8hHkHMtJYQ xVsY/wOz/50G0oYO9qLGoeLhYFBgtzBsHaP+Vxf63LgirQo0dnbxcQHQ9e45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCOLlKVHDPGBh9cROgNmb9q8oXnIwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkM84dE1EL2kpxLkG5jua718BYFrAM0ldcZ tcT36dSNrsUto/mLJUQ8vgV0xp3zr2nFfcslIr5fCYKqsUI+4uhqKEEY1ynG7jm8 Pxjz++qRcJTp+72DtRU7ie7BIfh5HWe8c8iSfSmdhx7OuBTuT31piXUz7pnZzL0e 2l5aMlmv4SHi6RdJHy1LAXUzMVmBg7oNYo4/l+Qf7HB7EEQQ8LfLYiz5F9LdSgU4 dUnAPV/Yvoxi78N2GMLaoycDUX0TYHFsJ1xCPmSdZdlKVVQ5gokNRAy9s8SxUYph DMFF0BnWcJnvauel0vRdS1P3CXABiBoAuqjhdGhmPwEjHDq8Iq0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:23 2025 by rpki-client