This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: ciY8LDw5W83qKWPn9komNx237soUkVS3XTuErJgKjU8= Subject key identifier: 31:17:8A:8A:C4:1A:44:3F:1D:41:68:2E:EB:7F:65:40:81:C6:F9:13 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 33679062564F1FF829FF37C6EFC2F43DAF307E1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: A0 Signing time: Wed 03 Dec 2025 07:54:36 +0000 Manifest this update: Wed 03 Dec 2025 07:49:36 +0000 Manifest next update: Sat 06 Dec 2025 18:12:36 +0000 Files and hashes: 1: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: qHrXMqQTucTeofIinh+6AXijbtXSBcDb8eithAS0vbA=) 2: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: jZM60p+ihsOsnG/o5i9hHgFmzFPD3WS1aTcQqe2yPLg=) 3: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: H33ymI9ju2NfQ2pOTJN+8hPqJ6LyJFP7aCyIqWIccfg=) 4: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: 2bo14asIeMFuulQFAuyOMWvwruZszgFyWNm1gWivGps=) 5: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: qZQ4FJYs46n/+hOc10zmPRfwJHK6+NPt/Sqykb6up2s=) 6: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: HDh9RVtWBnBcrHwqubOBt7jlCFaOIZGvz51HV90I8Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:67:90:62:56:4f:1f:f8:29:ff:37:c6:ef:c2:f4:3d:af:30:7e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Dec 3 07:49:36 2025 GMT Not After : Dec 6 18:12:36 2025 GMT Subject: CN=31178A8AC41A443F1D41682EEB7F654081C6F913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:2c:a7:02:01:f4:be:c4:8f:87:3f:d9:16: 61:f9:34:8a:26:e3:00:48:0c:72:bb:9d:f4:b5:e6: 5d:ee:d4:23:0f:c3:20:70:8b:6a:86:23:9d:f8:d8: 0c:9f:50:37:56:cd:e7:3f:1c:e1:de:c2:4c:2b:73: ef:ea:0d:c9:52:d3:65:ad:e5:3b:02:8e:ba:a8:b3: d1:0b:8b:20:24:75:28:09:83:c7:1c:b9:a3:36:09: 72:81:0b:07:65:ca:6b:49:c7:e4:7d:4d:d8:b8:70: b7:91:db:d3:0b:04:b6:33:f1:70:c5:bd:33:53:99: fa:33:c2:f8:a8:af:9d:e3:c6:28:ee:47:34:78:bc: 33:04:c2:58:51:06:12:13:ab:e4:8a:81:bb:5f:8d: f6:1c:80:3c:51:c4:1c:d7:06:da:70:4b:84:a0:5f: c9:12:8f:4e:1a:60:64:f0:6b:27:82:ae:cb:c1:04: fa:16:c4:5b:8b:60:d3:ef:90:e9:67:0c:b2:f5:ee: e7:9f:f4:cb:46:6b:69:3d:ab:93:3f:bf:ad:ca:02: 39:70:56:04:83:38:6a:51:2a:06:da:6a:01:df:46: 73:3d:8d:07:16:2b:70:3a:11:ae:87:b1:19:0c:61: f8:0e:cf:48:ac:83:ac:73:6e:88:13:3f:70:4b:ff: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:17:8A:8A:C4:1A:44:3F:1D:41:68:2E:EB:7F:65:40:81:C6:F9:13 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ec:53:98:75:78:5d:34:f1:21:0b:4d:a8:8c:04:ce:ec:7c: 81:b6:dd:6a:e9:40:f9:ea:59:cf:5e:6d:f0:9a:1a:9e:93:e1: a5:87:a3:01:34:d8:5b:fb:cc:e9:a9:8b:1d:e2:e0:a4:00:2e: d5:c7:99:da:7f:a2:12:88:6c:9c:ba:a4:7a:d9:99:33:90:f4: ea:9d:43:bf:de:9c:11:be:84:b8:47:68:f9:b4:ac:7a:02:22: 17:b1:17:16:72:f3:eb:05:8e:cc:5f:dc:58:3c:b9:7f:6e:59: f8:63:4a:cf:2f:ae:09:24:6e:84:39:c7:f2:48:08:4f:cf:52: 84:c1:a9:d2:e9:3b:f8:c0:4f:a1:08:a2:10:37:57:47:5a:6f: 14:43:cb:5f:79:c7:34:92:9a:11:5d:d7:07:06:a2:97:42:14: 2c:32:1c:7f:38:a8:68:59:b1:eb:98:8d:b2:6e:ba:36:68:3f: ee:f2:40:e8:a1:bb:bb:b4:62:51:69:a7:0f:96:ae:e8:28:14: f5:92:a8:44:e7:29:d2:04:53:80:31:b8:4c:8c:ba:14:30:cd: 37:16:89:c9:bb:34:10:5c:ed:6a:fe:97:4e:08:d1:6d:e5:7a: e1:ab:3d:3a:dc:c6:6d:c4:69:56:1f:50:a4:d0:3e:bf:24:62: f1:13:f7:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2eQYlZPH/gp/zfG78L0Pa8wfhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTEyMDMwNzQ5MzZaFw0yNTEyMDYxODEyMzZaMDMxMTAvBgNV BAMTKDMxMTc4QThBQzQxQTQ0M0YxRDQxNjgyRUVCN0Y2NTQwODFDNkY5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vCynAgH0vsSPhz/ZFmH5NIom 4wBIDHK7nfS15l3u1CMPwyBwi2qGI5342AyfUDdWzec/HOHewkwrc+/qDclS02Wt 5TsCjrqos9ELiyAkdSgJg8ccuaM2CXKBCwdlymtJx+R9Tdi4cLeR29MLBLYz8XDF vTNTmfozwvior53jxijuRzR4vDMEwlhRBhITq+SKgbtfjfYcgDxRxBzXBtpwS4Sg X8kSj04aYGTwayeCrsvBBPoWxFuLYNPvkOlnDLL17uef9MtGa2k9q5M/v63KAjlw VgSDOGpRKgbaagHfRnM9jQcWK3A6Ea6HsRkMYfgOz0isg6xzbogTP3BL/6jTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMReKisQaRD8dQWgu639lQIHG+RMwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDsU5h1eF008SELTaiMBM7sfIG23WrpQPnq Wc9ebfCaGp6T4aWHowE02Fv7zOmpix3i4KQALtXHmdp/ohKIbJy6pHrZmTOQ9Oqd Q7/enBG+hLhHaPm0rHoCIhexFxZy8+sFjsxf3Fg8uX9uWfhjSs8vrgkkboQ5x/JI CE/PUoTBqdLpO/jAT6EIohA3V0dabxRDy195xzSSmhFd1wcGopdCFCwyHH84qGhZ seuYjbJuujZoP+7yQOihu7u0YlFppw+WrugoFPWSqETnKdIEU4AxuEyMuhQwzTcW icm7NBBc7Wr+l04I0W3leuGrPTrcxm3EaVYfUKTQPr8kYvET93c= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:15 2025 by rpki-client