This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: wr6PuzdzFMAiJ/dq18ivGwUSvxuistKlBCHoHpZB6IY= Subject key identifier: 0E:F2:82:F2:63:19:75:AD:EA:7E:46:3F:F5:10:75:CD:79:C7:EE:CB Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 3A0055FF5D3C3DD0EC912BDCFBE4BE70F32E9D5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 01E7 Signing time: Wed 03 Dec 2025 03:02:22 +0000 Manifest this update: Wed 03 Dec 2025 02:57:22 +0000 Manifest next update: Sat 06 Dec 2025 05:47:22 +0000 Files and hashes: 1: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: 9EmMFN9j1NU/nvOY8wiv0XwdZICwg892ouExOsJJt8g=) 2: 6886844AB176920850E0984917E9713667D0A025.crl (hash: dRr7zQy3YTsRNZoEibQXastWcmc7P8VHcLy5xZw+XAA=) 3: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=) 4: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: oHaPvJW9wiPw6s3g8J+9ty85JMlTJ8ChGgOpurTLBaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:00:55:ff:5d:3c:3d:d0:ec:91:2b:dc:fb:e4:be:70:f3:2e:9d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Dec 3 02:57:22 2025 GMT Not After : Dec 6 05:47:22 2025 GMT Subject: CN=0EF282F2631975ADEA7E463FF51075CD79C7EECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:b8:00:1e:89:79:23:e3:6b:97:18:3f:6c: e5:4f:7d:80:c4:eb:6f:ed:67:9c:25:2b:65:61:2e: e9:08:e4:c1:f3:3f:c7:ac:db:8e:88:3d:06:64:d1: fe:15:72:94:dc:92:e3:31:bf:81:8b:99:ed:0b:ad: 5a:03:1b:77:df:88:ce:89:4c:ad:4d:17:a6:79:26: ec:d9:72:b6:18:89:c1:e8:4f:59:85:01:3f:c3:73: c4:63:1e:d7:6e:88:17:fd:02:fd:08:05:6e:80:62: e1:b2:58:3e:b5:c9:b9:12:bb:2c:3f:3f:09:0b:bd: d7:0d:aa:78:b9:8c:ea:5c:0b:44:43:cf:35:b6:b2: b7:90:ac:ee:48:ed:43:1c:20:46:7f:b2:98:ad:98: 98:8f:10:3d:98:84:6d:3f:8a:77:04:5a:0c:41:2d: 8e:98:b1:01:d9:6d:4c:1e:f7:8d:f0:a3:23:90:30: da:79:d3:93:cb:ee:45:02:3b:e9:36:d4:80:83:96: 6f:2e:c6:07:3b:5f:17:74:5f:d1:30:eb:d8:45:3a: 2a:bf:27:33:b2:f6:40:40:4b:9d:e3:81:b6:31:c0: 60:9f:e2:c7:56:d7:64:3d:e3:0f:da:1b:51:aa:38: 31:88:f2:07:23:90:d1:fe:ef:66:d5:5a:d8:08:37: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F2:82:F2:63:19:75:AD:EA:7E:46:3F:F5:10:75:CD:79:C7:EE:CB X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d9:82:76:c0:de:6c:19:53:19:59:33:ee:f2:01:81:c5:0b: 29:61:56:de:be:ea:2f:88:df:9a:57:97:17:6c:60:fc:3f:69: a6:a3:8f:57:29:9b:24:f7:33:80:59:c5:6b:d2:0a:14:18:07: 16:16:f1:a4:af:29:dc:32:af:48:93:51:af:68:e5:d1:3d:58: 4c:6a:6f:3b:e1:98:a6:16:c4:87:9a:dc:34:05:06:58:9d:fb: 14:38:7e:af:7b:62:92:16:44:24:32:b1:b6:5e:a5:77:a3:19: 71:81:aa:ed:be:63:2a:b9:d5:f7:7b:fd:0a:2c:cd:e3:a4:58: 06:0e:1c:88:0b:b9:19:65:46:b6:cc:fa:04:d3:b2:20:7a:5f: e9:da:e6:48:9c:0c:6d:f5:7b:c2:54:09:8c:60:33:9d:f1:b8: c4:19:54:d6:23:5d:4a:e4:b6:5f:ec:c5:18:77:c3:ad:8b:5f: ba:6e:18:74:26:98:83:65:0c:27:b1:2d:5d:96:7d:51:32:64: dd:eb:2d:4e:66:5c:ce:80:17:25:80:41:30:14:93:5c:27:80: 50:e8:b0:53:81:19:f5:09:7b:d3:8f:96:6a:04:a5:7d:af:35: cf:02:e4:c1:7b:e9:69:23:57:04:81:10:fb:35:16:8b:10:52: a9:0b:48:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgBV/108PdDskSvc++S+cPMunVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTEyMDMwMjU3MjJaFw0yNTEyMDYwNTQ3MjJaMDMxMTAvBgNV BAMTKDBFRjI4MkYyNjMxOTc1QURFQTdFNDYzRkY1MTA3NUNENzlDN0VFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKprgAHol5I+Nrlxg/bOVPfYDE 62/tZ5wlK2VhLukI5MHzP8es246IPQZk0f4VcpTckuMxv4GLme0LrVoDG3ffiM6J TK1NF6Z5JuzZcrYYicHoT1mFAT/Dc8RjHtduiBf9Av0IBW6AYuGyWD61ybkSuyw/ PwkLvdcNqni5jOpcC0RDzzW2sreQrO5I7UMcIEZ/spitmJiPED2YhG0/incEWgxB LY6YsQHZbUwe943woyOQMNp505PL7kUCO+k21ICDlm8uxgc7Xxd0X9Ew69hFOiq/ JzOy9kBAS53jgbYxwGCf4sdW12Q94w/aG1GqODGI8gcjkNH+72bVWtgINwHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDvKC8mMZda3qfkY/9RB1zXnH7sswHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDZgnbA3mwZUxlZM+7yAYHFCylhVt6+6i+I 35pXlxdsYPw/aaajj1cpmyT3M4BZxWvSChQYBxYW8aSvKdwyr0iTUa9o5dE9WExq bzvhmKYWxIea3DQFBlid+xQ4fq97YpIWRCQysbZepXejGXGBqu2+Yyq51fd7/Qos zeOkWAYOHIgLuRllRrbM+gTTsiB6X+na5kicDG31e8JUCYxgM53xuMQZVNYjXUrk tl/sxRh3w62LX7puGHQmmINlDCexLV2WfVEyZN3rLU5mXM6AFyWAQTAUk1wngFDo sFOBGfUJe9OPlmoEpX2vNc8C5MF76WkjVwSBEPs1FosQUqkLSHU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:40 2025 by rpki-client