This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft File: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json) Hash identifier: rVrxPnPlW9NDJHq3R3RKJdME6Gg/XNoGcIK0ZL3OI2k= Subject key identifier: D2:F7:E4:C2:C8:67:DB:CC:12:AE:D0:BA:FC:4C:B1:B0:8C:BA:90:D0 Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Certificate serial: 5FBCF265AE75CE66ADC6616ED67D8B17A99A9AE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft Manifest number: 01CB Signing time: Mon 01 Dec 2025 10:02:05 +0000 Manifest this update: Mon 01 Dec 2025 09:57:05 +0000 Manifest next update: Thu 04 Dec 2025 14:33:05 +0000 Files and hashes: 1: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: fqgPEiZyAb0hynbzck5IXEWLrXIgp6VsY2Pj0WiOvP0=) 2: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: GWXv/Jcvhsgx5xupvgCdstajkZkqV0dY8SAdabOvJ9g=) 3: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 2T9anWJYGXV0eFwi77jhWK8yssFnyZlgHKcoPcMUt7I=) 4: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: xIS6sNK0UqeUJFxq14NuNTlsbhpsETkb9gDhOu1ONl8=) 5: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: KAFubrx3pFXuXrG+RvxU6WTHcNKicXCvjI9v9e2Tgss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bc:f2:65:ae:75:ce:66:ad:c6:61:6e:d6:7d:8b:17:a9:9a:9a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Validity Not Before: Dec 1 09:57:05 2025 GMT Not After : Dec 4 14:33:05 2025 GMT Subject: CN=D2F7E4C2C867DBCC12AED0BAFC4CB1B08CBA90D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:4b:45:92:62:76:64:57:6e:32:01:6c:0f: ae:4f:c3:92:77:b3:df:47:d5:82:5b:2a:2a:d4:18: 25:53:19:ce:0c:d7:b6:1a:14:a4:99:5a:fc:47:05: bc:db:6f:ca:b0:f0:18:64:57:bb:49:9c:19:f3:72: cb:2e:75:40:a1:8f:2a:80:2b:e7:5d:62:4b:0b:d4: 31:81:76:71:86:0e:b2:14:8e:d4:07:3e:72:59:97: 1f:22:5f:c4:d3:e0:a9:70:88:ed:d5:bd:b6:db:2b: 7a:5d:63:cf:60:0e:ff:c6:4a:ce:9a:dc:39:e3:83: 01:c2:e9:29:77:1c:76:96:d4:4d:c9:03:d1:de:92: 90:94:3e:60:d1:19:e3:32:57:33:a1:c0:2f:9e:d4: d6:af:d4:86:f3:16:4a:ef:cb:e8:68:65:c1:9d:f4: 6e:5e:c6:38:5e:ae:a4:a0:b6:e1:22:91:19:89:61: 82:3b:03:ac:97:66:a2:28:c0:5b:82:31:04:78:07: 7c:90:1c:96:fd:ca:f7:29:90:5d:44:b9:9b:93:08: a4:db:06:bd:d0:5c:96:eb:4e:b8:88:77:49:6e:b4: 42:a7:a1:ff:bd:9c:dd:17:48:9e:a5:c1:9b:cb:ac: d6:e9:95:41:ce:f0:08:cf:3d:a9:1a:d6:80:ef:23: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F7:E4:C2:C8:67:DB:CC:12:AE:D0:BA:FC:4C:B1:B0:8C:BA:90:D0 X509v3 Authority Key Identifier: keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0f:a3:7b:25:fc:1b:4e:26:b2:73:d7:12:67:0a:f4:86:c7: ac:49:36:17:5f:d9:ed:d1:eb:da:6f:d3:33:4c:ee:5e:d5:f2: eb:be:47:05:89:d5:df:cb:38:a3:75:28:6f:9d:9c:c5:6f:4c: c3:df:4f:4a:02:8e:24:ef:00:b2:4f:00:d3:c8:c6:3d:e6:c3: dd:6c:32:c7:7d:b4:c3:1e:64:47:b2:bd:df:ea:b3:d5:4c:02: 44:c8:31:e7:ff:d9:ab:4b:2c:97:bb:e3:88:a0:f1:e3:0f:7c: 7a:2b:c0:90:3b:7f:97:8f:45:74:49:68:00:b9:64:ea:3b:2d: 08:bb:08:df:1d:c8:ec:f2:8d:8e:3a:35:68:82:c7:b3:7a:d5: 3d:a7:b6:8c:c0:18:c0:bc:60:e9:72:cf:0f:8a:01:7e:68:68: 6d:a2:43:96:89:6c:2a:1f:3b:fc:48:10:8e:5b:62:56:6c:af: 4e:f9:69:47:7a:6d:5f:6a:1c:b7:bf:fd:f5:9c:c5:ef:b9:5b: 6c:3f:10:51:8a:aa:5c:19:68:26:6c:aa:14:13:57:9c:7c:86: 97:be:a7:cf:09:7b:ae:21:f2:8f:ac:2f:f3:96:be:1f:e4:5a: d8:b2:54:8c:bf:3d:a0:2c:9e:d3:3f:d7:f4:20:b3:fa:ad:f1: 5b:38:08:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7zyZa51zmatxmFu1n2LF6mamuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD RjY2QjgwMTAeFw0yNTEyMDEwOTU3MDVaFw0yNTEyMDQxNDMzMDVaMDMxMTAvBgNV BAMTKEQyRjdFNEMyQzg2N0RCQ0MxMkFFRDBCQUZDNENCMUIwOENCQTkwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2EtFkmJ2ZFduMgFsD65Pw5J3 s99H1YJbKirUGCVTGc4M17YaFKSZWvxHBbzbb8qw8BhkV7tJnBnzcssudUChjyqA K+ddYksL1DGBdnGGDrIUjtQHPnJZlx8iX8TT4KlwiO3VvbbbK3pdY89gDv/GSs6a 3DnjgwHC6Sl3HHaW1E3JA9HekpCUPmDRGeMyVzOhwC+e1Nav1IbzFkrvy+hoZcGd 9G5exjherqSgtuEikRmJYYI7A6yXZqIowFuCMQR4B3yQHJb9yvcpkF1EuZuTCKTb Br3QXJbrTriId0lutEKnof+9nN0XSJ6lwZvLrNbplUHO8AjPPaka1oDvI1qJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vfkwshn28wSrtC6/EyxsIy6kNAwHwYDVR0j BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2 QjgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5 M0JDRjY2QjgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcPo3sl/BtOJrJz1xJnCvSGx6xJNhdf2e3R 69pv0zNM7l7V8uu+RwWJ1d/LOKN1KG+dnMVvTMPfT0oCjiTvALJPANPIxj3mw91s Msd9tMMeZEeyvd/qs9VMAkTIMef/2atLLJe744ig8eMPfHorwJA7f5ePRXRJaAC5 ZOo7LQi7CN8dyOzyjY46NWiCx7N61T2ntozAGMC8YOlyzw+KAX5oaG2iQ5aJbCof O/xIEI5bYlZsr075aUd6bV9qHLe//fWcxe+5W2w/EFGKqlwZaCZsqhQTV5x8hpe+ p88Je64h8o+sL/OWvh/kWtiyVIy/PaAsntM/1/Qgs/qt8Vs4CIk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:44 2025 by rpki-client