This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: 6JaBbtKLUzyl09PqPtORdHxOHEUSZ/bFv3pjfMG9U2k= Subject key identifier: 42:8C:95:83:44:5F:3E:96:19:1B:A4:96:C7:67:14:11:57:A8:93:3C Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 0250CBCC3B3A9B973EA2F3B2CC8C6D3EAB168BBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 0247 Signing time: Tue 02 Dec 2025 03:50:55 +0000 Manifest this update: Tue 02 Dec 2025 03:45:55 +0000 Manifest next update: Fri 05 Dec 2025 15:08:55 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: cajN6jst9qe/lD/F/VEZsCFF6Jkw1sc8vks2C+rnDtA=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:50:cb:cc:3b:3a:9b:97:3e:a2:f3:b2:cc:8c:6d:3e:ab:16:8b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Dec 2 03:45:55 2025 GMT Not After : Dec 5 15:08:55 2025 GMT Subject: CN=428C9583445F3E96191BA496C767141157A8933C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:f8:62:bb:bc:c2:22:5e:c3:cb:0b:b2:a9: 2a:8b:e4:48:39:ed:e5:11:fe:40:c2:3b:c7:cf:db: 83:f5:cb:3f:3f:76:68:26:ff:19:b8:5c:24:9b:41: 21:dc:3c:ce:c4:e3:fa:51:86:09:d8:9e:16:77:52: 9f:72:7c:e3:89:e7:8a:89:23:cb:24:61:3a:04:63: 6c:96:95:76:79:e7:1c:54:ba:9e:9c:bd:0c:a5:58: ea:fd:56:24:c4:df:11:a3:25:50:e1:76:bf:c6:c7: 18:ba:45:f4:80:92:79:bb:31:0c:2b:48:cc:84:9b: 71:54:4e:8e:65:b2:20:39:da:5e:4d:27:4d:f3:76: 10:3d:d0:7d:5b:c5:6a:b5:29:f2:fc:cc:ad:84:41: af:08:9b:26:0c:54:49:bd:84:fd:f0:3f:2a:57:fe: 63:db:eb:b5:44:c0:d5:0c:93:40:82:0e:ab:a5:fa: 41:77:54:0b:6a:f4:fe:71:11:3f:77:9a:e5:87:9d: fd:12:54:6f:34:9c:38:10:7e:27:c6:dc:f5:07:74: 2d:24:06:51:71:4e:f9:cb:cd:f4:c7:0f:4d:16:85: 10:e3:47:85:82:64:61:23:b4:74:6a:d9:c6:0b:06: 59:48:10:3f:a0:42:57:26:a5:7a:54:d3:6f:0f:3d: b8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:95:83:44:5F:3E:96:19:1B:A4:96:C7:67:14:11:57:A8:93:3C X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:64:e5:4b:08:c3:ff:9a:f6:60:d6:36:70:2b:7e:ac:45:81: 54:0e:55:4c:9a:e2:6f:a1:80:10:21:12:16:57:c1:4f:88:d6: 3b:c6:5b:3a:22:c9:75:92:1a:33:e1:c4:24:2b:18:27:81:19: 61:ed:2e:9b:e9:b6:06:19:f2:17:d2:1d:1d:86:5d:bf:0d:4e: 2e:37:be:ab:7a:69:14:34:4e:56:35:98:0b:1f:49:92:d6:30: ad:72:6a:a8:c8:98:b1:fe:b4:81:45:1e:8d:35:a1:e8:4e:53: 76:6c:92:8f:12:a3:b2:f8:5c:bf:d5:46:d6:99:e0:3c:1d:b2: 6a:d1:a0:af:93:50:14:4a:99:60:dc:9e:f0:4c:86:41:c8:52: 1f:83:c7:ce:03:03:bb:42:ab:ee:a2:1f:b4:b8:e4:d3:56:a0: 27:21:d4:0e:b1:fe:89:89:07:de:f6:25:ea:c0:3f:f6:7a:94: 73:ed:57:9c:56:2c:6f:ea:cf:a9:93:a6:52:b7:db:4c:de:87: 2b:37:c5:ab:6c:53:d2:8a:dc:de:24:67:67:6b:4e:a8:24:cf: bc:08:fb:55:bc:52:17:2e:d3:35:d7:3b:d3:3f:3f:a3:34:49: 58:4e:3a:a8:a0:e1:4d:52:d5:a3:e8:bc:77:69:c3:63:ee:49: a5:e6:59:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAlDLzDs6m5c+ovOyzIxtPqsWi7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTEyMDIwMzQ1NTVaFw0yNTEyMDUxNTA4NTVaMDMxMTAvBgNV BAMTKDQyOEM5NTgzNDQ1RjNFOTYxOTFCQTQ5NkM3NjcxNDExNTdBODkzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82vhiu7zCIl7DywuyqSqL5Eg5 7eUR/kDCO8fP24P1yz8/dmgm/xm4XCSbQSHcPM7E4/pRhgnYnhZ3Up9yfOOJ54qJ I8skYToEY2yWlXZ55xxUup6cvQylWOr9ViTE3xGjJVDhdr/Gxxi6RfSAknm7MQwr SMyEm3FUTo5lsiA52l5NJ03zdhA90H1bxWq1KfL8zK2EQa8ImyYMVEm9hP3wPypX /mPb67VEwNUMk0CCDqul+kF3VAtq9P5xET93muWHnf0SVG80nDgQfifG3PUHdC0k BlFxTvnLzfTHD00WhRDjR4WCZGEjtHRq2cYLBllIED+gQlcmpXpU028PPbgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQoyVg0RfPpYZG6SWx2cUEVeokzwwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1k5UsIw/+a9mDWNnArfqxFgVQOVUya4m+h gBAhEhZXwU+I1jvGWzoiyXWSGjPhxCQrGCeBGWHtLpvptgYZ8hfSHR2GXb8NTi43 vqt6aRQ0TlY1mAsfSZLWMK1yaqjImLH+tIFFHo01oehOU3Zsko8So7L4XL/VRtaZ 4DwdsmrRoK+TUBRKmWDcnvBMhkHIUh+Dx84DA7tCq+6iH7S45NNWoCch1A6x/omJ B972JerAP/Z6lHPtV5xWLG/qz6mTplK320zehys3xatsU9KK3N4kZ2drTqgkz7wI +1W8Uhcu0zXXO9M/P6M0SVhOOqig4U1S1aPovHdpw2PuSaXmWRQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:51 2025 by rpki-client