This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: 8h124SC5StUfFClL6CvEBqACF8Z/6KU54TT9QbiGZHM= Subject key identifier: CF:37:8C:AD:FB:3E:8B:C9:65:A2:D3:D7:93:27:07:32:5B:2B:B0:A8 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 18A23E95F07317D66548CDB3B6531D5C7CB51B48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: A5 Signing time: Sat 06 Dec 2025 18:41:28 +0000 Manifest this update: Sat 06 Dec 2025 18:36:28 +0000 Manifest next update: Tue 09 Dec 2025 23:22:28 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: i70g+GwD21YDsMW+4LKOIJvPDqgsobV0afp0wj+r5HM=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: cKUomJ/WqxyaqY9vdgFl58JHNh+ZT0xZGA+nJWt1lWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a2:3e:95:f0:73:17:d6:65:48:cd:b3:b6:53:1d:5c:7c:b5:1b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Dec 6 18:36:28 2025 GMT Not After : Dec 9 23:22:28 2025 GMT Subject: CN=CF378CADFB3E8BC965A2D3D7932707325B2BB0A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:60:90:b4:e9:b0:57:79:67:df:8b:c1:45:f0: be:f6:e0:f9:2a:92:21:0a:f1:1c:a0:1c:26:07:ec: 28:96:a9:ff:36:55:9f:46:51:21:5e:34:b7:be:a3: 6e:bc:c9:15:cc:bc:07:59:ca:89:8c:d7:a1:79:ca: 8c:d1:10:68:7e:73:c7:c3:58:2c:92:b2:c5:61:4e: 57:05:b1:32:5b:6c:b5:08:aa:7e:30:b6:fb:9f:6d: 91:90:17:54:ce:42:f3:ba:a1:c3:46:9e:1a:18:1d: 0a:90:72:84:b1:99:f7:fd:a4:31:e7:0b:e3:94:3f: a6:3f:a8:e4:8d:e2:2e:a3:68:89:00:5c:f2:61:48: 1d:28:3b:37:59:51:0c:75:39:0f:64:79:89:a5:8d: 15:68:fa:82:d7:02:b4:d4:0a:70:ca:00:34:47:49: b1:2b:27:7f:73:f4:3e:34:5d:70:0d:a4:05:d8:75: 7f:b4:55:70:11:69:d0:1b:2e:51:0d:3d:53:bb:fb: 0a:3f:1b:d8:56:78:73:54:a4:2d:02:79:64:f9:ca: f9:5a:f3:e7:9a:2a:35:09:2b:54:b6:9a:4b:cb:50: fe:0a:6d:b7:bb:52:46:e8:73:32:79:f3:3b:07:80: 29:c7:a1:1d:a8:26:07:84:5f:27:c7:64:1b:ef:f6: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:37:8C:AD:FB:3E:8B:C9:65:A2:D3:D7:93:27:07:32:5B:2B:B0:A8 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:72:0a:48:2d:92:40:3b:d3:ed:02:7c:83:6f:cc:af:2a:96: 46:99:a0:39:a0:01:9b:76:5d:94:e7:87:a4:ef:70:7c:ed:b0: bd:8f:04:8a:12:32:3d:af:34:b0:f8:be:f4:21:40:aa:8d:83: 0c:28:ee:16:56:17:4d:21:51:91:c3:5d:eb:1b:38:d2:c7:23: 94:ef:18:65:6e:6e:d8:d7:7a:7b:19:03:d8:4f:21:00:e1:e2: b4:92:a6:f7:ea:33:bd:e6:86:80:6c:e8:6e:35:e9:c1:42:c6: ad:3d:12:14:86:c6:76:f2:95:46:47:de:1e:96:18:23:cd:00: e9:65:86:21:b6:93:23:70:ff:ab:d0:32:39:81:50:87:ff:92: e0:94:a6:cf:0b:42:a3:aa:7c:b1:e7:ff:ba:52:c3:2a:24:24: d7:f7:ab:03:16:9d:83:99:43:02:33:74:9c:82:2e:32:21:28: de:c7:b0:fd:34:50:14:e7:44:08:49:57:86:03:b1:8b:9b:bf: 87:39:4b:49:93:02:b0:28:bc:d2:72:e5:42:ed:99:92:65:74: 99:d7:95:91:bd:1d:65:3c:ce:2d:db:72:11:56:65:88:97:17: 6b:03:1d:09:b0:63:79:8f:d5:63:34:e2:55:8e:b9:11:08:c0: b0:6f:bc:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKI+lfBzF9ZlSM2ztlMdXHy1G0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNTEyMDYxODM2MjhaFw0yNTEyMDkyMzIyMjhaMDMxMTAvBgNV BAMTKENGMzc4Q0FERkIzRThCQzk2NUEyRDNENzkzMjcwNzMyNUIyQkIwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqYJC06bBXeWffi8FF8L724Pkq kiEK8RygHCYH7CiWqf82VZ9GUSFeNLe+o268yRXMvAdZyomM16F5yozREGh+c8fD WCySssVhTlcFsTJbbLUIqn4wtvufbZGQF1TOQvO6ocNGnhoYHQqQcoSxmff9pDHn C+OUP6Y/qOSN4i6jaIkAXPJhSB0oOzdZUQx1OQ9keYmljRVo+oLXArTUCnDKADRH SbErJ39z9D40XXANpAXYdX+0VXARadAbLlENPVO7+wo/G9hWeHNUpC0CeWT5yvla 8+eaKjUJK1S2mkvLUP4Kbbe7UkboczJ58zsHgCnHoR2oJgeEXyfHZBvv9pUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzzeMrfs+i8llotPXkycHMlsrsKgwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9yCkgtkkA70+0CfINvzK8qlkaZoDmgAZt2 XZTnh6TvcHztsL2PBIoSMj2vNLD4vvQhQKqNgwwo7hZWF00hUZHDXesbONLHI5Tv GGVubtjXensZA9hPIQDh4rSSpvfqM73mhoBs6G416cFCxq09EhSGxnbylUZH3h6W GCPNAOllhiG2kyNw/6vQMjmBUIf/kuCUps8LQqOqfLHn/7pSwyokJNf3qwMWnYOZ QwIzdJyCLjIhKN7HsP00UBTnRAhJV4YDsYubv4c5S0mTArAovNJy5ULtmZJldJnX lZG9HWU8zi3bchFWZYiXF2sDHQmwY3mP1WM04lWOuREIwLBvvDg= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:35 2025 by rpki-client