This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft File: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json) Hash identifier: Suxo6wMeVAhSUQHADOAxeVa1+NU1WGu8C23K/ZyRESo= Subject key identifier: 32:CE:42:82:EB:87:9C:05:48:22:52:3A:E3:8C:C9:EF:48:1A:42:4F Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 Certificate issuer: /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Certificate serial: 2BF963A1B977FA9D03742F2B2C796BFACBE79F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft Manifest number: 0130 Signing time: Tue 02 Dec 2025 12:00:02 +0000 Manifest this update: Tue 02 Dec 2025 11:55:02 +0000 Manifest next update: Fri 05 Dec 2025 21:12:02 +0000 Files and hashes: 1: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: qR5/h2IVmyFJn9UAZ87euE4Cc5iemFhRaqCPzk3ZsL0=) 2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: V1YXnZ8RaD7jZMTPv9sl3RlMQ1DjfCA6C5B7VF3kpxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f9:63:a1:b9:77:fa:9d:03:74:2f:2b:2c:79:6b:fa:cb:e7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Validity Not Before: Dec 2 11:55:02 2025 GMT Not After : Dec 5 21:12:02 2025 GMT Subject: CN=32CE4282EB879C054822523AE38CC9EF481A424F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1e:06:fd:60:9f:44:21:02:30:75:43:31:17: fc:0c:b3:b6:97:d9:1c:a9:14:82:e6:b6:48:e6:c2: ec:eb:a5:18:95:3b:9a:a5:7b:e5:83:bc:0f:70:f9: 84:3e:7c:f8:6b:ff:4b:ed:c6:75:b4:10:49:2d:68: b5:1b:75:4c:06:23:21:6a:0e:64:08:64:8c:8a:b5: 52:9d:13:89:c3:eb:b9:66:5a:45:4c:a7:ca:6d:77: 7f:2c:41:65:80:f5:d7:81:45:59:22:25:7d:36:34: fc:b4:21:3c:47:71:8d:65:ce:28:64:6a:6e:4b:44: ff:59:20:70:ee:54:51:25:7d:b2:f5:96:d6:35:16: fd:95:70:c3:81:ba:d8:6e:cc:55:a0:b4:97:12:c7: 09:41:60:34:2d:41:d9:94:38:2a:0f:80:b0:fe:a1: 9c:eb:1a:de:dc:e5:cd:39:30:24:9b:55:86:61:eb: b2:01:49:bc:78:3c:5c:62:12:27:39:4d:87:64:e5: 12:bf:5c:e6:ef:6a:55:19:cd:b2:ea:09:c6:c9:a2: b0:47:f1:3b:f3:84:88:e0:a4:fa:9a:38:aa:ec:f7: 09:27:73:7e:86:39:98:f9:5d:d1:ac:7d:03:e1:84: 9f:a5:70:72:19:85:c5:82:6a:1f:b3:87:d4:04:59: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CE:42:82:EB:87:9C:05:48:22:52:3A:E3:8C:C9:EF:48:1A:42:4F X509v3 Authority Key Identifier: keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a1:90:da:df:32:0d:35:38:25:ae:24:3f:90:80:dd:c9:9d: e4:ef:0c:d0:40:80:91:86:4c:e3:e0:29:b8:6d:0e:43:93:ad: e6:c6:c7:0b:b6:ff:b2:f9:86:4b:53:74:c3:5a:d1:fe:e0:de: bf:55:3b:70:00:81:dd:1d:b1:37:05:72:35:7c:b6:8e:fa:87: 02:90:0f:e7:0e:b7:fd:08:43:5f:fc:40:a5:67:61:1f:a1:eb: 04:01:35:64:07:c8:f0:cc:64:12:11:fe:a2:84:4e:1d:aa:b7: 02:37:01:aa:69:b2:fb:8f:ec:2a:f9:93:6b:80:81:86:b5:c8: 8c:b0:76:a8:62:84:4e:5c:3d:4a:a6:fc:f5:ac:1b:c1:90:95: 28:90:57:55:c9:24:c6:a5:aa:b8:ce:e3:cd:e3:ae:17:9c:d0: 0e:01:3a:cd:6b:b4:54:eb:ad:30:9b:8e:61:2c:49:11:e9:61: 6a:03:2a:bb:72:81:69:44:c9:b4:98:99:15:b1:6d:60:45:cb: 3d:72:b1:76:9c:84:96:8e:5b:3e:74:c0:22:3a:2f:ec:2a:51: 69:6b:c0:07:9d:f0:e9:2c:5a:37:3a:03:fd:17:02:57:25:3c: 8f:4f:31:f1:c2:ac:39:40:60:be:a1:66:63:df:b5:77:42:48: dd:73:c8:1f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITK/ljobl3+p0DdC8rLHlr+svnnzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDNjk1MEZCQzkzRjMwOUU4MzlDRkM1RTFBMkVGMEY2Qzkx QkYwOUM3MB4XDTI1MTIwMjExNTUwMloXDTI1MTIwNTIxMTIwMlowMzExMC8GA1UE AxMoMzJDRTQyODJFQjg3OUMwNTQ4MjI1MjNBRTM4Q0M5RUY0ODFBNDI0RjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANseBv1gn0QhAjB1QzEX/AyztpfZ HKkUgua2SObC7OulGJU7mqV75YO8D3D5hD58+Gv/S+3GdbQQSS1otRt1TAYjIWoO ZAhkjIq1Up0TicPruWZaRUynym13fyxBZYD114FFWSIlfTY0/LQhPEdxjWXOKGRq bktE/1kgcO5UUSV9svWW1jUW/ZVww4G62G7MVaC0lxLHCUFgNC1B2ZQ4Kg+AsP6h nOsa3tzlzTkwJJtVhmHrsgFJvHg8XGISJzlNh2TlEr9c5u9qVRnNsuoJxsmisEfx O/OEiOCk+po4quz3CSdzfoY5mPld0ax9A+GEn6VwchmFxYJqH7OH1ARZpWUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQyzkKC64ecBUgiUjrjjMnvSBpCTzAfBgNVHSME GDAWgBTGlQ+8k/MJ6DnPxeGi7w9skb8JxzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVi NTIxYmQxLTFkYTItNGI4MC04NDE2LWYwNWRlMjkyMjE2ZS8wL0M2OTUwRkJDOTNG MzA5RTgzOUNGQzVFMUEyRUYwRjZDOTFCRjA5QzcuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9DNjk1MEZCQzkzRjMwOUU4MzlDRkM1RTFBMkVGMEY2QzkxQkYw OUM3LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81YjUyMWJkMS0xZGEyLTRiODAtODQx Ni1mMDVkZTI5MjIxNmUvMC9DNjk1MEZCQzkzRjMwOUU4MzlDRkM1RTFBMkVGMEY2 QzkxQkYwOUM3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAIqGQ2t8yDTU4Ja4kP5CA3cmd5O8M0ECAkYZM 4+ApuG0OQ5Ot5sbHC7b/svmGS1N0w1rR/uDev1U7cACB3R2xNwVyNXy2jvqHApAP 5w63/QhDX/xApWdhH6HrBAE1ZAfI8MxkEhH+ooROHaq3AjcBqmmy+4/sKvmTa4CB hrXIjLB2qGKETlw9Sqb89awbwZCVKJBXVckkxqWquM7jzeOuF5zQDgE6zWu0VOut MJuOYSxJEelhagMqu3KBaUTJtJiZFbFtYEXLPXKxdpyElo5bPnTAIjov7CpRaWvA B53w6SxaNzoD/RcCVyU8j08x8cKsOUBgvqFmY9+1d0JI3XPIHw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:45 2025 by rpki-client