This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: dcT4pEprODqjdohOHXS1YFCNmsRcR6T9Ig30G5H8lcc= Subject key identifier: 99:AD:62:67:D7:AD:35:FB:82:85:74:8E:AE:AB:FF:55:CB:4B:A2:FE Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 3451BEFCA8E64083BC9BA06C4BD28DEE12FBFC27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: 0101 Signing time: Wed 03 Dec 2025 12:52:20 +0000 Manifest this update: Wed 03 Dec 2025 12:47:20 +0000 Manifest next update: Sat 06 Dec 2025 15:58:20 +0000 Files and hashes: 1: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: s9ISzp4CevHreOcDxSDDc+jauIJRthPua2MoaLPEIZc=) 2: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 4: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:51:be:fc:a8:e6:40:83:bc:9b:a0:6c:4b:d2:8d:ee:12:fb:fc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Dec 3 12:47:20 2025 GMT Not After : Dec 6 15:58:20 2025 GMT Subject: CN=99AD6267D7AD35FB8285748EAEABFF55CB4BA2FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:51:c9:86:72:c0:fd:b8:42:4b:87:05:04: 36:e9:5d:95:e1:47:9f:5b:1e:3a:a0:b2:7d:a4:6d: 4b:4e:75:fc:33:f7:eb:42:41:c4:91:09:fa:cb:5c: 75:04:e7:f9:f2:30:2f:cd:83:4d:3c:ca:e8:8e:b9: 6c:7f:64:19:ef:50:a8:1a:f6:f2:c2:fe:e6:d3:c4: b2:3c:f1:f7:dc:a9:f6:e5:fd:63:77:62:68:6a:02: 41:8e:76:84:97:74:00:ef:99:32:c7:1e:f4:2f:a6: 09:13:0e:9a:1e:e1:4b:52:4f:1f:b7:c8:73:a1:e7: ec:06:16:80:5a:42:62:b6:c1:35:8f:8c:31:c0:44: f2:46:1b:01:57:d6:36:13:44:5b:cb:ef:7d:d5:21: a1:f7:a9:23:94:0b:43:74:4a:20:db:bf:67:74:26: 00:f4:9b:e1:35:34:3c:aa:ff:47:63:10:21:a0:cf: db:bd:d1:bd:a1:bd:b2:0d:d2:bc:13:7a:fb:87:74: 4c:60:d0:30:a1:6b:eb:13:1f:01:38:d1:7f:ee:7c: 21:02:8a:3d:aa:8d:2b:cc:cd:94:d2:b6:17:f3:a1: 01:c2:9a:aa:c0:97:c9:17:de:14:c0:cb:02:5e:3d: 4a:3b:41:dc:2c:ba:9d:2f:10:f5:b9:67:cf:89:ba: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AD:62:67:D7:AD:35:FB:82:85:74:8E:AE:AB:FF:55:CB:4B:A2:FE X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:0f:e0:fe:dc:c8:f2:72:59:3d:9f:03:41:c5:ea:09:b0:0a: 7b:06:a0:c2:4c:17:59:8b:f3:d1:43:d5:da:7d:cc:32:d0:8d: 2f:09:3e:e6:e2:6a:1c:5d:ab:83:9f:15:48:a1:d6:2a:4c:86: 88:9f:a4:4e:50:d2:de:7d:f8:01:b3:b0:d0:8a:12:06:12:60: eb:7f:97:1a:0a:21:37:2a:ee:56:97:09:d5:7b:96:a6:13:00: fe:bf:c0:9b:bf:2e:09:8f:c5:41:68:48:1e:19:31:d4:d5:e4: 0f:62:64:b9:e2:09:ca:36:18:ee:fa:50:6e:87:7a:4c:14:2d: 20:9e:d4:2a:aa:f8:d4:71:2b:d9:b4:71:03:91:b2:0f:34:74: 56:a9:3c:4d:8e:43:3d:c8:eb:de:fe:5c:c8:29:ce:f7:82:c2: 2a:da:da:19:d5:b0:02:57:9f:5d:0f:51:13:ae:39:62:be:4f: d6:23:3b:f2:ac:4a:9a:e8:73:f0:ab:d3:6b:48:bd:1c:87:b9: a8:a5:1a:8c:55:8d:d1:b4:0b:ec:7f:4e:7c:1e:36:71:4b:f7: ae:3a:52:c2:6f:8e:a9:fb:16:28:92:3d:82:7c:be:8f:72:e8: 58:7a:c3:8e:b0:c2:0e:ee:f2:4b:ec:ba:11:29:c1:a2:7c:30: d1:e0:06:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFG+/KjmQIO8m6BsS9KN7hL7/CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTEyMDMxMjQ3MjBaFw0yNTEyMDYxNTU4MjBaMDMxMTAvBgNV BAMTKDk5QUQ2MjY3RDdBRDM1RkI4Mjg1NzQ4RUFFQUJGRjU1Q0I0QkEyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pFHJhnLA/bhCS4cFBDbpXZXh R59bHjqgsn2kbUtOdfwz9+tCQcSRCfrLXHUE5/nyMC/Ng008yuiOuWx/ZBnvUKga 9vLC/ubTxLI88ffcqfbl/WN3YmhqAkGOdoSXdADvmTLHHvQvpgkTDpoe4UtSTx+3 yHOh5+wGFoBaQmK2wTWPjDHARPJGGwFX1jYTRFvL733VIaH3qSOUC0N0SiDbv2d0 JgD0m+E1NDyq/0djECGgz9u90b2hvbIN0rwTevuHdExg0DCha+sTHwE40X/ufCEC ij2qjSvMzZTSthfzoQHCmqrAl8kX3hTAywJePUo7Qdwsup0vEPW5Z8+JurnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUma1iZ9etNfuChXSOrqv/VctLov4wHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEP4P7cyPJyWT2fA0HF6gmwCnsGoMJMF1mL 89FD1dp9zDLQjS8JPubiahxdq4OfFUih1ipMhoifpE5Q0t59+AGzsNCKEgYSYOt/ lxoKITcq7laXCdV7lqYTAP6/wJu/LgmPxUFoSB4ZMdTV5A9iZLniCco2GO76UG6H ekwULSCe1Cqq+NRxK9m0cQORsg80dFapPE2OQz3I697+XMgpzveCwira2hnVsAJX n10PUROuOWK+T9YjO/KsSproc/Cr02tIvRyHuailGoxVjdG0C+x/TnweNnFL9646 UsJvjqn7FiiSPYJ8vo9y6Fh6w46wwg7u8kvsuhEpwaJ8MNHgBrI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:23 2025 by rpki-client