This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft (raw, json) Hash identifier: zepS0nyJ/FzLCG5byzP345NOEv6/PE13T8G3vxSgcGI= Subject key identifier: 65:82:9D:BC:D1:2A:B9:38:CA:B7:4F:1B:6C:7B:61:60:C4:2F:F7:30 Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE Certificate issuer: /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Certificate serial: 09CB5EFFEC3A5A51E59767F355B274F93E4C9D0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft Manifest number: 04C0 Signing time: Mon 15 Dec 2025 20:21:02 +0000 Manifest this update: Mon 15 Dec 2025 20:16:02 +0000 Manifest next update: Fri 19 Dec 2025 06:26:02 +0000 Files and hashes: 1: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: u5WfQAzN1c26Bk/yoWUZSKe+Zg3RVzlzDJ1SjGA5ptQ=) 2: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl (hash: EDZC+TWEjuvR0YqJdKb+stVhRspGb6BD6+J+OrjrwRs=) 3: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: b/xbORHT+fQcjRsUPACV/EddNJE5h6xg8w5gIZewjWA=) 4: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: sD1D71HTJcX0Tgc5u0wKCnB+drLmqPRrwWzHCdL5tpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 05:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cb:5e:ff:ec:3a:5a:51:e5:97:67:f3:55:b2:74:f9:3e:4c:9d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Validity Not Before: Dec 15 20:16:02 2025 GMT Not After : Dec 19 06:26:02 2025 GMT Subject: CN=65829DBCD12AB938CAB74F1B6C7B6160C42FF730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d9:b9:51:73:aa:e0:0e:a7:cf:cf:8b:bb:40: 8b:d6:93:3e:1f:03:40:22:39:ea:b3:c1:4c:ca:d0: 05:00:43:31:8b:dc:b1:c0:c6:79:95:32:0a:03:70: d9:28:57:b0:80:84:41:da:d3:c6:a2:8c:13:0f:c4: 9a:2d:a0:21:0b:05:77:67:fc:55:c4:92:11:11:26: 3d:09:c9:47:f5:58:ac:ce:f2:20:d8:e6:4c:6f:10: f3:e1:9e:76:7e:78:54:06:6c:a9:1b:f6:3b:35:65: a2:64:1c:db:2a:fa:46:1a:94:73:a2:93:30:87:20: 37:bb:02:8e:0e:00:d5:e4:1f:96:e6:82:2a:38:d9: b7:9e:03:2b:07:c5:4c:fb:20:31:11:09:06:cd:08: e5:61:48:0d:a9:1e:36:a1:e1:e5:7b:57:88:79:61: e4:83:0d:11:f5:32:a2:13:5c:64:c8:4b:89:44:a9: ee:64:88:bf:f4:2e:b9:32:5a:5c:30:c9:f0:c1:2b: 5b:61:39:76:f4:c7:79:fa:fa:4b:0d:a5:5b:dc:31: 93:e3:fb:6f:d5:87:a5:cf:34:4d:1f:d0:f9:c1:aa: 40:6c:64:20:70:e7:06:12:0d:bf:57:f5:32:e8:ec: 4e:46:57:bf:4a:66:00:f6:95:f8:db:19:61:06:06: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:82:9D:BC:D1:2A:B9:38:CA:B7:4F:1B:6C:7B:61:60:C4:2F:F7:30 X509v3 Authority Key Identifier: keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b2:fd:75:23:fc:b6:22:42:cf:45:7a:84:8e:84:dc:13:a0: 38:c6:92:b9:fd:6c:28:1d:f5:76:85:5d:64:7a:ad:55:25:9a: 35:8f:5b:6e:eb:18:c4:2f:66:a9:c3:9b:d9:37:c9:6b:92:71: a3:41:4a:ca:1f:41:1d:24:7c:cc:10:dd:ff:2e:5a:a6:65:9b: f9:b5:83:f2:7e:37:bf:c8:76:c1:3e:b0:b3:93:05:92:c8:d4: 28:bf:ec:e4:58:bd:c0:0b:cd:7a:39:67:dc:55:53:e0:c9:77: 2c:f9:4b:29:79:05:96:20:ad:11:b3:ee:4e:48:87:a1:1b:a1: 30:c4:00:6f:d5:d5:58:a8:7c:ad:f3:f9:8f:95:10:36:06:5a: f4:94:78:74:7f:4a:1d:a7:07:80:cf:91:a4:b2:08:a2:9a:bd: 6e:49:28:c9:4b:56:3f:f4:dd:7e:13:bf:58:24:70:96:ca:c5: d3:68:79:2e:dd:a4:0c:2f:9e:51:77:51:95:5b:70:b0:be:80: 43:eb:82:34:2d:44:34:d3:da:c8:c4:a1:08:9c:90:dc:d2:66: 6c:89:56:a4:72:fb:27:c0:81:5a:0c:66:ab:67:ba:58:5a:36: d1:17:79:ae:90:a3:f1:27:67:c0:26:f3:82:40:13:10:65:e9: cd:51:7c:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcte/+w6WlHll2fzVbJ0+T5MnQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNE NkMzRjFDRTAeFw0yNTEyMTUyMDE2MDJaFw0yNTEyMTkwNjI2MDJaMDMxMTAvBgNV BAMTKDY1ODI5REJDRDEyQUI5MzhDQUI3NEYxQjZDN0I2MTYwQzQyRkY3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz2blRc6rgDqfPz4u7QIvWkz4f A0AiOeqzwUzK0AUAQzGL3LHAxnmVMgoDcNkoV7CAhEHa08aijBMPxJotoCELBXdn /FXEkhERJj0JyUf1WKzO8iDY5kxvEPPhnnZ+eFQGbKkb9js1ZaJkHNsq+kYalHOi kzCHIDe7Ao4OANXkH5bmgio42beeAysHxUz7IDERCQbNCOVhSA2pHjah4eV7V4h5 YeSDDRH1MqITXGTIS4lEqe5kiL/0LrkyWlwwyfDBK1thOXb0x3n6+ksNpVvcMZPj +2/Vh6XPNE0f0PnBqkBsZCBw5wYSDb9X9TLo7E5GV79KZgD2lfjbGWEGBtgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYKdvNEquTjKt08bbHthYMQv9zAwHwYDVR0j BBgwFoAUxuOiKBfObgmN/GdLJiiMg9bD8c4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmVlMWVlMS1hNWI1LTRjNjQtYmJiYi0yNjM2MzUyZGFjZmMvMC9DNkUzQTIyODE3 Q0U2RTA5OERGQzY3NEIyNjI4OEM4M0Q2QzNGMUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNENkMz RjFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlZTFlZTEtYTViNS00YzY0LWJi YmItMjYzNjM1MmRhY2ZjLzAvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhD ODNENkMzRjFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGy/XUj/LYiQs9FeoSOhNwToDjGkrn9bCgd 9XaFXWR6rVUlmjWPW27rGMQvZqnDm9k3yWuScaNBSsofQR0kfMwQ3f8uWqZlm/m1 g/J+N7/IdsE+sLOTBZLI1Ci/7ORYvcALzXo5Z9xVU+DJdyz5Syl5BZYgrRGz7k5I h6EboTDEAG/V1ViofK3z+Y+VEDYGWvSUeHR/Sh2nB4DPkaSyCKKavW5JKMlLVj/0 3X4Tv1gkcJbKxdNoeS7dpAwvnlF3UZVbcLC+gEPrgjQtRDTT2sjEoQickNzSZmyJ VqRy+yfAgVoMZqtnulhaNtEXea6Qo/EnZ8Am84JAExBl6c1RfNY= -----END CERTIFICATE-----Generated at Tue Dec 16 03:42:23 2025 by rpki-client