This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft File: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft (raw, json) Hash identifier: GwF79pey3DqjEsXbpc4yqt5iHhxMpmQbu1YYycn8liI= Subject key identifier: 37:78:7B:0A:EC:8D:D7:E3:B8:A2:D3:78:B8:FB:94:93:90:7C:8F:D4 Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Certificate serial: 6E1A12B97F7363AE956C46EF146552BCAEA90735 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft Manifest number: 032A Signing time: Tue 02 Dec 2025 18:31:59 +0000 Manifest this update: Tue 02 Dec 2025 18:26:59 +0000 Manifest next update: Fri 05 Dec 2025 23:14:59 +0000 Files and hashes: 1: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl (hash: nFztynIiXpAiZrzS4IcYvxoDsjEJgCxH5X09EZbaQLM=) 2: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: g0qXlise9HaMFGbsno6S9nxOreCjvNtFTp/h65NgFw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1a:12:b9:7f:73:63:ae:95:6c:46:ef:14:65:52:bc:ae:a9:07:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Validity Not Before: Dec 2 18:26:59 2025 GMT Not After : Dec 5 23:14:59 2025 GMT Subject: CN=37787B0AEC8DD7E3B8A2D378B8FB9493907C8FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:2b:d1:90:b9:4e:70:00:9c:bb:96:c3:6b: ab:18:f1:10:15:1f:e0:27:b1:79:69:64:f3:f6:24: 3c:ac:4d:5f:70:81:de:5e:71:cb:70:01:c3:49:46: a5:2a:2f:6e:71:02:46:a5:d6:de:d4:e5:ed:82:b1: 10:4f:64:03:8f:c0:37:55:07:ba:e8:68:ec:d3:0d: 8b:e8:b2:e1:b1:a6:ad:c7:81:74:e3:cf:c8:2f:dd: 51:f9:95:70:02:48:a6:eb:bb:e7:a1:09:ad:02:fa: c8:3a:db:eb:1d:af:73:ff:ff:57:3e:c6:29:8e:10: cc:52:ca:6e:47:f3:c9:ae:cc:90:45:ff:fe:f4:d9: af:33:21:58:69:db:e1:f9:0b:bf:95:33:aa:bc:06: 8c:03:2c:7f:21:cb:83:14:06:05:cd:e0:5f:79:eb: 67:25:93:1c:cf:dc:b4:de:a2:6d:cf:71:71:dd:33: 90:03:b8:8e:78:6a:23:f9:8d:16:a1:ea:6e:96:2e: 94:8a:64:2f:56:53:66:56:58:db:02:b7:b3:63:cf: 42:1e:ec:80:00:89:89:2c:6a:09:57:9c:fb:b8:b4: 39:16:02:81:5a:bb:ae:7f:2a:d2:80:df:bf:6b:0e: a2:2b:4f:e6:ac:81:7e:cf:3b:cc:81:c9:e8:96:13: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:78:7B:0A:EC:8D:D7:E3:B8:A2:D3:78:B8:FB:94:93:90:7C:8F:D4 X509v3 Authority Key Identifier: keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d0:4b:c7:3b:98:67:25:a5:8c:a2:4d:d1:30:c7:c9:e8:7c: d5:e2:b1:39:ee:b1:10:80:a9:43:c1:1c:15:71:8a:a4:33:0c: f1:37:36:b9:5d:dc:61:44:19:4b:e9:dd:3b:ac:f5:7b:b1:3f: 0d:34:4d:d2:7d:0a:08:2d:e0:7c:8f:05:b4:7a:56:d4:85:64: e8:eb:d9:7e:ae:b6:27:ad:07:2b:bb:3a:f1:f3:3d:03:4c:aa: b9:24:67:61:31:a1:24:48:21:52:20:1e:87:63:fc:77:4d:2f: aa:ee:38:f5:3e:12:c0:02:d2:62:94:fe:b6:df:aa:01:64:dd: 29:b2:80:ae:d2:66:0f:f5:2c:5b:5d:b9:f1:9a:c4:e3:f7:ef: 34:f1:fe:9e:0e:71:69:6c:4e:44:4e:3a:48:17:d9:44:eb:3c: b8:fd:9f:09:52:79:ae:e8:1d:50:09:d5:fb:50:86:78:24:41: 00:1e:22:8b:7e:ac:00:2d:b4:a5:ee:29:c3:0e:a2:71:09:ed: 0a:0b:73:c1:50:21:2b:fc:dc:98:2f:94:d4:bc:b4:9c:ab:2d: bb:85:1b:e1:a5:d4:5b:e6:06:1c:7c:72:0b:f9:a3:4b:0b:cd: 7e:d8:c5:0e:6b:f0:bc:a5:0d:7b:d5:e7:2e:76:60:65:87:1a: fd:69:98:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhoSuX9zY66VbEbvFGVSvK6pBzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0 NDQ5QUM2RTAeFw0yNTEyMDIxODI2NTlaFw0yNTEyMDUyMzE0NTlaMDMxMTAvBgNV BAMTKDM3Nzg3QjBBRUM4REQ3RTNCOEEyRDM3OEI4RkI5NDkzOTA3QzhGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRivRkLlOcACcu5bDa6sY8RAV H+AnsXlpZPP2JDysTV9wgd5ecctwAcNJRqUqL25xAkal1t7U5e2CsRBPZAOPwDdV B7roaOzTDYvosuGxpq3HgXTjz8gv3VH5lXACSKbru+ehCa0C+sg62+sdr3P//1c+ ximOEMxSym5H88muzJBF//702a8zIVhp2+H5C7+VM6q8BowDLH8hy4MUBgXN4F95 62clkxzP3LTeom3PcXHdM5ADuI54aiP5jRah6m6WLpSKZC9WU2ZWWNsCt7Njz0Ie 7IAAiYksaglXnPu4tDkWAoFau65/KtKA379rDqIrT+asgX7PO8yByeiWE7H7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN3h7CuyN1+O4otN4uPuUk5B8j9QwHwYDVR0j BBgwFoAUtoKfXn73td8zl80yIhYL6URJrG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTA5MDU3My02YWQzLTRlNjMtOGFmNC04YTJkNTgyYWEwY2QvMC9CNjgyOUY1RTdF RjdCNURGMzM5N0NEMzIyMjE2MEJFOTQ0NDlBQzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0NDQ5 QUM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh ZjQtOGEyZDU4MmFhMGNkLzAvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBC RTk0NDQ5QUM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjQS8c7mGclpYyiTdEwx8nofNXisTnusRCA qUPBHBVxiqQzDPE3Nrld3GFEGUvp3Tus9XuxPw00TdJ9Cggt4HyPBbR6VtSFZOjr 2X6utietByu7OvHzPQNMqrkkZ2ExoSRIIVIgHodj/HdNL6ruOPU+EsAC0mKU/rbf qgFk3SmygK7SZg/1LFtdufGaxOP37zTx/p4OcWlsTkROOkgX2UTrPLj9nwlSea7o HVAJ1ftQhngkQQAeIot+rAAttKXuKcMOonEJ7QoLc8FQISv83JgvlNS8tJyrLbuF G+Gl1FvmBhx8cgv5o0sLzX7YxQ5r8LylDXvV5y52YGWHGv1pmEA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:41 2025 by rpki-client