This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: BMweUoe/uHAzA81VINO14fitQpplu/fiktace6zF7OU= Subject key identifier: 27:4A:E9:05:BD:A5:53:0E:D8:2C:2D:97:AA:1D:53:04:69:2C:F3:56 Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 2D532FEEED79AC517461C637EB92C4FC0371A741 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 01AE Signing time: Mon 01 Dec 2025 19:21:12 +0000 Manifest this update: Mon 01 Dec 2025 19:16:12 +0000 Manifest next update: Fri 05 Dec 2025 05:59:12 +0000 Files and hashes: 1: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: aUzHQUJssCDziLBA3EoLgPOwF+8B1UVhprlQNjiLTMM=) 2: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:53:2f:ee:ed:79:ac:51:74:61:c6:37:eb:92:c4:fc:03:71:a7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Dec 1 19:16:12 2025 GMT Not After : Dec 5 05:59:12 2025 GMT Subject: CN=274AE905BDA5530ED82C2D97AA1D5304692CF356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:1b:07:2d:7f:ec:bb:08:5f:cc:d9:21:d6: 1f:60:f9:e4:37:05:e3:5f:b2:ea:12:39:93:2d:6c: 8f:db:0d:41:0a:e7:58:f4:b7:38:72:ba:cf:60:88: 78:e9:4a:ac:7b:4b:d2:ed:8a:87:a8:66:14:b9:72: 57:d2:46:85:52:3d:c1:0e:f7:cb:4e:13:79:0f:98: df:0e:48:b1:4a:83:71:fa:da:15:9c:a2:12:0a:fd: e3:6f:d5:9e:ab:01:9e:de:04:2f:bd:04:18:08:96: 28:dc:a6:c8:0d:68:7d:58:74:c4:a7:6c:75:a8:1b: be:a4:3c:19:46:dc:13:5e:f2:41:ed:66:e9:71:7f: 08:f2:ff:3f:e9:45:bf:13:c0:d3:27:0e:fc:e8:6d: 5c:6d:fe:d2:89:b6:19:db:e3:e1:08:4b:15:b4:70: 37:90:74:2d:d6:6d:93:ba:3d:67:5a:af:ab:68:32: 3e:94:e5:8f:05:1e:36:eb:82:bc:8b:e3:39:12:85: 87:e4:c4:d9:02:75:71:f6:97:36:06:98:b4:1b:cc: 91:c5:18:9b:13:45:e8:80:c3:19:3e:f5:88:5e:93: 79:e7:d2:8b:8e:2c:bc:d4:f5:a7:d3:8d:13:35:66: 4a:45:3b:f9:66:d8:af:5e:12:bd:13:f5:fe:b0:7a: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:E9:05:BD:A5:53:0E:D8:2C:2D:97:AA:1D:53:04:69:2C:F3:56 X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:be:f4:8d:c7:c5:19:e9:4e:73:a8:90:57:b0:65:6f:16:5d: b5:c4:14:30:71:2f:91:ec:a1:a8:fd:d9:51:69:a8:ab:f7:3a: 47:3e:2a:e6:a0:b9:fd:d9:7d:46:30:1e:0e:65:16:f0:38:84: 0a:50:d6:c2:de:d1:10:aa:aa:f4:da:d9:fb:e8:ed:8e:fa:a6: 80:c1:96:71:d3:dd:e0:0a:7f:9f:8e:c2:c5:b9:16:8c:64:78: 1c:27:d3:4f:99:9c:f8:4c:77:0b:9b:87:f0:63:33:bc:77:a4: 0a:df:ef:7a:9a:80:8c:6b:a1:55:bc:bd:f5:46:1b:34:37:26: d4:01:0e:46:8c:a2:db:02:0e:59:2e:a4:83:8d:74:7d:4f:55: f9:0e:46:3d:c0:c5:26:a2:51:c9:82:96:68:be:bb:f0:b3:c5: d6:6c:24:8b:64:76:8d:3c:5c:9b:3a:2c:6a:a8:16:e2:6b:60: f7:d9:15:60:77:58:f2:fd:56:32:53:9c:03:96:41:34:e1:13: cf:22:87:a4:1f:4e:e7:77:ce:d8:58:f9:55:54:3d:e5:bc:b6: 7c:bb:fb:d6:1c:17:f4:06:e1:5d:55:c7:c4:53:66:9d:29:62: 86:0d:38:89:3a:92:30:50:69:dc:2b:d0:21:cc:76:27:c6:1d: 6c:b6:fc:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVMv7u15rFF0YcY365LE/ANxp0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTEyMDExOTE2MTJaFw0yNTEyMDUwNTU5MTJaMDMxMTAvBgNV BAMTKDI3NEFFOTA1QkRBNTUzMEVEODJDMkQ5N0FBMUQ1MzA0NjkyQ0YzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6axsHLX/suwhfzNkh1h9g+eQ3 BeNfsuoSOZMtbI/bDUEK51j0tzhyus9giHjpSqx7S9LtioeoZhS5clfSRoVSPcEO 98tOE3kPmN8OSLFKg3H62hWcohIK/eNv1Z6rAZ7eBC+9BBgIlijcpsgNaH1YdMSn bHWoG76kPBlG3BNe8kHtZulxfwjy/z/pRb8TwNMnDvzobVxt/tKJthnb4+EISxW0 cDeQdC3WbZO6PWdar6toMj6U5Y8FHjbrgryL4zkShYfkxNkCdXH2lzYGmLQbzJHF GJsTReiAwxk+9Yhek3nn0ouOLLzU9afTjRM1ZkpFO/lm2K9eEr0T9f6werMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ0rpBb2lUw7YLC2Xqh1TBGks81YwHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy+9I3HxRnpTnOokFewZW8WXbXEFDBxL5Hs oaj92VFpqKv3Okc+Kuaguf3ZfUYwHg5lFvA4hApQ1sLe0RCqqvTa2fvo7Y76poDB lnHT3eAKf5+OwsW5FoxkeBwn00+ZnPhMdwubh/BjM7x3pArf73qagIxroVW8vfVG GzQ3JtQBDkaMotsCDlkupIONdH1PVfkORj3AxSaiUcmClmi+u/CzxdZsJItkdo08 XJs6LGqoFuJrYPfZFWB3WPL9VjJTnAOWQTThE88ih6QfTud3zthY+VVUPeW8tny7 +9YcF/QG4V1Vx8RTZp0pYoYNOIk6kjBQadwr0CHMdifGHWy2/DI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:27 2025 by rpki-client