This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft File: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json) Hash identifier: npIdfY5jTiAoD/Kp6AqnRi7FE75LQ3AMVHPbjEqRMzQ= Subject key identifier: 13:96:0E:B5:DE:A2:79:31:75:94:0D:71:BA:22:7B:9D:BB:92:46:E2 Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 07C8AFDC9C874009A148FC99A5FF52A1528F0DFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft Manifest number: 014D Signing time: Wed 03 Dec 2025 09:42:25 +0000 Manifest this update: Wed 03 Dec 2025 09:37:25 +0000 Manifest next update: Sat 06 Dec 2025 20:07:25 +0000 Files and hashes: 1: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=) 2: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc=) 3: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: xofSiYiihwgt8aV9+h+aFA5KzMKF0KqNIDxNlFm73Vw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c8:af:dc:9c:87:40:09:a1:48:fc:99:a5:ff:52:a1:52:8f:0d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: Dec 3 09:37:25 2025 GMT Not After : Dec 6 20:07:25 2025 GMT Subject: CN=13960EB5DEA2793175940D71BA227B9DBB9246E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:9f:06:69:6a:5d:e8:47:47:8f:77:33:5d: 0a:21:91:fb:02:35:69:50:3c:10:f2:87:df:25:7e: a8:d8:04:91:f9:ad:26:f6:8c:03:6d:3b:da:71:9c: 5e:ec:8e:da:e9:3b:1c:19:90:de:a7:6e:6c:e7:30: 37:9e:b3:0f:e0:31:a5:76:ab:60:11:a7:2a:48:9e: 8f:91:4d:ae:26:09:6e:ec:b1:cd:14:44:7d:31:0b: e9:ec:b4:f2:cb:de:29:72:96:80:68:d9:d7:55:15: 79:60:a6:4f:a7:95:e3:2a:be:c1:92:19:c7:06:f5: e5:3d:d3:f4:ab:0d:31:91:16:f3:5f:0e:1b:b7:e4: 46:d4:2d:dc:48:74:d0:65:02:f0:6f:ab:73:09:42: c5:0e:52:be:10:88:f6:1b:73:c5:91:29:27:5f:6c: 73:95:df:25:17:3d:2e:d9:9a:c2:85:f0:56:e8:8f: 4f:d5:25:cd:4e:79:fe:bf:4d:4d:11:aa:b2:6f:97: dc:30:35:d6:a7:d1:35:51:b3:d6:df:cb:51:3d:ea: 4f:8c:94:50:23:b6:df:d8:84:f1:0f:6a:4c:dc:bd: 52:e3:92:7f:3e:0a:96:d8:8a:8b:e2:3d:3d:71:50: 01:b9:a4:d5:c3:1f:6a:93:17:a6:5d:80:5f:c4:17: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:96:0E:B5:DE:A2:79:31:75:94:0D:71:BA:22:7B:9D:BB:92:46:E2 X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a1:3e:7a:a4:c8:fb:b8:c6:0c:6f:18:f2:b6:17:50:96:a3: d3:03:2e:95:a9:e6:51:28:6c:63:58:9d:09:54:da:3c:ad:46: d0:76:74:e2:b3:c9:9f:0d:b9:b8:70:3b:e5:3f:12:0d:1a:c6: 97:eb:f4:ae:da:f8:61:1b:91:31:a0:1e:37:ed:cb:4c:47:98: 57:f4:2f:fc:29:1e:d6:66:54:14:4c:a1:67:d5:ec:22:0e:7f: 29:c7:a3:47:43:f0:8c:75:8f:b3:4f:66:d6:45:34:a1:80:db: 1f:cc:23:c8:93:16:71:28:17:5a:5a:3f:c9:95:12:13:26:58: 20:7b:a6:91:33:74:43:af:a1:54:f4:ee:4d:8e:75:89:76:a4: 35:e4:16:4a:26:93:52:35:86:47:ed:dc:16:e5:1e:49:c7:7f: 02:83:63:62:35:25:b2:68:43:5b:a8:21:7d:51:45:c2:04:d0: 1c:b1:ba:c4:75:0e:ca:b1:b3:a3:37:d9:7c:81:bd:d4:27:de: 55:34:ad:7e:6e:51:70:c9:86:dd:53:9f:05:09:ad:38:3c:32: fd:15:76:bc:ff:49:d6:6f:d4:39:6b:a8:51:f4:ec:e8:90:25: f3:3e:e0:e8:e3:30:49:0b:e1:76:2f:1b:98:a2:7a:61:fe:4f: fd:d2:79:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8iv3JyHQAmhSPyZpf9SoVKPDfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNTEyMDMwOTM3MjVaFw0yNTEyMDYyMDA3MjVaMDMxMTAvBgNV BAMTKDEzOTYwRUI1REVBMjc5MzE3NTk0MEQ3MUJBMjI3QjlEQkI5MjQ2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdZ8GaWpd6EdHj3czXQohkfsC NWlQPBDyh98lfqjYBJH5rSb2jANtO9pxnF7sjtrpOxwZkN6nbmznMDeesw/gMaV2 q2ARpypIno+RTa4mCW7ssc0URH0xC+nstPLL3ilyloBo2ddVFXlgpk+nleMqvsGS GccG9eU90/SrDTGRFvNfDhu35EbULdxIdNBlAvBvq3MJQsUOUr4QiPYbc8WRKSdf bHOV3yUXPS7ZmsKF8Fboj0/VJc1Oef6/TU0RqrJvl9wwNdan0TVRs9bfy1E96k+M lFAjtt/YhPEPakzcvVLjkn8+CpbYioviPT1xUAG5pNXDH2qTF6ZdgF/EFySDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE5YOtd6ieTF1lA1xuiJ7nbuSRuIwHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0 NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+hPnqkyPu4xgxvGPK2F1CWo9MDLpWp5lEo bGNYnQlU2jytRtB2dOKzyZ8NubhwO+U/Eg0axpfr9K7a+GEbkTGgHjfty0xHmFf0 L/wpHtZmVBRMoWfV7CIOfynHo0dD8Ix1j7NPZtZFNKGA2x/MI8iTFnEoF1paP8mV EhMmWCB7ppEzdEOvoVT07k2OdYl2pDXkFkomk1I1hkft3BblHknHfwKDY2I1JbJo Q1uoIX1RRcIE0ByxusR1Dsqxs6M32XyBvdQn3lU0rX5uUXDJht1TnwUJrTg8Mv0V drz/SdZv1DlrqFH07OiQJfM+4OjjMEkL4XYvG5iiemH+T/3SeSg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:39 2025 by rpki-client