This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json) Hash identifier: 3qw11dN6eZgP3Hw1PBNF9bEWTeOjT2h6JP5GiiV3v1Y= Subject key identifier: 5F:D2:74:56:02:C6:9C:26:2E:73:E9:BD:ED:11:08:60:BF:C9:24:48 Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721 Certificate serial: 5C0ADA3C382756B54B374501DCEA2718F1094681 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft Manifest number: 01DE Signing time: Tue 02 Dec 2025 11:42:20 +0000 Manifest this update: Tue 02 Dec 2025 11:37:20 +0000 Manifest next update: Fri 05 Dec 2025 14:39:20 +0000 Files and hashes: 1: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: D/fiRje3jflwBw4Nt+WH0g7v84FOCmnkXLv7gI6CiIA=) 2: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: IbLWzBm08AS4RfKW9sTYAdOcxbZNJ6mrAM/VuC4qUdw=) 3: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Z9x86L9cvYXdwPWT7FHQP4GKwyxq3AVT2OalSxbymqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0a:da:3c:38:27:56:b5:4b:37:45:01:dc:ea:27:18:f1:09:46:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721 Validity Not Before: Dec 2 11:37:20 2025 GMT Not After : Dec 5 14:39:20 2025 GMT Subject: CN=5FD2745602C69C262E73E9BDED110860BFC92448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:76:1b:21:ad:a7:85:b6:ac:bf:f6:da:69: 3d:da:1f:30:fa:7a:6b:40:57:15:f3:37:51:23:7c: 3b:95:df:d0:6e:0c:df:cb:27:43:74:a9:66:7b:dd: d4:1d:75:5e:41:46:83:1d:f8:13:25:31:9f:a1:19: dc:ee:70:24:59:dd:7d:d7:a7:b2:1f:a0:5b:be:73: 68:dd:96:08:d2:1d:25:a4:03:76:e0:9e:2e:8d:00: 3d:b6:d1:ae:13:7e:aa:54:60:bc:99:95:30:5b:63: 78:fb:bc:52:4d:87:04:52:7c:f9:61:85:3c:b5:c4: 43:64:5f:1e:16:e8:fa:56:67:1a:02:d3:2e:39:42: fc:50:90:13:61:12:73:21:4f:96:5a:fe:78:26:a6: bc:94:9c:ae:bf:c8:03:6e:70:cc:1b:ff:35:bb:8d: 72:87:61:71:01:8d:6c:49:df:3c:98:ff:ea:82:43: 95:e0:d7:2a:ee:e7:02:4e:6e:65:5c:cd:44:3e:c2: 8f:2e:c5:21:1d:37:67:3c:13:43:d4:78:79:91:cf: 3c:98:db:df:f3:db:de:bc:6d:ae:55:30:8e:b0:e5: 90:cf:43:3e:e6:ae:bf:97:95:4b:18:fd:65:9b:8d: c0:48:5f:06:b7:0f:18:18:a1:59:bd:7f:59:a2:9f: 9d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D2:74:56:02:C6:9C:26:2E:73:E9:BD:ED:11:08:60:BF:C9:24:48 X509v3 Authority Key Identifier: keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:59:2c:54:80:90:9f:39:11:18:4a:18:c6:8c:b2:68:31:3f: c9:74:44:d3:64:b7:bb:d4:a3:17:89:3f:62:32:0b:60:db:d9: 2b:cd:2f:4f:1e:cf:7a:14:14:21:b9:0a:20:03:a0:62:a2:f0: 04:4c:ae:cf:51:8b:b6:50:c0:1c:f7:69:dc:30:69:4c:d5:c1: 52:b3:70:ea:43:80:c4:8c:19:2c:14:c4:ff:bf:43:50:e8:21: b4:74:13:7e:63:d2:e9:3b:2a:8c:2c:a0:ac:db:70:b5:5e:8b: 53:cb:c1:fa:b5:5a:89:57:3d:f9:45:b6:e6:4b:90:dc:b8:5b: c4:a7:44:f8:2c:c3:bf:5f:8d:42:d6:4b:0c:a7:8a:b6:99:b2: 73:b9:86:b5:27:d0:c2:08:a5:5b:92:ab:84:cb:73:57:c1:83: 33:75:ae:23:7a:ec:90:22:40:2e:52:b5:c7:ea:81:61:77:0c: 0f:d6:49:84:80:3a:b7:07:cc:a8:cd:f0:c2:db:c7:73:3d:1f: 6a:64:e5:39:03:87:c3:5d:22:3a:4d:c1:dc:1a:f7:de:22:2d: 66:0e:ac:d4:9d:4c:61:53:ab:05:ce:81:ac:f0:8d:c8:85:64: ca:a9:40:42:26:0c:c0:87:7d:f0:73:d3:8f:21:60:2c:40:93: ac:ef:43:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAraPDgnVrVLN0UB3OonGPEJRoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB QzMzQTcyMTAeFw0yNTEyMDIxMTM3MjBaFw0yNTEyMDUxNDM5MjBaMDMxMTAvBgNV BAMTKDVGRDI3NDU2MDJDNjlDMjYyRTczRTlCREVEMTEwODYwQkZDOTI0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiHYbIa2nhbasv/baaT3aHzD6 emtAVxXzN1EjfDuV39BuDN/LJ0N0qWZ73dQddV5BRoMd+BMlMZ+hGdzucCRZ3X3X p7IfoFu+c2jdlgjSHSWkA3bgni6NAD220a4TfqpUYLyZlTBbY3j7vFJNhwRSfPlh hTy1xENkXx4W6PpWZxoC0y45QvxQkBNhEnMhT5Za/ngmpryUnK6/yANucMwb/zW7 jXKHYXEBjWxJ3zyY/+qCQ5Xg1yru5wJObmVczUQ+wo8uxSEdN2c8E0PUeHmRzzyY 29/z2968ba5VMI6w5ZDPQz7mrr+XlUsY/WWbjcBIXwa3DxgYoVm9f1min51dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX9J0VgLGnCYuc+m97REIYL/JJEgwHwYDVR0j BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRZLFSAkJ85ERhKGMaMsmgxP8l0RNNkt7vU oxeJP2IyC2Db2SvNL08ez3oUFCG5CiADoGKi8ARMrs9Ri7ZQwBz3adwwaUzVwVKz cOpDgMSMGSwUxP+/Q1DoIbR0E35j0uk7KowsoKzbcLVei1PLwfq1WolXPflFtuZL kNy4W8SnRPgsw79fjULWSwyniraZsnO5hrUn0MIIpVuSq4TLc1fBgzN1riN67JAi QC5StcfqgWF3DA/WSYSAOrcHzKjN8MLbx3M9H2pk5TkDh8NdIjpNwdwa994iLWYO rNSdTGFTqwXOgazwjciFZMqpQEImDMCHffBz048hYCxAk6zvQzA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:32 2025 by rpki-client