This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: ZhdfRRSTPy9zn8HIbPT+wbqtgKZjDV7JB+bI3zNp4vg= Subject key identifier: 85:E6:4B:46:A6:A9:AD:41:CE:AA:29:CB:60:18:6A:C2:CA:27:83:CA Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 161D3B1ABD0AB38C3A84AB360AB36720D5A9F15E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: B2 Signing time: Sun 21 Dec 2025 16:12:00 +0000 Manifest this update: Sun 21 Dec 2025 16:07:00 +0000 Manifest next update: Wed 24 Dec 2025 16:56:00 +0000 Files and hashes: 1: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: fjvjUNYYg47cKFp+PQ3XChUBsXzaSsH6hDvrqvQJ8AE=) 2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k=) 3: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1d:3b:1a:bd:0a:b3:8c:3a:84:ab:36:0a:b3:67:20:d5:a9:f1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Dec 21 16:07:00 2025 GMT Not After : Dec 24 16:56:00 2025 GMT Subject: CN=85E64B46A6A9AD41CEAA29CB60186AC2CA2783CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:74:3d:87:84:01:c0:89:44:c0:1a:69:fb:4a: 9d:b5:51:84:4e:0f:95:11:3e:d7:99:b7:c2:80:61: 28:15:2d:2c:bd:86:94:61:e8:20:ee:27:d6:0e:7e: bd:20:5d:f8:95:57:1e:24:5c:af:83:6e:1a:61:33: c6:ef:8a:74:2e:5d:56:fb:3b:51:d2:c7:a0:a4:29: 56:ec:35:99:06:19:76:1d:20:1a:b7:d1:2d:07:cc: a0:22:12:bb:a0:43:df:2d:cf:3c:16:5e:d5:00:43: fa:e3:39:c5:dc:f8:34:fd:f3:e8:5a:0c:16:1b:4c: 8d:4d:43:6b:cb:c8:52:6f:9c:c0:f1:a3:69:f5:f2: 90:8c:e4:c6:12:97:28:97:19:5c:dd:b1:14:1d:1f: 54:c9:bd:28:b2:8b:b8:e8:1b:eb:c6:8b:85:fc:10: 27:50:40:8c:98:be:62:81:f2:9c:f1:5e:1d:55:84: cd:ad:05:e3:09:0c:70:e7:cc:e3:be:23:7d:d7:3b: cd:97:9a:79:0f:48:41:8d:0c:83:85:a7:80:4a:63: be:e8:36:56:09:5c:31:98:88:08:5e:e3:e2:60:6f: f9:d2:bf:a4:51:9b:fc:9d:31:4a:a6:d1:0e:68:68: e7:3e:98:50:e5:c8:b5:e0:b7:c6:37:7c:c0:9c:19: 0e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:4B:46:A6:A9:AD:41:CE:AA:29:CB:60:18:6A:C2:CA:27:83:CA X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fa:4a:51:3e:1c:4b:f1:cd:6d:de:b4:bb:e0:fa:be:74:ff: 62:38:61:ca:81:d3:4c:e0:a0:4c:4c:4a:51:da:fc:9e:c6:6b: f2:9a:67:53:ef:20:b8:6a:c0:40:fc:84:59:e2:4d:a7:72:ff: a2:19:be:9d:7b:6a:e1:86:fc:35:9c:5b:5d:a1:86:2d:46:7a: 44:93:6f:da:5e:53:46:43:3f:1f:10:49:db:2f:f4:5a:e4:09: 49:0e:06:05:0d:0c:f2:47:05:b1:f6:e3:78:3b:ef:d7:3d:4c: fa:b4:1f:b7:89:85:6c:32:83:3e:95:ea:82:7b:60:1f:71:f9: 4b:07:4d:fa:f1:3a:85:39:aa:eb:66:f5:87:b5:7c:1e:3d:ba: 51:17:c5:ef:ca:e1:72:f3:4e:2e:9a:43:ec:42:29:26:52:1b: f3:cc:78:5c:50:c4:ac:7e:28:0b:d0:35:31:53:49:33:bc:29: 25:e4:9d:61:fb:70:4e:14:c5:01:9d:0f:db:7e:9e:54:12:69: 3d:5b:67:32:b4:46:55:89:86:ff:7f:75:1d:d6:17:67:d5:ba: 42:b2:2e:7c:ad:b2:d0:30:35:00:f3:39:36:22:82:39:35:10: c5:eb:86:a9:fb:73:62:06:71:4e:d5:f8:66:93:62:cf:a0:ec: 14:f7:2f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFh07Gr0Ks4w6hKs2CrNnINWp8V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTEyMjExNjA3MDBaFw0yNTEyMjQxNjU2MDBaMDMxMTAvBgNV BAMTKDg1RTY0QjQ2QTZBOUFENDFDRUFBMjlDQjYwMTg2QUMyQ0EyNzgzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhdD2HhAHAiUTAGmn7Sp21UYRO D5URPteZt8KAYSgVLSy9hpRh6CDuJ9YOfr0gXfiVVx4kXK+DbhphM8bvinQuXVb7 O1HSx6CkKVbsNZkGGXYdIBq30S0HzKAiErugQ98tzzwWXtUAQ/rjOcXc+DT98+ha DBYbTI1NQ2vLyFJvnMDxo2n18pCM5MYSlyiXGVzdsRQdH1TJvSiyi7joG+vGi4X8 ECdQQIyYvmKB8pzxXh1VhM2tBeMJDHDnzOO+I33XO82XmnkPSEGNDIOFp4BKY77o NlYJXDGYiAhe4+Jgb/nSv6RRm/ydMUqm0Q5oaOc+mFDlyLXgt8Y3fMCcGQ6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUheZLRqaprUHOqinLYBhqwsong8owHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX6SlE+HEvxzW3etLvg+r50/2I4YcqB00zg oExMSlHa/J7Ga/KaZ1PvILhqwED8hFniTady/6IZvp17auGG/DWcW12hhi1GekST b9peU0ZDPx8QSdsv9FrkCUkOBgUNDPJHBbH243g779c9TPq0H7eJhWwygz6V6oJ7 YB9x+UsHTfrxOoU5qutm9Ye1fB49ulEXxe/K4XLzTi6aQ+xCKSZSG/PMeFxQxKx+ KAvQNTFTSTO8KSXknWH7cE4UxQGdD9t+nlQSaT1bZzK0RlWJhv9/dR3WF2fVukKy LnytstAwNQDzOTYigjk1EMXrhqn7c2IGcU7V+GaTYs+g7BT3L74= -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:17 2025 by rpki-client