This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: NswUGQAQwIxR5G8tn3fr0itTNesqqlL3pn0EGDpMzS0= Subject key identifier: DE:0A:67:C0:A3:72:A7:02:0F:7A:7F:FC:49:4D:FE:DC:EB:B6:6A:E1 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 17B7AC776C27375AF2238818B3F4FAF178F83FBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01FC Signing time: Sun 14 Dec 2025 18:30:42 +0000 Manifest this update: Sun 14 Dec 2025 18:25:42 +0000 Manifest next update: Wed 17 Dec 2025 22:21:42 +0000 Files and hashes: 1: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: RMss7fbURbqNMyHq4FK1ruYzbVIG2wwE1Ds3WyerVRU=) 2: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) 3: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: wyY3CPGpB3zzZUc8QiVL+ydL4s6XrQRhF73erj2QQSs=) 4: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: sksB0+JpfamOk8agUpLTqgwXQckz8CSkrdrAWOtJ4OI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 22:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b7:ac:77:6c:27:37:5a:f2:23:88:18:b3:f4:fa:f1:78:f8:3f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Dec 14 18:25:42 2025 GMT Not After : Dec 17 22:21:42 2025 GMT Subject: CN=DE0A67C0A372A7020F7A7FFC494DFEDCEBB66AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3d:b7:65:b8:72:a9:94:c3:e6:27:17:b6:b5: b9:d6:ff:97:fb:65:b6:35:9c:9a:0d:c9:3b:fd:b2: dd:67:0e:2a:89:93:a6:da:b1:52:1b:4e:4c:74:77: dc:f4:71:04:a9:b7:87:e4:64:51:a7:3b:bc:29:49: 63:60:6d:07:03:09:22:5d:1d:29:df:5b:78:73:35: f7:3c:8a:5e:03:b4:26:14:9b:ac:97:4d:7e:6f:05: b9:a3:f9:ce:13:11:26:f1:8c:be:7f:f2:94:82:82: d9:41:03:37:c8:92:f2:79:06:23:0b:a5:7f:36:d3: d8:b7:1d:87:1c:11:6e:cd:1a:9d:62:2d:22:3a:d8: 64:73:fe:b6:92:36:83:f3:f8:64:4d:99:ac:94:a3: a3:81:bf:3e:a6:98:47:10:ec:00:4e:42:71:66:69: 87:61:9e:65:99:45:29:36:06:a9:48:a6:b8:49:8d: b5:b2:58:99:6b:6b:0a:9c:c9:3c:4c:8a:b7:fd:dc: ba:67:c5:c6:6b:e7:dc:df:52:3f:dc:a2:ca:30:a5: d6:b8:01:1d:3e:7d:35:6e:b5:78:21:ad:d3:e0:bb: 83:ad:c6:db:48:0d:e8:f1:ae:ae:fe:8d:b5:2f:d7: b8:91:e7:02:4b:fc:dd:d8:12:d1:20:bc:d9:1f:a2: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0A:67:C0:A3:72:A7:02:0F:7A:7F:FC:49:4D:FE:DC:EB:B6:6A:E1 X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ae:d1:9e:35:03:be:f9:ac:49:16:5c:f0:14:57:96:36:54: 3d:ea:86:b5:19:46:11:4d:ac:0e:1a:b0:f7:3d:81:aa:6e:36: a7:94:5f:d6:b8:63:7e:d0:c0:85:07:5e:9a:5f:f6:b6:c6:50: dc:14:24:a8:e7:4b:15:12:38:83:58:de:bd:c2:94:56:b4:4f: 9b:b7:e0:43:5d:ed:eb:01:30:5a:0f:a0:a8:bd:70:01:42:ab: 65:e0:f1:98:bb:1d:1c:7a:d9:17:61:21:ff:f3:3d:19:34:82: 94:97:0a:31:e5:fd:69:b1:e4:fd:61:3b:cf:35:5d:4b:a8:18: 7f:f6:7f:2a:da:4e:e2:e0:a6:50:0c:eb:34:84:e3:7f:59:7a: 29:11:22:f2:d4:53:40:a0:73:62:d0:43:49:ca:6f:da:60:3a: c5:19:42:cc:e0:d0:79:ad:bc:75:b7:15:27:6f:f2:e6:71:9d: 5b:8f:53:b7:7b:e3:0f:81:85:c6:c2:29:12:ca:4c:d3:e2:45: e8:d0:a5:45:43:6f:08:2e:43:d4:de:fc:b3:04:1d:2f:8f:0a: 4f:e9:ce:ef:ed:98:40:f0:6b:6a:ef:e3:49:77:10:a3:3c:15: 95:99:d0:48:23:70:11:0a:6d:c3:72:00:56:4d:e9:1a:74:5e: 98:59:bc:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF7esd2wnN1ryI4gYs/T68Xj4P7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTEyMTQxODI1NDJaFw0yNTEyMTcyMjIxNDJaMDMxMTAvBgNV BAMTKERFMEE2N0MwQTM3MkE3MDIwRjdBN0ZGQzQ5NERGRURDRUJCNjZBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxPbdluHKplMPmJxe2tbnW/5f7 ZbY1nJoNyTv9st1nDiqJk6basVIbTkx0d9z0cQSpt4fkZFGnO7wpSWNgbQcDCSJd HSnfW3hzNfc8il4DtCYUm6yXTX5vBbmj+c4TESbxjL5/8pSCgtlBAzfIkvJ5BiML pX8209i3HYccEW7NGp1iLSI62GRz/raSNoPz+GRNmayUo6OBvz6mmEcQ7ABOQnFm aYdhnmWZRSk2BqlIprhJjbWyWJlrawqcyTxMirf93LpnxcZr59zfUj/cosowpda4 AR0+fTVutXghrdPgu4OtxttIDejxrq7+jbUv17iR5wJL/N3YEtEgvNkfos9tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3gpnwKNypwIPen/8SU3+3Ou2auEwHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHau0Z41A775rEkWXPAUV5Y2VD3qhrUZRhFN rA4asPc9gapuNqeUX9a4Y37QwIUHXppf9rbGUNwUJKjnSxUSOINY3r3ClFa0T5u3 4ENd7esBMFoPoKi9cAFCq2Xg8Zi7HRx62RdhIf/zPRk0gpSXCjHl/Wmx5P1hO881 XUuoGH/2fyraTuLgplAM6zSE439ZeikRIvLUU0Cgc2LQQ0nKb9pgOsUZQszg0Hmt vHW3FSdv8uZxnVuPU7d74w+BhcbCKRLKTNPiRejQpUVDbwguQ9Te/LMEHS+PCk/p zu/tmEDwa2rv40l3EKM8FZWZ0EgjcBEKbcNyAFZN6Rp0XphZvHM= -----END CERTIFICATE-----Generated at Tue Dec 16 04:26:25 2025 by rpki-client