This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: 9d56iZOVwuOQOqJUa+382PIq5hBvnXHYa4qubiz48N8= Subject key identifier: 37:6C:B3:F0:D1:1B:C5:30:02:C1:B5:3A:FF:FE:E7:41:7F:75:0A:D7 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 3BA989625669EEF3AE33B867040CA2C3C5DBEC7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 046A Signing time: Tue 02 Dec 2025 05:02:00 +0000 Manifest this update: Tue 02 Dec 2025 04:57:00 +0000 Manifest next update: Fri 05 Dec 2025 13:52:00 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: yGS9M3YbL0M51dF+VYwXUwGMK7BPKOOH1YkboegzkJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a9:89:62:56:69:ee:f3:ae:33:b8:67:04:0c:a2:c3:c5:db:ec:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Dec 2 04:57:00 2025 GMT Not After : Dec 5 13:52:00 2025 GMT Subject: CN=376CB3F0D11BC53002C1B53AFFFEE7417F750AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:8e:86:84:8e:a2:1f:fd:1e:62:5a:ea:72: f3:99:16:f2:63:1b:9e:72:18:5b:89:dc:ec:3f:09: dc:a7:5f:a0:2f:b3:6d:cd:fd:60:97:4a:53:8a:c1: c1:55:95:10:db:03:36:ec:af:d5:ce:36:95:91:b7: d7:b8:49:6a:6b:9e:7c:12:1b:c0:a3:b6:13:32:62: d2:50:59:89:9f:c1:56:4c:eb:09:b4:05:10:17:bb: 86:70:88:1a:57:1e:e5:44:44:91:1c:ab:c3:f1:26: b8:e6:41:91:b8:e7:6d:d4:16:35:5d:c4:22:8c:f6: 6a:35:98:f1:35:9d:02:00:59:96:2e:48:31:43:14: 22:a4:f5:be:3e:20:e8:d4:f7:30:39:78:b0:be:79: 28:56:29:cd:97:bf:94:2b:4a:eb:08:31:d9:dd:01: fe:f1:ae:2a:72:a2:38:a8:50:6f:a6:98:48:78:28: 25:28:e2:10:66:17:44:b1:42:8c:5e:af:0a:e5:2b: 4a:ee:ca:3e:be:18:a5:be:03:0c:89:bc:83:e7:81: 2f:ea:74:a2:d4:b4:fb:b4:91:5f:6a:46:a9:a8:b0: 1c:1d:70:81:2c:a1:40:13:43:54:1b:8c:a8:ab:7f: 7a:f0:80:e0:d2:1c:bf:ed:20:2c:79:4c:3f:cc:74: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6C:B3:F0:D1:1B:C5:30:02:C1:B5:3A:FF:FE:E7:41:7F:75:0A:D7 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bf:6b:f6:93:3e:68:bf:c0:6b:21:a8:45:37:5c:d1:83:44: 80:e4:9a:5e:c9:68:3a:0e:ae:d9:ef:ab:bd:51:b2:6f:d8:5e: 9b:8a:96:02:a8:87:03:b5:92:84:0e:07:40:2a:f1:1d:5f:ba: 50:7d:ba:77:bf:c9:fc:7a:17:65:f7:76:26:6d:2f:d3:c0:d1: b0:bb:58:18:80:42:f3:2b:49:4b:8b:b3:ac:0e:d4:ac:e1:f1: 37:ac:c9:1c:de:b0:45:9d:19:d9:10:e8:70:7e:1e:94:68:b9: 36:62:29:6b:cc:55:43:8d:f2:df:66:b2:00:ff:e3:b3:7d:21: a0:0a:ab:bf:2b:02:31:a4:f1:38:96:52:b1:20:82:39:fd:ea: 60:48:cc:5f:6c:a6:0b:e5:a5:d1:12:76:8f:ad:b3:1e:32:10: c8:00:15:d1:5a:90:14:9b:c5:2b:c0:ce:f6:cd:ec:aa:49:b1: 1c:b2:9d:f5:d3:c4:7a:a7:08:98:02:c8:c4:eb:d5:4c:88:95: c5:aa:23:be:98:3b:2c:f5:b5:7f:fb:8e:c6:bf:8b:71:2c:9e: 59:0d:23:d1:39:e4:ba:fb:78:91:76:89:7e:3c:e1:aa:51:a9: a3:3e:82:a1:9f:1d:7f:55:09:d4:cc:ab:17:76:cc:44:16:54: 29:fb:e6:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6mJYlZp7vOuM7hnBAyiw8Xb7HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTEyMDIwNDU3MDBaFw0yNTEyMDUxMzUyMDBaMDMxMTAvBgNV BAMTKDM3NkNCM0YwRDExQkM1MzAwMkMxQjUzQUZGRkVFNzQxN0Y3NTBBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+46GhI6iH/0eYlrqcvOZFvJj G55yGFuJ3Ow/CdynX6Avs23N/WCXSlOKwcFVlRDbAzbsr9XONpWRt9e4SWprnnwS G8CjthMyYtJQWYmfwVZM6wm0BRAXu4ZwiBpXHuVERJEcq8PxJrjmQZG4523UFjVd xCKM9mo1mPE1nQIAWZYuSDFDFCKk9b4+IOjU9zA5eLC+eShWKc2Xv5QrSusIMdnd Af7xripyojioUG+mmEh4KCUo4hBmF0SxQoxerwrlK0ruyj6+GKW+AwyJvIPngS/q dKLUtPu0kV9qRqmosBwdcIEsoUATQ1QbjKirf3rwgODSHL/tICx5TD/MdJE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2yz8NEbxTACwbU6//7nQX91CtcwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2/a/aTPmi/wGshqEU3XNGDRIDkml7JaDoO rtnvq71Rsm/YXpuKlgKohwO1koQOB0Aq8R1fulB9une/yfx6F2X3diZtL9PA0bC7 WBiAQvMrSUuLs6wO1Kzh8TesyRzesEWdGdkQ6HB+HpRouTZiKWvMVUON8t9msgD/ 47N9IaAKq78rAjGk8TiWUrEggjn96mBIzF9spgvlpdESdo+tsx4yEMgAFdFakBSb xSvAzvbN7KpJsRyynfXTxHqnCJgCyMTr1UyIlcWqI76YOyz1tX/7jsa/i3EsnlkN I9E55Lr7eJF2iX484apRqaM+gqGfHX9VCdTMqxd2zEQWVCn75t8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:39 2025 by rpki-client