This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: 6SOuct8s4WEgblOL8Et3rVDZBayPDUR24S+RoywlQso= Subject key identifier: E4:7F:0B:88:47:2C:80:0F:71:2B:2F:A4:B3:00:92:FF:B2:93:AB:1C Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 7741EBA0439FB6B11F0C0C0D9150DFD4B701F802 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: 0111 Signing time: Sun 07 Dec 2025 15:21:07 +0000 Manifest this update: Sun 07 Dec 2025 15:16:07 +0000 Manifest next update: Wed 10 Dec 2025 23:18:07 +0000 Files and hashes: 1: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: 1NPk9pF6cGysm5CsjMud6vyOANdZ2GC4xFy/gEirX7M=) 2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: c4zKb4BC8Sb0059Tmuc8jeyTEWO85EjEdef3ktgt6EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:41:eb:a0:43:9f:b6:b1:1f:0c:0c:0d:91:50:df:d4:b7:01:f8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Dec 7 15:16:07 2025 GMT Not After : Dec 10 23:18:07 2025 GMT Subject: CN=E47F0B88472C800F712B2FA4B30092FFB293AB1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:e9:f6:49:7c:25:47:ca:37:6f:2f:15:1c: 54:e2:5e:78:71:0c:ea:0f:38:87:31:67:8b:8d:7c: 3c:f2:11:25:76:98:a7:36:be:b1:fa:f2:53:86:99: 99:59:4b:21:77:fd:cc:6f:cf:a7:6a:52:23:a2:43: 69:2f:6b:3a:e1:e8:0b:e6:b2:45:4b:bb:6c:39:df: 62:a7:3c:d6:7e:f1:89:8f:19:1e:8c:44:65:e2:2a: c2:51:9a:2b:97:2e:30:a3:03:ed:39:33:63:1b:b2: 03:b6:a3:12:f0:9c:af:45:3c:49:c7:62:20:d1:13: 19:49:f5:af:b0:b9:91:bd:36:2e:06:8e:47:03:ec: 44:58:b5:91:00:38:4e:95:d3:03:58:1f:9b:60:14: af:e6:e1:05:4f:a3:b4:5f:96:68:ec:57:eb:c0:11: c2:4f:eb:5e:28:15:ce:d0:b8:56:ff:94:4e:5e:bf: cd:13:7e:5d:f5:e0:17:0b:5e:d7:37:41:38:0f:b7: 32:d1:e3:ff:60:cb:a4:26:07:c1:2b:6e:66:2c:15: 97:50:e8:1a:4f:9d:15:0e:66:8b:bc:d0:ae:54:27: 1f:00:ae:b1:e1:20:17:c3:71:4d:47:dd:99:28:e8: 5f:93:c6:05:bb:71:70:53:d6:0f:06:e9:df:4c:2f: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7F:0B:88:47:2C:80:0F:71:2B:2F:A4:B3:00:92:FF:B2:93:AB:1C X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:da:2c:5f:06:c2:93:24:b4:92:6f:29:14:81:b8:2d:ef: 58:69:e2:d7:5f:38:8e:12:8d:73:f4:ff:1b:d4:68:17:9f:98: 0a:ff:1b:58:59:9e:97:c5:9b:f9:5c:f7:04:ba:41:e1:8b:d0: 5b:87:7c:71:6d:a6:23:4a:a3:d8:7e:be:b6:76:2a:4b:f7:1b: c4:f8:62:6d:f1:89:bd:af:34:00:79:68:8e:79:f1:51:92:e2: 60:8d:bf:05:6e:ba:d9:44:64:c6:46:25:bf:33:d3:50:f4:0d: 21:a0:04:77:98:53:b2:a9:5e:3a:1e:97:7f:af:e7:ad:f2:97: 2a:69:42:b9:76:ef:92:04:27:19:fe:41:ae:1c:71:d3:dd:45: eb:23:8a:9b:ef:e0:e4:58:b1:d9:ae:0e:39:d9:ca:a7:81:72: 71:2c:63:af:d8:d8:85:e2:45:12:de:31:a9:5f:d1:1a:f6:90: 9d:63:38:f0:b1:37:51:41:9c:ab:ac:12:82:40:17:1a:e7:5a: ef:2d:eb:72:f4:9e:35:96:9f:87:0c:f9:b9:98:1d:1e:0a:96: e1:f4:c7:0a:61:43:f3:7a:e5:66:df:7c:fe:68:4c:72:ac:65: f0:9d:35:b6:e4:e8:b0:6c:cb:e7:b2:6b:49:c9:c5:ca:59:63: 1a:7c:e1:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0HroEOftrEfDAwNkVDf1LcB+AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNTEyMDcxNTE2MDdaFw0yNTEyMTAyMzE4MDdaMDMxMTAvBgNV BAMTKEU0N0YwQjg4NDcyQzgwMEY3MTJCMkZBNEIzMDA5MkZGQjI5M0FCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjun2SXwlR8o3by8VHFTiXnhx DOoPOIcxZ4uNfDzyESV2mKc2vrH68lOGmZlZSyF3/cxvz6dqUiOiQ2kvazrh6Avm skVLu2w532KnPNZ+8YmPGR6MRGXiKsJRmiuXLjCjA+05M2MbsgO2oxLwnK9FPEnH YiDRExlJ9a+wuZG9Ni4GjkcD7ERYtZEAOE6V0wNYH5tgFK/m4QVPo7RflmjsV+vA EcJP614oFc7QuFb/lE5ev80Tfl314BcLXtc3QTgPtzLR4/9gy6QmB8ErbmYsFZdQ 6BpPnRUOZou80K5UJx8ArrHhIBfDcU1H3Zko6F+TxgW7cXBT1g8G6d9ML5QNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5H8LiEcsgA9xKy+kswCS/7KTqxwwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIta2ixfBsKTJLSSbykUgbgt71hp4tdfOI4S jXP0/xvUaBefmAr/G1hZnpfFm/lc9wS6QeGL0FuHfHFtpiNKo9h+vrZ2Kkv3G8T4 Ym3xib2vNAB5aI558VGS4mCNvwVuutlEZMZGJb8z01D0DSGgBHeYU7KpXjoel3+v 563ylyppQrl275IEJxn+Qa4ccdPdResjipvv4ORYsdmuDjnZyqeBcnEsY6/Y2IXi RRLeMalf0Rr2kJ1jOPCxN1FBnKusEoJAFxrnWu8t63L0njWWn4cM+bmYHR4KluH0 xwphQ/N65WbffP5oTHKsZfCdNbbk6LBsy+eya0nJxcpZYxp84UA= -----END CERTIFICATE-----Generated at Sun Dec 7 18:49:18 2025 by rpki-client