This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft File: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft (raw, json) Hash identifier: phCVdX6JGiUbf0SYdtWwSRDxDSdf1FHzi6Pj2a+qnlM= Subject key identifier: EE:FF:13:D3:93:58:4C:08:C6:70:98:A1:24:E6:98:75:10:9B:48:9A Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 Certificate issuer: /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Certificate serial: 06864705BAE9FB515E3D7EB72CB5AC2BB2FDB1AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft Manifest number: 0492 Signing time: Wed 03 Dec 2025 04:52:13 +0000 Manifest this update: Wed 03 Dec 2025 04:47:13 +0000 Manifest next update: Sat 06 Dec 2025 11:37:13 +0000 Files and hashes: 1: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl (hash: 2a21Jbh5F40Z0BNact3IFuZaB9Mw+JPWajiRcSnarwg=) 2: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: fILGplhDIU4U8qE+HJJyt+4SNVKoBOrgk1ZojWa+PYM=) 3: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: lM92Y8NAq84+9u66XJy1rtkUnS0gYFJFy14ToZCCjs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:86:47:05:ba:e9:fb:51:5e:3d:7e:b7:2c:b5:ac:2b:b2:fd:b1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Validity Not Before: Dec 3 04:47:13 2025 GMT Not After : Dec 6 11:37:13 2025 GMT Subject: CN=EEFF13D393584C08C67098A124E69875109B489A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:38:05:54:51:74:a2:2b:e9:46:4d:27:9e: 12:ba:af:58:34:fb:58:37:5b:de:9a:83:ac:3a:d5: 3d:ba:81:a9:4a:eb:cf:73:cf:05:35:d8:9b:c9:70: b2:14:d8:6c:b3:e6:07:56:28:fb:7d:c1:82:e0:42: da:09:ee:cc:03:72:4e:72:8c:60:c1:0a:86:29:19: 9a:dd:b1:0a:0b:88:c4:6b:b0:81:64:24:c4:14:8d: ae:84:0e:a1:f7:6e:e7:05:d4:ad:08:73:6e:a4:cd: 02:69:31:8a:20:09:7e:2f:35:0f:77:d7:36:81:9f: 82:c5:34:26:26:a2:2f:d9:3f:21:00:93:6c:79:48: 96:6b:84:9e:cc:6e:2b:2a:50:12:d9:e2:17:6e:f0: 43:a1:a4:12:ab:b6:51:35:07:1e:5c:a2:f3:8a:c6: 69:56:8e:22:96:48:02:49:89:55:21:0a:80:b4:33: fb:95:b1:87:4a:f6:1e:c2:e1:8a:30:56:20:d6:ec: d9:ca:0a:1b:6d:40:03:81:eb:b6:2a:78:f2:b6:ed: 10:f5:63:3b:5b:2a:10:d2:fa:c4:53:08:be:05:af: e6:fa:48:c3:f7:99:77:09:42:53:1b:f1:1e:c2:bb: 9f:67:67:00:45:62:25:f7:2e:06:7b:5a:20:3b:45: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FF:13:D3:93:58:4C:08:C6:70:98:A1:24:E6:98:75:10:9B:48:9A X509v3 Authority Key Identifier: keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d2:c8:a9:f4:f5:ee:a2:ea:21:35:54:1e:c9:7a:9b:47:37: 95:6c:03:e2:c9:ef:99:4b:f5:50:ec:4c:cb:2b:23:c3:f7:43: b5:7d:5c:23:0a:49:95:ce:18:e7:bb:3e:04:4c:50:4d:d2:35: 63:42:28:c3:17:09:31:14:a5:4d:f1:cb:5d:26:01:7c:18:b7: 99:b9:db:2a:22:b5:1f:43:8f:db:20:31:78:26:7b:5d:e6:cd: 67:a4:2e:54:97:b7:e5:45:7b:85:d7:af:1c:8d:20:be:62:a2: 06:10:7d:a4:1a:6f:e8:fd:af:cd:75:d1:cc:67:1a:72:d5:77: 2a:a4:43:5d:44:d3:68:d3:cc:72:af:f3:e0:51:a6:c1:42:b9: 2f:f9:b4:09:c8:7d:b8:c2:2e:95:80:26:f7:7d:61:e6:71:97: 89:51:4a:29:6b:d7:b0:7d:d4:e1:7e:b1:69:50:09:5f:7e:73: c0:d8:d0:65:82:77:86:5b:a5:f5:e4:ea:5b:c7:6d:40:53:c5: 94:7c:f6:ee:20:cc:1d:96:ba:6f:5e:1a:eb:b0:85:3d:9a:5b: 29:df:da:bb:ff:be:f6:a3:5a:3f:74:5f:54:1e:af:35:0a:e1: 29:84:7b:70:46:30:08:9f:e1:65:9b:fd:0c:0a:12:45:bc:89: ea:8d:32:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBoZHBbrp+1FePX63LLWsK7L9sa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3 MDJGRUFEMzAeFw0yNTEyMDMwNDQ3MTNaFw0yNTEyMDYxMTM3MTNaMDMxMTAvBgNV BAMTKEVFRkYxM0QzOTM1ODRDMDhDNjcwOThBMTI0RTY5ODc1MTA5QjQ4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QTgFVFF0oivpRk0nnhK6r1g0 +1g3W96ag6w61T26galK689zzwU12JvJcLIU2Gyz5gdWKPt9wYLgQtoJ7swDck5y jGDBCoYpGZrdsQoLiMRrsIFkJMQUja6EDqH3bucF1K0Ic26kzQJpMYogCX4vNQ93 1zaBn4LFNCYmoi/ZPyEAk2x5SJZrhJ7MbisqUBLZ4hdu8EOhpBKrtlE1Bx5covOK xmlWjiKWSAJJiVUhCoC0M/uVsYdK9h7C4YowViDW7NnKChttQAOB67YqePK27RD1 YztbKhDS+sRTCL4Fr+b6SMP3mXcJQlMb8R7Cu59nZwBFYiX3LgZ7WiA7RcsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7v8T05NYTAjGcJihJOaYdRCbSJowHwYDVR0j BBgwFoAUamyBNlTgwpM55sr1IiAfjnAv6tMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgyYmNhMy1lODU4LTRkNTItYjFhMy0yZjRiYWU0N2M5ZjIvMC82QTZDODEzNjU0 RTBDMjkzMzlFNkNBRjUyMjIwMUY4RTcwMkZFQUQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3MDJG RUFEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFG OEU3MDJGRUFEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzSyKn09e6i6iE1VB7JeptHN5VsA+LJ75lL 9VDsTMsrI8P3Q7V9XCMKSZXOGOe7PgRMUE3SNWNCKMMXCTEUpU3xy10mAXwYt5m5 2yoitR9Dj9sgMXgme13mzWekLlSXt+VFe4XXrxyNIL5iogYQfaQab+j9r8110cxn GnLVdyqkQ11E02jTzHKv8+BRpsFCuS/5tAnIfbjCLpWAJvd9YeZxl4lRSilr17B9 1OF+sWlQCV9+c8DY0GWCd4ZbpfXk6lvHbUBTxZR89u4gzB2Wum9eGuuwhT2aWynf 2rv/vvajWj90X1QerzUK4SmEe3BGMAif4WWb/QwKEkW8ieqNMis= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:26 2025 by rpki-client