This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft File: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json) Hash identifier: 2KkZuKTkxMS8OPkPlRBYEiVLZ2NK65Y70LH+1coIdo8= Subject key identifier: 5F:99:EA:56:6B:5A:16:DC:8D:84:58:39:C4:E3:AC:8F:A9:12:BA:CE Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Certificate issuer: /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Certificate serial: 79DB650FA5F05D2CAC70D926FC0F21B744963B93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft Manifest number: 0532 Signing time: Mon 22 Dec 2025 17:10:43 +0000 Manifest this update: Mon 22 Dec 2025 17:05:42 +0000 Manifest next update: Thu 25 Dec 2025 19:58:42 +0000 Files and hashes: 1: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: GwFAfVLpG/ugaQYqpWQY09MQmCe9PdpSsGdhvKfZQm0=) 2: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: UN/a2XRTw8081uL/ZY93JqlCc8U4ClmN/ji+ij6yORg=) 3: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: g0wg8Deehkfr6iJjF1icldun4thvTysDD1uiOyWBYM4=) 4: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: btc6IzUurZ9lq35jxDrV4uyA21zk9WtucUAkjVq4Iz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:db:65:0f:a5:f0:5d:2c:ac:70:d9:26:fc:0f:21:b7:44:96:3b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Validity Not Before: Dec 22 17:05:42 2025 GMT Not After : Dec 25 19:58:42 2025 GMT Subject: CN=5F99EA566B5A16DC8D845839C4E3AC8FA912BACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:c4:bb:2b:e1:3c:7d:74:28:ca:38:a5:e6: 1a:7c:c4:44:5c:99:f9:37:e4:d4:70:08:63:56:f3: 17:9c:00:39:3f:d3:99:81:5b:d1:0c:99:df:29:b3: 9b:66:ed:62:a3:88:e8:ed:58:e9:f2:7a:4b:8b:91: e9:79:8e:b8:8c:76:fe:2b:f4:f8:3e:51:52:5b:c9: 65:36:90:02:11:5e:4a:56:4d:e5:34:7b:a4:64:aa: d2:a8:05:eb:65:9d:d2:77:6a:72:4d:82:17:b1:60: d9:18:20:b3:b5:88:e9:53:95:4f:4c:7f:20:18:20: b5:8a:95:89:82:f3:1f:d7:20:8c:66:5a:5a:c4:b5: f9:03:c6:d7:df:64:b3:4d:a6:03:d2:23:c0:9e:df: 28:f7:cf:ba:e5:43:77:1c:ee:f8:ce:18:6d:d6:1f: 03:ea:42:41:08:b4:4a:84:cc:73:8b:02:1f:61:86: 14:80:b8:58:4f:65:96:3a:b1:ed:50:e0:b9:54:00: 85:6d:88:d5:10:de:1e:0c:99:4b:98:97:b9:06:b8: 79:29:36:f6:65:78:38:56:b7:e3:bd:32:db:15:13: a3:66:a9:86:05:97:ea:6e:fc:66:0c:1c:26:a7:26: 62:4b:5a:c9:28:41:1e:c2:f6:df:88:1c:8d:ae:b4: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:99:EA:56:6B:5A:16:DC:8D:84:58:39:C4:E3:AC:8F:A9:12:BA:CE X509v3 Authority Key Identifier: keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:56:89:36:7a:cd:16:36:37:e8:d5:22:0c:83:6a:38:26:c7: 46:c0:74:fb:a4:69:10:eb:77:ca:32:6d:1c:94:55:5b:6e:5a: 88:60:0a:67:3f:c4:38:53:39:fe:ce:bf:51:59:1a:a6:b7:3c: cd:13:6e:78:de:7d:2d:26:42:aa:83:0e:29:65:4d:f3:11:32: 78:00:f9:85:61:64:57:0a:91:69:0f:74:98:86:6c:6a:5c:63: 96:86:9a:c2:f7:9a:eb:89:05:ad:1d:b7:fd:3a:19:2a:2d:6e: c7:54:c8:66:02:15:00:03:48:68:b4:42:12:84:11:f7:0e:80: 02:57:4a:92:2c:3f:06:f3:a5:8a:00:80:74:4c:47:fc:e7:48: f4:5e:a9:66:15:9b:71:ea:77:ed:66:a8:d2:81:4b:80:27:cb: 11:9c:61:e0:a4:38:a7:05:5a:3d:99:2b:73:a9:6b:61:be:e1: 59:98:22:c1:5e:17:52:57:25:c8:2e:52:56:58:2c:3e:2c:4b: bb:e0:80:c5:32:b1:69:df:7f:b2:45:11:d4:ee:21:56:c3:94: d6:cc:07:cf:9d:a3:9f:40:a3:17:06:73:02:a6:9c:84:40:e8: 3d:eb:db:1b:d9:94:05:01:9a:a7:ec:e4:38:50:c7:83:ba:dd: 94:1c:cd:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedtlD6XwXSyscNkm/A8ht0SWO5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYz OTRCQThFOTAeFw0yNTEyMjIxNzA1NDJaFw0yNTEyMjUxOTU4NDJaMDMxMTAvBgNV BAMTKDVGOTlFQTU2NkI1QTE2REM4RDg0NTgzOUM0RTNBQzhGQTkxMkJBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ2MS7K+E8fXQoyjil5hp8xERc mfk35NRwCGNW8xecADk/05mBW9EMmd8ps5tm7WKjiOjtWOnyekuLkel5jriMdv4r 9Pg+UVJbyWU2kAIRXkpWTeU0e6RkqtKoBetlndJ3anJNghexYNkYILO1iOlTlU9M fyAYILWKlYmC8x/XIIxmWlrEtfkDxtffZLNNpgPSI8Ce3yj3z7rlQ3cc7vjOGG3W HwPqQkEItEqEzHOLAh9hhhSAuFhPZZY6se1Q4LlUAIVtiNUQ3h4MmUuYl7kGuHkp NvZleDhWt+O9MtsVE6NmqYYFl+pu/GYMHCanJmJLWskoQR7C9t+IHI2utPgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5nqVmtaFtyNhFg5xOOsj6kSus4wHwYDVR0j BBgwFoAUanX5XqEcP5hMXGEP6SIgJjlLqOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMC82QTc1Rjk1RUEx MUMzRjk4NEM1QzYxMEZFOTIyMjAyNjM5NEJBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYzOTRC QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIw MjYzOTRCQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhWiTZ6zRY2N+jVIgyDajgmx0bAdPukaRDr d8oybRyUVVtuWohgCmc/xDhTOf7Ov1FZGqa3PM0TbnjefS0mQqqDDillTfMRMngA +YVhZFcKkWkPdJiGbGpcY5aGmsL3muuJBa0dt/06GSotbsdUyGYCFQADSGi0QhKE EfcOgAJXSpIsPwbzpYoAgHRMR/znSPReqWYVm3Hqd+1mqNKBS4AnyxGcYeCkOKcF Wj2ZK3Opa2G+4VmYIsFeF1JXJcguUlZYLD4sS7vggMUysWnff7JFEdTuIVbDlNbM B8+do59AoxcGcwKmnIRA6D3r2xvZlAUBmqfs5DhQx4O63ZQczTc= -----END CERTIFICATE-----Generated at Tue Dec 23 09:43:26 2025 by rpki-client