This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: YPEN4Y6CK/1dxczHVx+0D6E6hMFdYB52Jvxiev5W320= Subject key identifier: 41:2A:B3:4F:24:14:CA:E7:4C:37:92:A8:A8:87:D3:65:88:9F:4F:75 Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 4FA55D95A9C77BB55C998693D858D12C0D8F8AF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: F8 Signing time: Mon 01 Dec 2025 19:11:15 +0000 Manifest this update: Mon 01 Dec 2025 19:06:15 +0000 Manifest next update: Fri 05 Dec 2025 02:40:15 +0000 Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=) 2: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: i4cWhQtwLkYbAN3EW5qS+Fn6+/1A9Ou92Aha+65/bPo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a5:5d:95:a9:c7:7b:b5:5c:99:86:93:d8:58:d1:2c:0d:8f:8a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Dec 1 19:06:15 2025 GMT Not After : Dec 5 02:40:15 2025 GMT Subject: CN=412AB34F2414CAE74C3792A8A887D365889F4F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:77:36:ad:cc:69:5f:60:03:d5:3a:5a:0f: 4a:92:cd:f3:2f:a2:ce:58:5b:75:37:14:57:e6:da: 4c:9e:21:7b:c4:c5:e2:e7:f9:e3:95:94:3e:16:6c: 66:48:29:f9:5a:69:d7:6d:70:10:6b:31:37:53:86: 76:d7:4c:23:46:c5:bf:6b:45:bf:e6:47:c4:16:6e: 8c:14:46:f8:e1:9d:f0:c5:19:0c:d9:e0:99:26:0b: f2:c7:0e:db:f9:7c:f7:51:0e:21:2b:04:d3:1c:86: 15:13:5d:8e:36:82:40:d6:3c:77:e4:20:42:c2:5c: 07:a3:6a:60:4c:74:aa:95:2c:c0:3c:c2:6a:86:d4: f4:89:3e:ef:2f:0f:e4:00:08:ce:6b:b1:75:86:ca: 1c:61:70:03:8c:50:35:19:96:b2:3d:13:30:a2:9c: a6:9f:f1:6f:3c:62:26:17:d2:a5:f6:97:2d:af:51: db:21:2c:f2:3a:b9:3c:91:8d:e1:ea:83:cf:48:55: 3f:da:77:00:81:73:86:db:d6:78:15:e3:a4:ce:f9: 20:05:be:17:38:92:59:59:02:ab:4b:95:8f:ed:c3: c0:fa:d3:29:57:71:9f:ee:3d:11:7d:b7:4b:2d:23: db:79:98:79:38:12:c0:20:74:73:95:a2:0e:b6:1d: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2A:B3:4F:24:14:CA:E7:4C:37:92:A8:A8:87:D3:65:88:9F:4F:75 X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:83:15:a1:95:f6:1a:7c:30:01:4b:04:97:18:f2:91:ca:92: 71:48:73:a4:54:1b:01:91:71:c3:78:b1:f5:82:65:84:93:a5: ec:99:8e:be:e5:93:2c:04:3b:95:af:e3:a4:2f:ac:69:e1:0d: 8e:07:22:0f:6a:ec:90:dd:23:50:2a:25:c6:85:36:97:60:5d: ae:e6:fa:21:68:79:ed:34:59:db:2f:5c:62:29:ec:20:32:51: 48:2b:e8:03:1d:d2:b0:d0:33:86:95:c7:ed:f2:38:cd:e3:07: 9f:64:a9:d4:cb:c4:f1:82:c9:74:2e:25:13:98:a5:48:fe:0a: e3:03:23:99:f5:a9:6c:9c:64:b8:68:4f:fe:ee:06:92:ff:eb: 23:86:6a:e3:bd:05:55:fe:2a:a6:ec:53:a8:e5:ef:d5:2d:21: d0:75:5f:30:af:77:98:e4:e9:e2:97:f7:2a:d1:40:e0:8f:6a: 87:aa:9c:8f:0f:0d:fb:f8:a3:e1:7c:09:ac:1d:97:8b:e6:81: 26:f9:b4:b4:56:a3:fe:af:5c:75:77:51:22:32:f9:67:3b:f6: f7:89:c6:1a:da:17:cc:f0:4b:92:3e:a9:2b:be:ef:0f:6d:9f: 84:60:9b:47:e6:2f:fc:36:15:5a:b6:3a:bf:3b:6e:0f:2a:28: 21:32:ba:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6VdlanHe7VcmYaT2FjRLA2PivgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNTEyMDExOTA2MTVaFw0yNTEyMDUwMjQwMTVaMDMxMTAvBgNV BAMTKDQxMkFCMzRGMjQxNENBRTc0QzM3OTJBOEE4ODdEMzY1ODg5RjRGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnMnc2rcxpX2AD1TpaD0qSzfMv os5YW3U3FFfm2kyeIXvExeLn+eOVlD4WbGZIKflaaddtcBBrMTdThnbXTCNGxb9r Rb/mR8QWbowURvjhnfDFGQzZ4JkmC/LHDtv5fPdRDiErBNMchhUTXY42gkDWPHfk IELCXAejamBMdKqVLMA8wmqG1PSJPu8vD+QACM5rsXWGyhxhcAOMUDUZlrI9EzCi nKaf8W88YiYX0qX2ly2vUdshLPI6uTyRjeHqg89IVT/adwCBc4bb1ngV46TO+SAF vhc4kllZAqtLlY/tw8D60ylXcZ/uPRF9t0stI9t5mHk4EsAgdHOVog62HZsdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQSqzTyQUyudMN5KoqIfTZYifT3UwHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqDFaGV9hp8MAFLBJcY8pHKknFIc6RUGwGR ccN4sfWCZYSTpeyZjr7lkywEO5Wv46QvrGnhDY4HIg9q7JDdI1AqJcaFNpdgXa7m +iFoee00WdsvXGIp7CAyUUgr6AMd0rDQM4aVx+3yOM3jB59kqdTLxPGCyXQuJROY pUj+CuMDI5n1qWycZLhoT/7uBpL/6yOGauO9BVX+KqbsU6jl79UtIdB1XzCvd5jk 6eKX9yrRQOCPaoeqnI8PDfv4o+F8Cawdl4vmgSb5tLRWo/6vXHV3USIy+Wc79veJ xhraF8zwS5I+qSu+7w9tn4Rgm0fmL/w2FVq2Or87bg8qKCEyun8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:19 2025 by rpki-client