This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft File: 6DBEA32A7EE18535066521365EFB05C4148698C9.mft (raw, json) Hash identifier: cna8WZBk2e3+VM9Tv3ZjXlQImevMwA4C823yCFCtZOE= Subject key identifier: 52:F6:72:67:14:4A:DB:E6:73:FB:36:D8:9D:25:62:F2:9E:96:D9:3E Authority key identifier: 6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 Certificate issuer: /CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Certificate serial: 749E02C3C33D9E794E2F8574DC9BA37C48A916BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft Manifest number: 0529 Signing time: Tue 02 Dec 2025 07:32:32 +0000 Manifest this update: Tue 02 Dec 2025 07:27:32 +0000 Manifest next update: Fri 05 Dec 2025 18:39:32 +0000 Files and hashes: 1: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: ZX6Ox+wx5nbIu1GT16bLGXKsL0RQ4fgAjbd+X3UIku8=) 2: 6DBEA32A7EE18535066521365EFB05C4148698C9.crl (hash: 8Jfzwn7YOlm6C80YKJ2yfwexcTZPKiEY5FnPgdlt6JY=) 3: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: Py1k6xmnp+wD3zAOREcnFDtaHJ01Rtyy2hDt3IzTRvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:9e:02:c3:c3:3d:9e:79:4e:2f:85:74:dc:9b:a3:7c:48:a9:16:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Validity Not Before: Dec 2 07:27:32 2025 GMT Not After : Dec 5 18:39:32 2025 GMT Subject: CN=52F67267144ADBE673FB36D89D2562F29E96D93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:de:c4:07:eb:0c:3f:12:26:93:e7:8a:55: 40:a2:51:b9:2d:3e:81:9e:c7:cc:93:43:06:ff:a0: 3b:2b:11:f0:66:aa:0c:66:fa:87:f2:60:7b:ef:13: 3f:f4:42:43:80:c9:b9:c9:24:07:e7:74:86:5f:95: 96:48:48:99:5b:f9:01:4c:4d:6f:3a:1b:de:de:ec: 35:96:49:fc:de:03:ee:32:e2:2c:75:2b:a8:f1:2d: 1b:85:69:a3:eb:0c:ca:e0:60:30:7a:3a:2b:6e:b7: a8:11:93:db:16:20:5b:f3:04:6e:85:92:43:d3:2b: 4a:aa:63:79:34:58:d6:9b:f6:a8:1a:4a:60:e9:cc: a8:e4:b2:7e:9e:d0:d6:bb:c1:d5:19:30:e4:63:6b: 68:18:92:bd:78:20:42:8e:f1:87:cd:0a:8d:b5:90: 3d:6c:9a:5f:8b:9e:13:6c:00:ca:da:ea:29:09:3c: c8:2c:b4:b5:02:a5:ee:64:6c:ea:d1:87:1f:d4:72: 18:85:f2:9e:e2:51:e7:6d:7a:e6:19:27:88:c1:14: b9:f9:4f:ae:d7:02:03:af:27:fb:08:67:a4:35:56: c1:90:7a:01:5a:a7:27:bd:0b:89:28:ac:5d:a8:72: 80:46:9b:a4:00:cc:b4:b6:6f:4d:32:5c:4b:38:e1: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F6:72:67:14:4A:DB:E6:73:FB:36:D8:9D:25:62:F2:9E:96:D9:3E X509v3 Authority Key Identifier: keyid:6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b9:80:60:e1:0c:17:ff:2a:63:b5:52:ea:e3:92:10:15:3c: a0:a1:51:96:e1:55:07:39:3c:40:41:3f:90:36:3d:6c:48:77: 17:74:83:f6:14:ca:35:62:71:78:9e:b9:69:cb:33:bb:79:ee: f5:e5:f8:63:17:ab:d6:15:00:59:4d:37:45:93:2a:53:0d:f8: b1:e3:2d:0b:9d:80:6d:31:4a:4f:cd:19:69:ba:e2:fd:fa:f4: 30:7a:a0:41:30:b6:2e:c7:fe:92:c4:bd:c3:bd:d9:ac:34:17: 2b:fa:9a:98:37:b4:7c:4b:0f:90:aa:0c:f0:5d:88:28:78:5e: 84:0e:53:07:7d:3f:ff:19:e8:95:52:1c:2d:1c:c0:f6:85:6c: 41:67:d7:dd:7c:11:0c:6f:97:3a:62:f7:9e:63:22:04:56:24: 98:c2:ed:7a:39:d0:35:fd:12:3f:5f:70:dd:f5:64:e5:e8:9f: c0:b0:ce:88:74:45:9b:e6:64:17:ef:0f:eb:b5:88:1f:cf:6d: f7:c1:a7:c6:17:b6:8b:41:9e:a8:f3:98:d2:9f:e9:f0:ce:07: b4:6f:b9:96:9b:a9:94:16:68:7b:0d:56:9f:f4:c2:04:bb:d1: 8a:b5:c0:84:f9:9b:a3:21:45:3f:39:30:9a:f3:84:25:42:22: 2e:99:16:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJ4Cw8M9nnlOL4V03JujfEipFr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQx NDg2OThDOTAeFw0yNTEyMDIwNzI3MzJaFw0yNTEyMDUxODM5MzJaMDMxMTAvBgNV BAMTKDUyRjY3MjY3MTQ0QURCRTY3M0ZCMzZEODlEMjU2MkYyOUU5NkQ5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKc97EB+sMPxImk+eKVUCiUbkt PoGex8yTQwb/oDsrEfBmqgxm+ofyYHvvEz/0QkOAybnJJAfndIZflZZISJlb+QFM TW86G97e7DWWSfzeA+4y4ix1K6jxLRuFaaPrDMrgYDB6Oitut6gRk9sWIFvzBG6F kkPTK0qqY3k0WNab9qgaSmDpzKjksn6e0Na7wdUZMORja2gYkr14IEKO8YfNCo21 kD1sml+LnhNsAMra6ikJPMgstLUCpe5kbOrRhx/UchiF8p7iUedteuYZJ4jBFLn5 T67XAgOvJ/sIZ6Q1VsGQegFapye9C4korF2ocoBGm6QAzLS2b00yXEs44S5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUvZyZxRK2+Zz+zbYnSVi8p6W2T4wHwYDVR0j BBgwFoAUbb6jKn7hhTUGZSE2XvsFxBSGmMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ4ODBkNC1jMzNlLTQwMWUtYjQ2OC1hNWE2YThhYWYzZDcvMC82REJFQTMyQTdF RTE4NTM1MDY2NTIxMzY1RUZCMDVDNDE0ODY5OEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQxNDg2 OThDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1 QzQxNDg2OThDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO5gGDhDBf/KmO1UurjkhAVPKChUZbhVQc5 PEBBP5A2PWxIdxd0g/YUyjVicXieuWnLM7t57vXl+GMXq9YVAFlNN0WTKlMN+LHj LQudgG0xSk/NGWm64v369DB6oEEwti7H/pLEvcO92aw0Fyv6mpg3tHxLD5CqDPBd iCh4XoQOUwd9P/8Z6JVSHC0cwPaFbEFn1918EQxvlzpi955jIgRWJJjC7Xo50DX9 Ej9fcN31ZOXon8Cwzoh0RZvmZBfvD+u1iB/PbffBp8YXtotBnqjzmNKf6fDOB7Rv uZabqZQWaHsNVp/0wgS70Yq1wIT5m6MhRT85MJrzhCVCIi6ZFn8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:47 2025 by rpki-client