This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: iIs0uSPwqoQXxm5+MQ4SRs5g6AEbZmYQM5EGb4j0MA8= Subject key identifier: B1:78:00:DF:70:F6:3D:85:08:A8:14:11:FC:D6:ED:7E:6B:C8:8E:98 Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 3BEB5F389CDD5E25158AA030225166350CA7CC41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 029C Signing time: Mon 22 Dec 2025 22:52:16 +0000 Manifest this update: Mon 22 Dec 2025 22:47:16 +0000 Manifest next update: Fri 26 Dec 2025 04:32:16 +0000 Files and hashes: 1: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=) 2: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: c4ppk2xpc8E78iMqSdx7G/cPlz0LGJIdA8XOxG+hhgI=) 3: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=) 4: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:eb:5f:38:9c:dd:5e:25:15:8a:a0:30:22:51:66:35:0c:a7:cc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Dec 22 22:47:16 2025 GMT Not After : Dec 26 04:32:16 2025 GMT Subject: CN=B17800DF70F63D8508A81411FCD6ED7E6BC88E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:f1:87:21:58:72:97:e2:f2:48:02:ba:af: e5:50:57:29:ec:0d:e2:ee:86:df:0c:54:a3:1c:07: 28:be:fa:71:7f:08:8b:26:2c:7d:b5:49:80:4a:28: 42:a0:85:01:81:9a:f7:0a:2f:63:8b:19:4f:16:e3: 29:c3:03:78:27:d4:f6:c2:09:a2:42:1c:6e:22:64: 1a:26:48:8c:8a:fb:3b:85:9f:66:d6:57:b7:6e:d5: 84:12:b6:46:31:5a:9b:67:22:3b:9c:bc:c3:6a:b2: 5f:76:c6:68:40:0f:9a:ae:c5:79:90:30:49:e0:ed: 36:09:f2:ab:74:9d:38:b8:8a:66:76:26:61:f7:3a: c1:2c:7b:a5:11:52:5d:c3:42:3f:ce:8c:9a:fe:a7: 7d:dd:c6:3c:b5:cc:a7:65:8c:9a:5b:b4:70:5d:66: f8:16:6f:5f:e9:bb:9c:ce:52:a2:5b:fa:e2:07:05: 7c:d4:3d:25:aa:cc:fa:78:8a:83:9e:06:5e:ab:52: 4d:a7:f0:cd:93:d8:f1:6b:d6:09:42:d5:d5:3b:bf: f9:65:68:a0:ce:d4:df:4b:77:29:73:91:af:79:96: 7d:da:b5:b0:81:29:a2:5f:81:9e:f1:42:09:4d:b5: 75:be:4e:2e:f6:83:af:44:79:b4:3d:38:ce:1b:b1: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:78:00:DF:70:F6:3D:85:08:A8:14:11:FC:D6:ED:7E:6B:C8:8E:98 X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cf:46:15:8b:75:5e:48:76:3d:ca:c9:8c:8d:d8:0b:12:f7: 3d:4e:56:6e:58:16:ac:9f:71:5d:9e:75:55:98:c6:48:f2:16: e1:06:16:b0:48:65:7f:c5:4d:9b:10:dd:ee:e3:22:87:a6:61: 27:7d:a8:51:d5:a6:af:d4:94:07:1d:d5:e3:ff:03:63:ea:86: 8d:f5:e2:ea:d3:8e:63:21:f8:60:8d:06:cc:2d:f4:a1:f4:2f: 68:b5:fe:08:37:58:ea:74:22:93:38:e8:e3:d4:2e:b0:f3:8b: c8:3e:c4:19:ba:5a:8b:44:43:a4:8b:89:ef:05:25:58:0b:9e: 62:c2:3a:4b:5b:1d:48:b5:fb:57:71:e9:4f:58:8b:0b:2e:4a: bc:c0:8c:13:06:0c:3a:3f:c4:7d:7c:49:d4:1c:e4:df:52:68: d9:e7:8a:d9:c7:cd:85:0a:3c:c6:31:e3:70:01:3c:0a:fa:54: 12:3e:ce:8f:f7:00:e6:5f:65:a3:48:b5:28:21:96:2f:6c:d9: d8:2f:38:21:29:5e:7a:59:40:d5:69:b0:3e:84:2b:44:de:15: ed:ad:d4:9e:e9:ef:e2:45:92:bf:ab:f6:da:44:f0:53:5c:59: 43:6e:ab:bd:c4:90:88:3a:5d:d0:4f:93:91:f8:0d:6e:7e:d4: 13:ca:f3:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+tfOJzdXiUViqAwIlFmNQynzEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNTEyMjIyMjQ3MTZaFw0yNTEyMjYwNDMyMTZaMDMxMTAvBgNV BAMTKEIxNzgwMERGNzBGNjNEODUwOEE4MTQxMUZDRDZFRDdFNkJDODhFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0PGHIVhyl+LySAK6r+VQVyns DeLuht8MVKMcByi++nF/CIsmLH21SYBKKEKghQGBmvcKL2OLGU8W4ynDA3gn1PbC CaJCHG4iZBomSIyK+zuFn2bWV7du1YQStkYxWptnIjucvMNqsl92xmhAD5quxXmQ MEng7TYJ8qt0nTi4imZ2JmH3OsEse6URUl3DQj/OjJr+p33dxjy1zKdljJpbtHBd ZvgWb1/pu5zOUqJb+uIHBXzUPSWqzPp4ioOeBl6rUk2n8M2T2PFr1glC1dU7v/ll aKDO1N9Ldylzka95ln3atbCBKaJfgZ7xQglNtXW+Ti72g69EebQ9OM4bsTm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsXgA33D2PYUIqBQR/NbtfmvIjpgwHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLPRhWLdV5Idj3KyYyN2AsS9z1OVm5YFqyf cV2edVWYxkjyFuEGFrBIZX/FTZsQ3e7jIoemYSd9qFHVpq/UlAcd1eP/A2Pqho31 4urTjmMh+GCNBswt9KH0L2i1/gg3WOp0IpM46OPULrDzi8g+xBm6WotEQ6SLie8F JVgLnmLCOktbHUi1+1dx6U9YiwsuSrzAjBMGDDo/xH18SdQc5N9SaNnnitnHzYUK PMYx43ABPAr6VBI+zo/3AOZfZaNItSghli9s2dgvOCEpXnpZQNVpsD6EK0TeFe2t 1J7p7+JFkr+r9tpE8FNcWUNuq73EkIg6XdBPk5H4DW5+1BPK88w= -----END CERTIFICATE-----Generated at Wed Dec 24 22:57:55 2025 by rpki-client