This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft (raw, json)
Hash identifier: Gq0WkCDusVvAuTsR2hgbbcQYRr0KWEdJwd2pJrHOYKw=
Subject key identifier: 93:4C:C1:B8:D0:19:29:63:C1:3E:22:B0:07:EB:21:E5:05:10:67:2F
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial: 5E1D74415A45BA54BB542AD3CF9232824A44B5E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
Manifest number: 01B9
Signing time: Wed 03 Dec 2025 06:01:53 +0000
Manifest this update: Wed 03 Dec 2025 05:56:53 +0000
Manifest next update: Sat 06 Dec 2025 09:04:53 +0000
Files and hashes: 1: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: 3ivbK9KpjZVb/XVJskMLhHcZHY/PxWUUM4YeUyN+bNw=)
2: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl (hash: wHOGQ62evcdr74NDE4YWWQ3mE6N83qXDgj9fbPTpo7g=)
3: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: 1514IP+F3fs/wWPY76J3M+VGkLwDN+TVOPCGmIn0YeI=)
4: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: Gp+3hoUQHoSs7BqoZ98uo/JPIvevE7xLEnrTa4hmSmU=)
5: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: Ysc9Qtc/MJl5dYJb0Qhr9xILFagM64+bvGrjMt7zT9k=)
6: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: Meqto9gp7Tw3/wVHdB4HIOhRI0iUBfsDLYkbvujxqHk=)
7: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: kiwAboKBcY+KUfdKJ8QPyYYmhUR1O0Z8PHji6TPQSyQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 09:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1d:74:41:5a:45:ba:54:bb:54:2a:d3:cf:92:32:82:4a:44:b5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Validity
Not Before: Dec 3 05:56:53 2025 GMT
Not After : Dec 6 09:04:53 2025 GMT
Subject: CN=934CC1B8D0192963C13E22B007EB21E50510672F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:df:ef:0b:ee:78:a0:5a:48:da:9a:5e:49:
6a:4b:46:05:47:b7:07:55:e3:d3:86:fb:8e:67:aa:
d4:16:98:d8:78:8e:67:88:9c:72:fe:b1:dc:76:2b:
c8:32:56:b3:c2:fb:6b:af:a9:d6:4e:3c:01:7e:f6:
86:02:86:e1:0d:3f:a7:1b:c1:85:d4:e6:8d:a4:de:
f8:12:ba:79:aa:87:3b:c8:0a:c3:ec:42:8f:5f:fd:
e7:68:93:94:c1:32:7c:f4:0c:b6:ae:2e:0e:1b:2b:
ab:b2:99:63:eb:a4:35:53:ca:fb:7c:d2:51:9b:52:
0c:0e:ba:ed:4d:8f:e0:ed:dc:c0:4d:db:c2:b6:8d:
f8:b5:94:86:00:71:26:54:45:0d:dc:68:33:d1:50:
47:25:b0:95:db:f5:c9:b9:70:ef:57:99:e2:2a:76:
7f:9c:5b:58:59:d6:b4:b2:2f:0d:20:39:ff:6e:d7:
e3:04:62:91:fd:f9:da:1f:1d:db:f6:85:49:88:7f:
d7:bd:84:ac:4a:fa:c2:fb:04:79:d1:49:31:dd:cb:
95:91:6e:40:38:3d:ce:a8:f6:dc:aa:04:dc:8f:59:
a9:aa:ad:b8:a6:72:f3:c7:91:30:89:4f:12:77:9f:
d4:06:1d:c0:27:48:64:38:bf:7f:9c:92:8c:3c:6f:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4C:C1:B8:D0:19:29:63:C1:3E:22:B0:07:EB:21:E5:05:10:67:2F
X509v3 Authority Key Identifier:
keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:68:94:60:a9:81:99:0b:06:c5:66:c6:a5:02:bd:2d:71:0a:
bf:2f:e1:93:1a:b2:ae:e2:1d:9e:96:3d:79:66:44:41:eb:c9:
65:ae:c4:b1:29:8c:9e:54:21:b3:a7:d4:d5:9d:36:c2:18:ca:
23:eb:c5:0a:b7:dd:84:09:6a:77:0c:28:30:ca:a2:0d:b4:29:
df:4d:91:31:5a:7b:41:50:12:a8:57:11:c7:42:97:76:02:24:
f5:40:bd:6b:1d:78:87:2d:e3:b9:ad:29:44:ce:18:d5:f6:9c:
75:52:cd:fe:5f:71:d0:1d:2f:3b:28:4c:33:e6:ed:8e:75:02:
18:00:b3:f2:08:8d:df:d5:c9:67:1d:ef:f8:54:d7:e0:ab:25:
74:1a:a4:13:fb:68:57:56:1f:be:56:87:01:a9:9a:b9:d9:02:
9d:f3:d6:60:16:01:e5:c1:4f:cb:6c:13:a1:b2:34:a1:89:42:
1a:37:04:2c:1d:8d:02:1d:07:27:3e:bb:9f:03:29:7d:34:45:
d7:65:af:dd:5e:87:64:39:3e:6a:43:be:27:11:c1:1d:1b:57:
6f:9d:b4:e7:0d:8e:64:49:d5:c5:06:b8:c4:cc:63:a3:28:aa:
1f:a4:37:d9:3e:e0:12:e5:5d:56:bf:4c:a2:ea:60:06:d6:57:
1c:e8:2f:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXh10QVpFulS7VCrTz5IygkpEtegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5
RDREOTMwQjAeFw0yNTEyMDMwNTU2NTNaFw0yNTEyMDYwOTA0NTNaMDMxMTAvBgNV
BAMTKDkzNENDMUI4RDAxOTI5NjNDMTNFMjJCMDA3RUIyMUU1MDUxMDY3MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAd/vC+54oFpI2ppeSWpLRgVH
twdV49OG+45nqtQWmNh4jmeInHL+sdx2K8gyVrPC+2uvqdZOPAF+9oYChuENP6cb
wYXU5o2k3vgSunmqhzvICsPsQo9f/edok5TBMnz0DLauLg4bK6uymWPrpDVTyvt8
0lGbUgwOuu1Nj+Dt3MBN28K2jfi1lIYAcSZURQ3caDPRUEclsJXb9cm5cO9XmeIq
dn+cW1hZ1rSyLw0gOf9u1+MEYpH9+dofHdv2hUmIf9e9hKxK+sL7BHnRSTHdy5WR
bkA4Pc6o9tyqBNyPWamqrbimcvPHkTCJTxJ3n9QGHcAnSGQ4v3+ckow8bwEbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUk0zBuNAZKWPBPiKwB+sh5QUQZy8wHwYDVR0j
BBgwFoAUa00U/G03SvzKsZDFTd86Gp1NkwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NzU0NWI4NS05Mjc0LTQ3MGEtYWQyNy0yNDY5ZTlkMTU1YmMvMC82QjREMTRGQzZE
Mzc0QUZDQ0FCMTkwQzU0RERGM0ExQTlENEQ5MzBCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5RDRE
OTMwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk
MjctMjQ2OWU5ZDE1NWJjLzAvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNB
MUE5RDREOTMwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFpolGCpgZkLBsVmxqUCvS1xCr8v4ZMasq7i
HZ6WPXlmREHryWWuxLEpjJ5UIbOn1NWdNsIYyiPrxQq33YQJancMKDDKog20Kd9N
kTFae0FQEqhXEcdCl3YCJPVAvWsdeIct47mtKUTOGNX2nHVSzf5fcdAdLzsoTDPm
7Y51AhgAs/IIjd/VyWcd7/hU1+CrJXQapBP7aFdWH75WhwGpmrnZAp3z1mAWAeXB
T8tsE6GyNKGJQho3BCwdjQIdByc+u58DKX00Rddlr91eh2Q5PmpDvicRwR0bV2+d
tOcNjmRJ1cUGuMTMY6Moqh+kN9k+4BLlXVa/TKLqYAbWVxzoL74=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:41 2025 by rpki-client