This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: rPkB9rjtUtGhsCxMDno9IXQ8mv6yCQIuU8z3cbTW1mk= Subject key identifier: 33:03:E8:A9:EE:8E:80:A0:1B:88:63:2F:64:88:55:1F:9A:B8:C8:FB Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 2F9F2FCABC8375261F966FED913489D6E3DC8612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: B4 Signing time: Wed 03 Dec 2025 07:21:28 +0000 Manifest this update: Wed 03 Dec 2025 07:16:28 +0000 Manifest next update: Sat 06 Dec 2025 17:03:28 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=) 2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: mm4b3KLaQ8X4T+se2kzEe92Zw1qbn9DIMBUKU0nunXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 17:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9f:2f:ca:bc:83:75:26:1f:96:6f:ed:91:34:89:d6:e3:dc:86:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Dec 3 07:16:28 2025 GMT Not After : Dec 6 17:03:28 2025 GMT Subject: CN=3303E8A9EE8E80A01B88632F6488551F9AB8C8FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:61:fc:fe:1c:29:0f:88:eb:68:cc:53:51: 6b:30:ce:27:92:89:2d:5a:89:dc:a1:d9:32:c7:5a: 2a:24:2d:87:ed:ce:d8:3d:8e:51:c8:74:57:38:a8: 7c:7b:ab:a6:1c:a5:67:38:99:bd:d4:1e:67:d6:5a: bf:55:60:b8:14:82:31:42:20:cf:94:ff:52:b3:69: 61:d1:b0:a5:e3:77:d5:7d:1b:3d:4c:c7:6d:2f:45: d8:a2:91:8c:f8:15:c8:d9:b8:de:6e:48:a0:65:4f: c8:aa:e6:d3:bb:54:d1:44:4c:63:6f:e6:d1:a9:23: da:89:e9:ae:37:5c:27:12:4e:c6:d3:7e:9c:68:8c: 0c:e2:92:7e:48:a2:9f:4a:ac:f6:9d:9a:37:5b:71: 7d:a6:b2:aa:5b:a1:c8:29:a5:8a:f2:2e:94:2b:a8: bc:ce:06:ca:11:d3:d6:c0:35:b4:ec:3d:6b:ef:86: f9:3f:b6:62:3f:e8:5c:db:e0:33:4f:43:a0:12:8b: a1:53:3f:92:98:ba:98:93:40:f3:f4:65:6f:86:f6: c7:e7:48:9e:c1:ac:d2:87:3d:70:55:e6:c6:c3:90: c3:c5:98:cf:44:b0:1f:26:01:76:65:92:73:fe:c0: 32:4e:c8:18:d8:cd:fa:21:68:df:4f:1b:04:d1:b5: 95:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:03:E8:A9:EE:8E:80:A0:1B:88:63:2F:64:88:55:1F:9A:B8:C8:FB X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ba:4a:ee:49:19:c8:02:6a:fe:25:24:2a:98:f5:2f:de:a8: d0:4d:4d:55:77:da:79:ec:02:dc:87:42:33:83:89:11:e8:3f: 90:e4:1b:13:e5:3d:e7:0f:bd:1c:5a:66:d2:77:c7:49:e6:0c: fa:a8:b4:4a:ad:5c:09:fd:9c:77:71:d0:d3:27:19:f3:71:e0: b3:c8:c6:2e:5f:72:03:51:f5:db:ac:6f:b6:5d:4c:10:b3:b0: a9:73:57:50:25:10:21:35:a4:e5:d3:8e:83:d8:e3:83:1d:df: f5:92:4a:f3:da:dc:13:73:5f:74:0d:fd:2e:e5:6d:70:80:3e: f3:3f:23:92:ad:1d:56:d7:1c:c1:3b:ad:07:96:cc:71:00:94: 6d:95:ed:8a:86:8c:9a:92:8e:07:34:62:79:35:c8:13:b0:75: 76:1d:86:6b:be:72:2d:a0:44:c4:22:a5:38:65:92:9a:3e:83: 2b:a7:33:6b:d8:dc:68:2b:a5:4f:95:7b:f1:1d:9d:e5:66:4c: 66:56:16:ee:a9:58:4f:20:db:b2:5d:89:40:3a:87:9c:44:6e: 61:1f:85:d7:41:c6:6a:02:1d:48:d3:62:22:23:ab:e2:98:75: 90:f6:5c:c2:ed:43:eb:40:4d:dc:0a:ee:b8:8e:82:a2:a6:20: 8d:93:2b:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL58vyryDdSYflm/tkTSJ1uPchhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTEyMDMwNzE2MjhaFw0yNTEyMDYxNzAzMjhaMDMxMTAvBgNV BAMTKDMzMDNFOEE5RUU4RTgwQTAxQjg4NjMyRjY0ODg1NTFGOUFCOEM4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+WH8/hwpD4jraMxTUWswzieS iS1aidyh2TLHWiokLYftztg9jlHIdFc4qHx7q6YcpWc4mb3UHmfWWr9VYLgUgjFC IM+U/1KzaWHRsKXjd9V9Gz1Mx20vRdiikYz4FcjZuN5uSKBlT8iq5tO7VNFETGNv 5tGpI9qJ6a43XCcSTsbTfpxojAzikn5Iop9KrPadmjdbcX2msqpbocgppYryLpQr qLzOBsoR09bANbTsPWvvhvk/tmI/6Fzb4DNPQ6ASi6FTP5KYupiTQPP0ZW+G9sfn SJ7BrNKHPXBV5sbDkMPFmM9EsB8mAXZlknP+wDJOyBjYzfohaN9PGwTRtZXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMwPoqe6OgKAbiGMvZIhVH5q4yPswHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIi6Su5JGcgCav4lJCqY9S/eqNBNTVV32nns AtyHQjODiRHoP5DkGxPlPecPvRxaZtJ3x0nmDPqotEqtXAn9nHdx0NMnGfNx4LPI xi5fcgNR9dusb7ZdTBCzsKlzV1AlECE1pOXTjoPY44Md3/WSSvPa3BNzX3QN/S7l bXCAPvM/I5KtHVbXHME7rQeWzHEAlG2V7YqGjJqSjgc0Ynk1yBOwdXYdhmu+ci2g RMQipThlkpo+gyunM2vY3GgrpU+Ve/EdneVmTGZWFu6pWE8g27JdiUA6h5xEbmEf hddBxmoCHUjTYiIjq+KYdZD2XMLtQ+tATdwK7riOgqKmII2TK6Y= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:38 2025 by rpki-client