This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft File: 6A755F0ECD114936B4C154BE153030E6BFE42025.mft (raw, json) Hash identifier: dDq+qsMG825Lg6gG8Dfdm45W8xI3M7FYZbnzN6lQg7s= Subject key identifier: 1F:08:42:82:1A:88:DA:3A:8A:97:AE:D8:B9:A2:A1:D0:12:FA:75:BB Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 5154250DD4EB9FDA3A9FEE1062F44E422FE8A098 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft Manifest number: B6 Signing time: Tue 02 Dec 2025 22:52:27 +0000 Manifest this update: Tue 02 Dec 2025 22:47:27 +0000 Manifest next update: Sat 06 Dec 2025 08:47:27 +0000 Files and hashes: 1: 6A755F0ECD114936B4C154BE153030E6BFE42025.crl (hash: +dMGfM3RSnW2wxCb+fAVdXzDk39bkSk7HClbNimu564=) 2: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: culnOZ+9LI8JbiM/iJt/J//Lb5wajjvnBMY/KnuE8Q4=) 3: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: e8ZJYzkvKx8Yk6VtEAAoJxN88Qmgg4lnk8IMQAGn/JE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:54:25:0d:d4:eb:9f:da:3a:9f:ee:10:62:f4:4e:42:2f:e8:a0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Dec 2 22:47:27 2025 GMT Not After : Dec 6 08:47:27 2025 GMT Subject: CN=1F0842821A88DA3A8A97AED8B9A2A1D012FA75BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:7a:cb:74:f8:b6:fa:37:2f:cb:55:8e:76: 7e:97:67:98:ef:0b:02:d6:25:d3:8e:30:b4:28:6b: 79:46:e5:3c:9e:f6:5a:3d:c7:f6:63:64:ce:18:3e: 72:e6:b0:84:35:4e:ac:8d:07:df:32:fa:1b:8d:23: 9e:c3:4f:2e:d8:d6:87:44:ff:38:3f:99:53:9d:5b: 40:bb:b8:97:81:9b:ad:63:83:ec:c3:0f:f2:16:76: 7c:c5:5f:e6:16:46:8d:cc:4b:59:86:24:5f:48:13: a0:1f:d7:58:2b:33:b9:b2:e3:5f:bc:23:7f:c9:79: 77:bc:09:75:ca:89:e0:df:91:15:ac:ad:88:59:43: b1:3a:a8:d4:86:4f:6e:9c:1f:16:c5:ee:85:2c:ed: 2f:f5:7f:4d:ee:a0:c2:ca:80:38:79:02:80:e9:ee: bf:44:db:43:28:3c:56:f1:8b:23:b0:9d:e4:96:c3: f9:83:2a:25:74:38:13:c2:0a:22:14:65:eb:8f:31: c3:cc:b0:68:3f:d2:2a:76:08:4a:a3:ab:39:a8:50: b3:12:ca:b9:24:06:2c:1b:d3:3c:9c:55:a4:b2:87: bf:d0:eb:2e:0c:0d:a9:f5:f9:f5:17:1c:46:01:7e: 5e:dc:80:64:3a:8d:bf:18:9c:87:7b:e5:ea:a2:c4: 08:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:08:42:82:1A:88:DA:3A:8A:97:AE:D8:B9:A2:A1:D0:12:FA:75:BB X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cb:81:76:82:56:8e:d1:61:09:63:1a:ea:96:d4:3a:9a:2e: 1b:6e:85:dd:3f:a7:05:c6:fb:bb:a7:89:5b:86:3b:9c:b5:0d: 34:96:a1:cf:55:af:f8:97:f5:e0:55:a3:4a:db:3c:d9:66:0d: 90:ac:44:1a:8c:6b:8f:4d:ac:dc:d3:f6:e6:b7:da:f2:99:d7: 90:20:39:ce:6f:55:ec:8f:ab:44:7b:92:b1:05:65:c5:06:a1: 7f:c4:bc:04:15:2e:83:e5:4a:55:d7:2b:c0:1a:00:da:62:f3: f3:a5:fb:53:82:7d:f6:f6:ca:cb:f7:4d:3f:90:f4:08:15:69: 9a:de:98:86:41:3b:04:ca:53:6a:d5:28:ab:c0:e5:39:8e:7e: 71:3b:f2:8e:3c:02:88:33:85:22:3c:ec:bb:26:2f:9d:5e:64: 35:9f:f2:08:e2:1c:6c:80:b3:ae:57:52:0c:a3:04:a9:25:0d: 65:57:66:ec:27:b1:07:a0:34:9a:60:3c:46:71:c9:76:e4:e9: 2e:9f:9c:0d:d0:dc:00:3e:8d:32:d9:94:b6:45:0a:c6:15:8b: 5e:4f:58:9e:36:f5:69:2e:3a:78:05:4b:98:4f:ca:d8:ed:56: 54:08:75:3a:d1:88:52:64:f0:f6:6b:e2:42:0c:83:ba:49:40: 22:6e:12:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUVQlDdTrn9o6n+4QYvROQi/ooJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNTEyMDIyMjQ3MjdaFw0yNTEyMDYwODQ3MjdaMDMxMTAvBgNV BAMTKDFGMDg0MjgyMUE4OERBM0E4QTk3QUVEOEI5QTJBMUQwMTJGQTc1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0XrLdPi2+jcvy1WOdn6XZ5jv CwLWJdOOMLQoa3lG5Tye9lo9x/ZjZM4YPnLmsIQ1TqyNB98y+huNI57DTy7Y1odE /zg/mVOdW0C7uJeBm61jg+zDD/IWdnzFX+YWRo3MS1mGJF9IE6Af11grM7my41+8 I3/JeXe8CXXKieDfkRWsrYhZQ7E6qNSGT26cHxbF7oUs7S/1f03uoMLKgDh5AoDp 7r9E20MoPFbxiyOwneSWw/mDKiV0OBPCCiIUZeuPMcPMsGg/0ip2CEqjqzmoULMS yrkkBiwb0zycVaSyh7/Q6y4MDan1+fUXHEYBfl7cgGQ6jb8YnId75eqixAjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwhCghqI2jqKl67YuaKh0BL6dbswHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMw RTZCRkU0MjAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzLgXaCVo7RYQljGuqW1DqaLhtuhd0/pwXG +7uniVuGO5y1DTSWoc9Vr/iX9eBVo0rbPNlmDZCsRBqMa49NrNzT9ua32vKZ15Ag Oc5vVeyPq0R7krEFZcUGoX/EvAQVLoPlSlXXK8AaANpi8/Ol+1OCffb2ysv3TT+Q 9AgVaZremIZBOwTKU2rVKKvA5TmOfnE78o48AogzhSI87LsmL51eZDWf8gjiHGyA s65XUgyjBKklDWVXZuwnsQegNJpgPEZxyXbk6S6fnA3Q3AA+jTLZlLZFCsYVi15P WJ429WkuOngFS5hPytjtVlQIdTrRiFJk8PZr4kIMg7pJQCJuEo8= -----END CERTIFICATE-----Generated at Wed Dec 3 17:14:41 2025 by rpki-client