This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: ajGo6Tl90obp9DzA+zVmzsiGDvwZxa9/wd6weM4cyH4= Subject key identifier: D7:B8:EC:FF:3D:D4:7A:CD:E1:9F:D8:A7:E1:E4:7F:8B:B9:F1:71:27 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 614D6EB7941044CD279357836A6ABE36224CBAD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 02F5 Signing time: Tue 02 Dec 2025 14:50:25 +0000 Manifest this update: Tue 02 Dec 2025 14:45:25 +0000 Manifest next update: Fri 05 Dec 2025 16:31:25 +0000 Files and hashes: 1: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: ldJ5bHX1gQBsO0aen63WwsPzeqr/e4tB3lE30OTbIvU=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4d:6e:b7:94:10:44:cd:27:93:57:83:6a:6a:be:36:22:4c:ba:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Dec 2 14:45:25 2025 GMT Not After : Dec 5 16:31:25 2025 GMT Subject: CN=D7B8ECFF3DD47ACDE19FD8A7E1E47F8BB9F17127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:35:c4:df:83:83:7d:23:d9:0d:aa:60:0d: 78:c9:de:a0:dd:ab:70:66:ac:49:eb:31:45:49:61: ca:e1:35:f8:03:28:66:4f:7b:21:dd:a5:27:3e:69: 7f:9a:59:03:2c:c2:69:eb:c6:1a:a8:b0:08:d3:38: 92:1e:1c:e2:bb:83:bf:66:f9:70:fc:68:b7:31:6f: 53:84:13:f8:dc:a7:f6:a8:67:41:95:e1:91:0c:c5: 96:cc:12:bd:7e:69:c5:6f:4f:f9:b6:f1:68:5d:22: 80:ea:ba:b3:f4:69:c0:46:44:48:6f:05:dd:2f:ec: 2c:7f:0a:b7:b1:ef:7f:cb:fd:17:cf:58:92:25:5a: 28:71:00:a5:80:e6:4d:09:fe:c4:b8:a8:68:60:03: 5a:58:0f:be:2f:8c:67:9e:72:24:13:f0:f4:6f:69: 7f:c2:0e:82:a4:b7:22:2f:bf:10:28:3d:54:9e:7d: 20:e6:57:14:39:6b:0b:ab:c3:28:45:19:4d:0f:ab: 37:1c:2e:a1:29:52:55:04:eb:4f:84:e2:90:5e:1b: 3d:11:90:2b:fe:ab:bf:a7:f7:5f:19:19:1c:8c:c2: f6:05:76:02:e1:19:e7:83:bd:5c:95:fa:87:d0:a9: e4:7e:d7:8c:89:49:ba:16:8d:c7:7b:a0:64:9e:7a: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B8:EC:FF:3D:D4:7A:CD:E1:9F:D8:A7:E1:E4:7F:8B:B9:F1:71:27 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:72:c2:44:75:f1:69:50:c0:ab:fe:21:36:c1:79:6b:29:2f: 3b:63:d5:2c:95:28:a4:52:7b:97:ac:c5:67:9c:32:17:3e:29: 66:72:c1:80:f9:c1:37:e4:96:41:d4:e9:c8:4c:e1:c6:4f:d4: e5:a0:6b:1e:c7:ed:86:f7:89:5c:20:71:c4:1c:9a:75:20:e1: c4:69:54:b0:26:68:0b:af:80:92:67:a4:cb:81:01:69:9c:07: 91:1c:f0:62:db:5a:9e:56:d8:0d:45:82:a1:51:d0:01:2c:fb: c6:df:43:4e:06:ae:70:09:8c:c8:4d:de:ab:49:f4:4e:dc:3c: 94:30:85:6a:91:e4:e0:cb:6b:04:cb:d8:22:82:1c:fe:b3:c3: 27:27:5e:27:55:8e:19:1e:63:20:ea:5e:29:e8:44:b0:ed:fa: 05:b6:df:1a:2c:c7:77:5a:80:5d:84:a6:c9:f9:56:c1:45:e5: 5b:37:85:25:e6:a2:a1:5b:80:98:d3:47:47:84:38:d1:7b:ab: 85:e6:cd:86:f7:88:aa:e1:91:2d:ab:06:ef:13:09:db:7b:1b: de:0c:16:af:b9:87:b0:a2:5f:56:52:af:71:95:05:74:85:31: cd:2a:9a:83:a1:9e:36:82:70:16:64:21:65:fd:5f:74:d4:56: b6:6b:72:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYU1ut5QQRM0nk1eDamq+NiJMutIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTEyMDIxNDQ1MjVaFw0yNTEyMDUxNjMxMjVaMDMxMTAvBgNV BAMTKEQ3QjhFQ0ZGM0RENDdBQ0RFMTlGRDhBN0UxRTQ3RjhCQjlGMTcxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDehDXE34ODfSPZDapgDXjJ3qDd q3BmrEnrMUVJYcrhNfgDKGZPeyHdpSc+aX+aWQMswmnrxhqosAjTOJIeHOK7g79m +XD8aLcxb1OEE/jcp/aoZ0GV4ZEMxZbMEr1+acVvT/m28WhdIoDqurP0acBGREhv Bd0v7Cx/Crex73/L/RfPWJIlWihxAKWA5k0J/sS4qGhgA1pYD74vjGeeciQT8PRv aX/CDoKktyIvvxAoPVSefSDmVxQ5awurwyhFGU0PqzccLqEpUlUE60+E4pBeGz0R kCv+q7+n918ZGRyMwvYFdgLhGeeDvVyV+ofQqeR+14yJSboWjcd7oGSeenB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17js/z3Ues3hn9in4eR/i7nxcScwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFywkR18WlQwKv+ITbBeWspLztj1SyVKKRS e5esxWecMhc+KWZywYD5wTfklkHU6chM4cZP1OWgax7H7Yb3iVwgccQcmnUg4cRp VLAmaAuvgJJnpMuBAWmcB5Ec8GLbWp5W2A1FgqFR0AEs+8bfQ04GrnAJjMhN3qtJ 9E7cPJQwhWqR5ODLawTL2CKCHP6zwycnXidVjhkeYyDqXinoRLDt+gW23xosx3da gF2Epsn5VsFF5Vs3hSXmoqFbgJjTR0eEONF7q4XmzYb3iKrhkS2rBu8TCdt7G94M Fq+5h7CiX1ZSr3GVBXSFMc0qmoOhnjaCcBZkIWX9X3TUVrZrcn8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:24 2025 by rpki-client