This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft File: C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft (raw, json) Hash identifier: kLijwQmUXc9f8kDxC7KwsLTLZ4IcNT1QUoJzkmlOADs= Subject key identifier: 4B:04:20:FE:83:46:37:EF:6A:8E:BD:97:38:A1:7A:8F:5F:FE:C8:44 Authority key identifier: C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 Certificate issuer: /CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Certificate serial: 647FCBA523A11A6619D06A77012A67889A23B15D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft Manifest number: 052A Signing time: Wed 03 Dec 2025 03:12:29 +0000 Manifest this update: Wed 03 Dec 2025 03:07:29 +0000 Manifest next update: Sat 06 Dec 2025 09:59:29 +0000 Files and hashes: 1: C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl (hash: JybW8WjpY8OcggJGNIZconFB/InDQSL9gCS1QP12djA=) 2: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: p4QmW11QVKIy/H0IsIo9siyqhBsQC1fGJ4OCrOJGVFc=) 3: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: n2P3Yp+pRtsLYzAJB7+7TGk1BY1SpgPoZfiLyMV51xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7f:cb:a5:23:a1:1a:66:19:d0:6a:77:01:2a:67:88:9a:23:b1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Validity Not Before: Dec 3 03:07:29 2025 GMT Not After : Dec 6 09:59:29 2025 GMT Subject: CN=4B0420FE834637EF6A8EBD9738A17A8F5FFEC844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:82:28:e9:ba:e5:38:38:43:ba:79:ee:4a: f0:35:be:66:a7:f6:7b:82:1a:82:2f:3a:0f:be:db: fb:f8:4c:be:92:e6:c5:21:d9:1a:41:e7:e8:f8:6c: 9d:11:85:d8:90:a1:45:9f:d9:89:01:e3:26:48:36: e6:12:bd:c2:14:d2:0f:6a:0d:ed:83:cd:e5:c0:6a: 13:72:a7:fb:7d:4d:2e:50:71:c9:d6:80:5f:c3:38: 59:f2:5e:80:a8:8c:46:c5:f4:2c:12:f9:c8:26:7c: 05:c8:fe:b1:79:3e:24:da:ea:55:b9:d3:a2:02:db: e2:a1:f6:1a:8d:55:9b:06:89:a1:a9:a1:e9:ae:c6: d5:6a:5c:0d:90:9d:86:86:0e:d3:93:81:f2:09:3f: 50:27:05:60:4c:26:f4:75:01:fa:f7:a5:9a:8e:cc: e6:0f:c3:1c:87:50:4d:c3:d2:1e:fa:4f:78:29:09: 72:0d:a3:8c:c4:92:6b:dc:67:72:8d:bd:c3:78:0b: 1d:f2:88:42:24:5d:98:4f:03:73:09:8e:ae:25:b1: ae:6b:f1:60:ea:8e:f0:98:67:94:2f:a9:b6:ee:4a: 58:75:79:e6:21:4c:ff:f5:81:da:6c:b2:f5:72:ab: ab:16:27:bf:f2:b1:23:19:6d:a0:4e:23:50:1c:4b: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:04:20:FE:83:46:37:EF:6A:8E:BD:97:38:A1:7A:8F:5F:FE:C8:44 X509v3 Authority Key Identifier: keyid:C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3a:3c:27:df:6a:77:09:fb:d8:e1:b7:12:ec:f3:4b:24:4a: 10:38:90:fa:d8:b7:2e:7b:60:13:45:b3:22:c9:25:7c:30:47: 68:70:69:6d:08:0a:02:fb:41:bc:79:b5:34:b6:cf:f2:cb:f5: a9:c9:f3:19:ee:8e:05:86:b3:b8:b5:a5:9a:f1:d4:b3:ff:12: b5:d8:6a:35:d0:0d:da:47:f5:80:49:6a:eb:92:95:42:6a:51: a2:72:1f:c4:a1:ea:9e:f5:69:0f:ff:12:68:ac:68:32:d4:a3: fd:47:71:71:bc:80:c9:12:2a:23:a8:10:1d:fd:48:1b:71:7d: 59:ad:3c:f7:4f:8f:84:ed:6a:f0:b9:56:e3:14:25:5c:8e:d1: ef:59:35:d3:b1:cf:d0:c6:31:b4:3b:4d:46:a6:af:ff:df:2d: bc:1e:cf:fd:8a:5c:ed:19:aa:7c:52:6c:6d:09:01:30:ca:83: c6:2d:35:ab:ab:77:59:a1:1c:8b:79:91:4b:4f:fa:77:55:ac: 4f:64:d6:7d:cd:de:22:48:5d:0d:68:cd:75:ab:7b:7e:cf:3f: b5:18:f2:a1:a1:72:b0:b5:f5:2b:c0:df:42:c3:a8:57:4f:27: ed:c7:85:2c:22:8c:b4:99:13:26:db:0a:ee:e2:75:19:da:17: a4:a2:90:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZH/LpSOhGmYZ0Gp3ASpniJojsV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkx NUExOEIzMzAeFw0yNTEyMDMwMzA3MjlaFw0yNTEyMDYwOTU5MjlaMDMxMTAvBgNV BAMTKDRCMDQyMEZFODM0NjM3RUY2QThFQkQ5NzM4QTE3QThGNUZGRUM4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdoIo6brlODhDunnuSvA1vman 9nuCGoIvOg++2/v4TL6S5sUh2RpB5+j4bJ0RhdiQoUWf2YkB4yZINuYSvcIU0g9q De2DzeXAahNyp/t9TS5QccnWgF/DOFnyXoCojEbF9CwS+cgmfAXI/rF5PiTa6lW5 06IC2+Kh9hqNVZsGiaGpoemuxtVqXA2QnYaGDtOTgfIJP1AnBWBMJvR1Afr3pZqO zOYPwxyHUE3D0h76T3gpCXINo4zEkmvcZ3KNvcN4Cx3yiEIkXZhPA3MJjq4lsa5r 8WDqjvCYZ5QvqbbuSlh1eeYhTP/1gdpssvVyq6sWJ7/ysSMZbaBOI1AcS+cZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSwQg/oNGN+9qjr2XOKF6j1/+yEQwHwYDVR0j BBgwFoAUxvc27769GgFD2wpXoUNUWRWhizMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDU0YjRlMi0yZTU4LTQ2NWItYWZhYS0xYzk0NjVjODgyZTYvMC9DNkY3MzZFRkJF QkQxQTAxNDNEQjBBNTdBMTQzNTQ1OTE1QTE4QjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkxNUEx OEIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0 NTkxNUExOEIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALw6PCffancJ+9jhtxLs80skShA4kPrYty57 YBNFsyLJJXwwR2hwaW0ICgL7Qbx5tTS2z/LL9anJ8xnujgWGs7i1pZrx1LP/ErXY ajXQDdpH9YBJauuSlUJqUaJyH8Sh6p71aQ//EmisaDLUo/1HcXG8gMkSKiOoEB39 SBtxfVmtPPdPj4TtavC5VuMUJVyO0e9ZNdOxz9DGMbQ7TUamr//fLbwez/2KXO0Z qnxSbG0JATDKg8YtNaurd1mhHIt5kUtP+ndVrE9k1n3N3iJIXQ1ozXWre37PP7UY 8qGhcrC19SvA30LDqFdPJ+3HhSwijLSZEybbCu7idRnaF6SikCo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client