This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: Z0Rdf9KUvb1VmjKyUjvaGzB2Z+uLRnSBgARo0vfuc00= Subject key identifier: 28:F1:B0:AC:6A:0A:B3:4A:2B:20:DA:81:2E:23:61:BA:1C:04:2C:CD Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 7323CDE73B111C189388B1726368CB19BF4F903C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 0229 Signing time: Sat 13 Dec 2025 12:31:58 +0000 Manifest this update: Sat 13 Dec 2025 12:26:58 +0000 Manifest next update: Tue 16 Dec 2025 18:34:58 +0000 Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) 2: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: Wbj9UnfIL2A9rvV4axrzSKcOU+yGCFMlA2mPBOy8rB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 18:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:23:cd:e7:3b:11:1c:18:93:88:b1:72:63:68:cb:19:bf:4f:90:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Dec 13 12:26:58 2025 GMT Not After : Dec 16 18:34:58 2025 GMT Subject: CN=28F1B0AC6A0AB34A2B20DA812E2361BA1C042CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:7d:27:2c:24:65:d7:75:1f:5a:dc:a5:61: 0b:ad:3e:92:6b:49:e5:3d:32:36:c8:3d:f2:91:f5: 60:3c:7d:ca:3e:d3:f6:5f:3c:12:79:a3:d1:78:c8: 65:a8:57:28:70:a4:d3:ba:4c:44:52:38:35:d2:64: 8e:fc:54:d8:6f:6f:7b:ec:4e:db:13:c4:08:f6:8f: 5d:00:c9:d1:da:b7:0e:1e:5c:74:38:7b:08:cf:4d: 4d:cc:70:43:70:30:96:b8:fe:ab:75:17:31:f0:3b: 13:cc:87:a6:93:ea:4e:2d:0c:2e:4d:0c:66:91:0f: 97:cd:05:72:ed:f1:b6:01:c5:b8:8c:35:25:56:0a: 0c:3a:6c:9c:0d:4d:8f:af:71:37:18:1d:e1:18:c5: ff:81:57:50:f1:0b:34:70:b0:f9:6c:a2:db:85:37: f0:e6:43:79:a2:03:54:f9:8f:ca:2b:45:b4:b8:f4: e0:6c:d1:4e:46:96:6e:f7:76:33:55:6e:6c:68:61: 55:cc:90:e7:7c:c3:21:99:06:b4:f0:87:27:84:b5: f2:89:14:be:7c:59:77:50:04:56:6b:44:61:a5:93: b5:6b:e5:95:e7:87:1c:29:a0:ca:0a:9e:00:d9:62: 01:f9:ab:7f:f8:12:7a:3d:e9:1f:9e:96:b4:9b:17: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F1:B0:AC:6A:0A:B3:4A:2B:20:DA:81:2E:23:61:BA:1C:04:2C:CD X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:99:47:32:2e:5f:e8:3d:a6:33:db:8b:ce:ec:51:59:00:9c: 5b:66:a7:4c:25:bf:ee:4e:72:cf:b3:0f:39:ec:df:af:65:bb: 90:3e:9a:25:9e:96:2a:11:3a:bd:b8:f7:57:ba:5d:2a:a0:eb: bf:02:0e:92:d1:eb:8e:1f:15:6c:f8:1e:2f:98:d9:8f:b3:d9: 9f:20:80:22:50:48:f9:64:a9:eb:4b:82:8d:78:3d:db:88:b8: 2f:e5:ee:17:4e:29:3e:8b:cb:24:e6:5a:d8:f4:21:55:e0:63: fa:96:08:f9:f8:2a:ac:05:b5:a5:ad:46:bb:3c:13:43:8a:2f: c9:58:99:27:98:f1:d1:fd:ff:2c:b1:b3:b4:48:21:3c:35:84: 24:0c:87:65:f3:5e:77:17:13:a3:e5:ec:c6:96:a8:a6:0b:65: 86:d4:9a:af:27:9c:14:02:e7:9a:0d:16:57:5b:29:77:70:14: 17:ae:6f:59:fc:11:92:c1:a5:c5:ed:e7:4c:25:77:f6:88:bb: 25:26:8e:ff:56:97:42:17:b7:32:d8:64:c5:75:42:79:6c:ba: cc:4f:43:5c:2e:d8:d9:ba:b3:ba:97:4d:71:01:e8:ee:9c:58: 31:fa:4b:a8:d9:ee:15:0f:a6:cf:6a:e6:94:53:d4:ef:bb:1a: 10:ab:e0:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyPN5zsRHBiTiLFyY2jLGb9PkDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTEyMTMxMjI2NThaFw0yNTEyMTYxODM0NThaMDMxMTAvBgNV BAMTKDI4RjFCMEFDNkEwQUIzNEEyQjIwREE4MTJFMjM2MUJBMUMwNDJDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylH0nLCRl13UfWtylYQutPpJr SeU9MjbIPfKR9WA8fco+0/ZfPBJ5o9F4yGWoVyhwpNO6TERSODXSZI78VNhvb3vs TtsTxAj2j10AydHatw4eXHQ4ewjPTU3McENwMJa4/qt1FzHwOxPMh6aT6k4tDC5N DGaRD5fNBXLt8bYBxbiMNSVWCgw6bJwNTY+vcTcYHeEYxf+BV1DxCzRwsPlsotuF N/DmQ3miA1T5j8orRbS49OBs0U5Glm73djNVbmxoYVXMkOd8wyGZBrTwhyeEtfKJ FL58WXdQBFZrRGGlk7Vr5ZXnhxwpoMoKngDZYgH5q3/4Eno96R+elrSbFxXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPGwrGoKs0orINqBLiNhuhwELM0wHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGZRzIuX+g9pjPbi87sUVkAnFtmp0wlv+5O cs+zDzns369lu5A+miWelioROr2491e6XSqg678CDpLR644fFWz4Hi+Y2Y+z2Z8g gCJQSPlkqetLgo14PduIuC/l7hdOKT6LyyTmWtj0IVXgY/qWCPn4KqwFtaWtRrs8 E0OKL8lYmSeY8dH9/yyxs7RIITw1hCQMh2XzXncXE6Pl7MaWqKYLZYbUmq8nnBQC 55oNFldbKXdwFBeub1n8EZLBpcXt50wld/aIuyUmjv9Wl0IXtzLYZMV1QnlsusxP Q1wu2Nm6s7qXTXEB6O6cWDH6S6jZ7hUPps9q5pRT1O+7GhCr4FA= -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:19 2025 by rpki-client