This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: OSIUwwtmsY+pVPQKk7lk9CXOS+9Cm3KK2QDsV6aUvAQ= Subject key identifier: 00:67:B6:77:E1:6D:3F:24:9D:49:23:1D:C1:C1:97:84:61:74:F4:28 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 7B7CDCB13AD31CD90F7CE534E150930E43066985 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 0384 Signing time: Sat 06 Dec 2025 12:01:40 +0000 Manifest this update: Sat 06 Dec 2025 11:56:40 +0000 Manifest next update: Tue 09 Dec 2025 17:00:40 +0000 Files and hashes: 1: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: C7ql00174wL/EdIFDPtVTPpvcLt8gYeAcB48umEB52Y=) 2: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) 3: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) 4: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7c:dc:b1:3a:d3:1c:d9:0f:7c:e5:34:e1:50:93:0e:43:06:69:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Dec 6 11:56:40 2025 GMT Not After : Dec 9 17:00:40 2025 GMT Subject: CN=0067B677E16D3F249D49231DC1C197846174F428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:17:b7:56:ea:a3:aa:64:62:41:58:8e:20: 37:4e:80:0b:76:f7:6f:9b:84:20:e9:88:28:5e:86: c0:4f:08:27:54:5c:54:9a:b1:69:e1:4b:40:a4:98: 04:43:3b:8c:2b:c0:d1:f6:d9:89:db:25:f3:4e:24: 75:60:be:9f:a8:a1:18:67:ca:48:d1:72:72:86:22: 39:c9:ef:39:65:25:b6:47:b8:1b:1f:6a:59:01:e1: b0:15:47:96:c3:ce:2d:d5:06:1f:d3:95:8a:19:c6: bb:5f:3d:1e:c3:bc:2f:b1:27:86:a1:92:ea:c3:d4: 88:4d:81:e4:46:f0:c3:a2:8f:28:bc:e1:0d:5f:7e: 8e:17:90:6d:00:8d:5f:83:5d:ac:12:8f:c2:3e:d3: 22:0d:81:53:9b:d1:9b:00:f2:3c:7e:f8:ac:20:b7: f9:6d:a2:44:70:6b:15:31:26:d8:8a:a3:66:c7:16: d9:d7:3f:46:3f:0b:c2:2f:e4:02:8b:3e:d7:40:2f: cf:5f:98:2d:13:e0:cd:d8:a1:e1:c7:29:79:e8:ff: b8:df:f0:59:df:58:26:cc:3c:d0:87:fe:67:56:ed: 0f:8d:a7:de:fe:fc:67:ba:c6:08:bf:4f:96:92:50: b1:4f:1f:c9:fd:d9:31:76:8c:23:d4:99:3e:f8:11: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:67:B6:77:E1:6D:3F:24:9D:49:23:1D:C1:C1:97:84:61:74:F4:28 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:0e:74:47:0e:f4:47:fd:0d:9e:f5:9e:c2:19:82:f2:88:69: 0f:8b:cb:89:51:42:d6:bb:53:6a:e0:dd:4a:29:42:f9:ce:79: f2:59:6a:65:96:43:83:a0:d6:b7:dc:90:7f:67:8b:3f:11:0a: d1:8e:3a:3f:9a:e2:64:62:35:ef:93:a8:a0:5b:a1:c1:3e:b3: e1:17:9f:74:b4:3e:36:d9:8d:4f:99:99:7f:89:27:45:b2:65: 96:f5:37:98:32:01:ca:24:8f:fd:8f:92:1a:84:fd:e8:6b:b4: 98:9f:6e:68:9c:c2:dd:f3:02:ce:ba:56:98:03:ee:db:05:ae: f6:fa:67:b9:fc:df:89:76:fd:2c:d9:b9:9e:47:3f:03:90:37: 66:63:1d:a8:19:9a:dd:eb:15:dd:b9:c9:66:bc:75:9b:a4:4a: 53:e9:82:1f:da:5d:64:b5:b7:11:71:de:a2:33:fd:d8:0e:67: 12:54:78:88:74:fd:1a:ec:65:8b:21:98:b4:9f:40:d4:cc:41: 3d:c6:46:94:70:21:da:39:6a:71:83:24:da:f3:cc:48:67:9b: 97:9a:fa:25:13:b8:e7:72:04:8b:61:2a:2f:f1:bf:b0:24:cd: 1c:b4:30:e9:df:68:ae:6e:d7:b2:f1:94:15:5d:a2:e5:e8:dc: 0c:55:cb:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3zcsTrTHNkPfOU04VCTDkMGaYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTEyMDYxMTU2NDBaFw0yNTEyMDkxNzAwNDBaMDMxMTAvBgNV BAMTKDAwNjdCNjc3RTE2RDNGMjQ5RDQ5MjMxREMxQzE5Nzg0NjE3NEY0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFhe3VuqjqmRiQViOIDdOgAt2 92+bhCDpiChehsBPCCdUXFSasWnhS0CkmARDO4wrwNH22YnbJfNOJHVgvp+ooRhn ykjRcnKGIjnJ7zllJbZHuBsfalkB4bAVR5bDzi3VBh/TlYoZxrtfPR7DvC+xJ4ah kurD1IhNgeRG8MOijyi84Q1ffo4XkG0AjV+DXawSj8I+0yINgVOb0ZsA8jx++Kwg t/ltokRwaxUxJtiKo2bHFtnXP0Y/C8Iv5AKLPtdAL89fmC0T4M3YoeHHKXno/7jf 8FnfWCbMPNCH/mdW7Q+Np97+/Ge6xgi/T5aSULFPH8n92TF2jCPUmT74Ee0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGe2d+FtPySdSSMdwcGXhGF09CgwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYOdEcO9Ef9DZ71nsIZgvKIaQ+Ly4lRQta7 U2rg3UopQvnOefJZamWWQ4Og1rfckH9niz8RCtGOOj+a4mRiNe+TqKBbocE+s+EX n3S0PjbZjU+ZmX+JJ0WyZZb1N5gyAcokj/2PkhqE/ehrtJifbmicwt3zAs66VpgD 7tsFrvb6Z7n834l2/SzZuZ5HPwOQN2ZjHagZmt3rFd25yWa8dZukSlPpgh/aXWS1 txFx3qIz/dgOZxJUeIh0/RrsZYshmLSfQNTMQT3GRpRwIdo5anGDJNrzzEhnm5ea +iUTuOdyBIthKi/xv7AkzRy0MOnfaK5u17LxlBVdouXo3AxVyzc= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:48 2025 by rpki-client