This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: MCyvsMAnaw8nVSqhW+Ntr71PhPptA2MPKhJ2fbrKYPU= Subject key identifier: 3F:ED:D2:7D:45:A6:D6:ED:3F:BB:7C:92:A0:2C:77:84:01:80:A3:A4 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 2AD53B2054831EB910910BF15BB9C0E7C253A04B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 0230 Signing time: Sat 06 Dec 2025 07:40:02 +0000 Manifest this update: Sat 06 Dec 2025 07:35:02 +0000 Manifest next update: Tue 09 Dec 2025 08:25:02 +0000 Files and hashes: 1: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: TUYECtdK7h5q+hPB+tkkvSi8kutFW5TSHZvVKkuAu/A=) 2: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 4: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d5:3b:20:54:83:1e:b9:10:91:0b:f1:5b:b9:c0:e7:c2:53:a0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Dec 6 07:35:02 2025 GMT Not After : Dec 9 08:25:02 2025 GMT Subject: CN=3FEDD27D45A6D6ED3FBB7C92A02C77840180A3A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:9e:78:20:a2:a7:ec:48:f0:16:5e:8c:71: eb:ce:6a:eb:11:00:c7:00:38:8c:69:60:e9:24:de: 44:82:ec:42:02:60:c1:e9:7d:12:40:6d:f3:b4:93: e8:5f:1f:63:ef:03:1c:42:37:a1:9f:25:69:31:d9: 94:06:2e:13:01:78:b8:4b:36:00:6d:cd:79:f8:f4: c5:e2:90:24:07:b1:ed:f8:a9:5a:1d:6e:9d:1f:48: 95:19:6c:85:1a:6b:91:f9:0a:d5:cd:10:40:d0:79: a4:2e:33:ed:63:80:c1:16:e6:e3:02:e3:3b:4f:19: 0d:41:9b:7f:57:a8:28:07:8b:e3:97:5c:20:c4:56: 7c:5a:d6:9f:1a:ae:1b:59:4c:02:38:1b:8b:0c:69: a8:d1:d2:ee:13:39:fe:1d:d5:11:30:06:b4:5e:7b: 6a:78:4b:af:3c:29:df:72:94:95:da:15:e9:47:63: 24:cb:3f:5e:82:6a:89:cb:6a:13:4a:ad:20:ce:51: dc:ff:62:bf:cc:c8:8b:f8:a8:49:a7:46:c5:7f:a2: 87:05:bd:f2:ec:44:95:c2:5c:0e:d1:8d:47:06:fd: 01:df:fd:eb:34:8c:47:9e:80:9c:40:8f:50:79:cf: 05:96:f6:82:e0:15:69:59:19:18:aa:6a:f8:d6:6b: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:ED:D2:7D:45:A6:D6:ED:3F:BB:7C:92:A0:2C:77:84:01:80:A3:A4 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:48:8a:a4:e7:d6:0d:a6:26:dd:d2:ff:4c:aa:4e:b8:7a:9e: 7a:d7:b3:52:22:93:11:ba:16:03:e5:5b:16:31:56:39:6c:d8: 8c:f6:a5:2c:36:02:27:06:81:6a:75:a0:81:e2:35:08:6e:d4: da:fb:e9:0f:9f:f1:77:5a:b0:47:14:6b:26:ca:3e:0c:0c:46: 5d:cc:c6:8a:5f:1f:0b:fb:bc:37:e7:c4:3d:9e:b4:87:36:b5: 88:b0:07:72:a9:3a:fb:25:84:3b:ab:3d:5e:fa:c7:a8:a3:12: c0:3f:f9:57:0b:97:27:a6:77:19:07:32:3b:58:c1:a1:1c:d3: 5b:a8:f0:41:21:4c:4a:d5:c2:1e:af:8b:35:41:46:70:f4:25: dc:c9:4f:84:6e:f9:40:09:17:2b:34:55:c6:d7:f4:2b:53:3e: c3:ac:27:d4:e4:93:cb:ac:46:3e:92:db:f0:cf:be:29:f2:03: 6d:2f:60:74:b6:8c:19:96:da:1e:2d:bd:33:56:73:e8:7c:89: 12:45:4d:46:2b:24:b4:62:2b:94:f9:3f:ca:5f:62:0e:ec:c5: 38:d1:8e:ad:c9:e2:d7:91:b4:bb:33:f8:72:99:10:77:d5:88: 01:ce:cb:83:97:07:5f:8b:49:be:3d:a3:3a:4c:5f:04:c3:4d: 11:ff:f8:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtU7IFSDHrkQkQvxW7nA58JToEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTEyMDYwNzM1MDJaFw0yNTEyMDkwODI1MDJaMDMxMTAvBgNV BAMTKDNGRUREMjdENDVBNkQ2RUQzRkJCN0M5MkEwMkM3Nzg0MDE4MEEzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakJ54IKKn7EjwFl6McevOausR AMcAOIxpYOkk3kSC7EICYMHpfRJAbfO0k+hfH2PvAxxCN6GfJWkx2ZQGLhMBeLhL NgBtzXn49MXikCQHse34qVodbp0fSJUZbIUaa5H5CtXNEEDQeaQuM+1jgMEW5uMC 4ztPGQ1Bm39XqCgHi+OXXCDEVnxa1p8arhtZTAI4G4sMaajR0u4TOf4d1REwBrRe e2p4S688Kd9ylJXaFelHYyTLP16CaonLahNKrSDOUdz/Yr/MyIv4qEmnRsV/oocF vfLsRJXCXA7RjUcG/QHf/es0jEeegJxAj1B5zwWW9oLgFWlZGRiqavjWawe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+3SfUWm1u0/u3ySoCx3hAGAo6QwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJIiqTn1g2mJt3S/0yqTrh6nnrXs1IikxG6 FgPlWxYxVjls2Iz2pSw2AicGgWp1oIHiNQhu1Nr76Q+f8XdasEcUaybKPgwMRl3M xopfHwv7vDfnxD2etIc2tYiwB3KpOvslhDurPV76x6ijEsA/+VcLlyemdxkHMjtY waEc01uo8EEhTErVwh6vizVBRnD0JdzJT4Ru+UAJFys0VcbX9CtTPsOsJ9Tkk8us Rj6S2/DPvinyA20vYHS2jBmW2h4tvTNWc+h8iRJFTUYrJLRiK5T5P8pfYg7sxTjR jq3J4teRtLsz+HKZEHfViAHOy4OXB1+LSb49ozpMXwTDTRH/+G4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:09 2025 by rpki-client