This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json) Hash identifier: Gbm/ncpdUOl1U7pMvT/wHPxN0oB90wXPV4bWjDhCXVE= Subject key identifier: 28:F3:9C:5B:CF:12:7E:79:CF:6A:91:6A:3A:2D:ED:F5:98:52:DC:84 Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 6BAAEB2429CD06747C958575101FB13DA1C5D193 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft Manifest number: 01E3 Signing time: Thu 04 Dec 2025 14:32:25 +0000 Manifest this update: Thu 04 Dec 2025 14:27:25 +0000 Manifest next update: Sun 07 Dec 2025 23:22:25 +0000 Files and hashes: 1: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: PWfgrIEAW5Ka7/l46DQwRT/6uSCPsoFbZO34zUTjWEM=) 2: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: qhQA0cj7kuBqIGVwCLG9U/r/eXfYDiDRD7UKEazkyf0=) 3: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: PbroDZSggjuZxD/u6qZ1VabsA7gMY1q+sQn5OovuPjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 23:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:aa:eb:24:29:cd:06:74:7c:95:85:75:10:1f:b1:3d:a1:c5:d1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Dec 4 14:27:25 2025 GMT Not After : Dec 7 23:22:25 2025 GMT Subject: CN=28F39C5BCF127E79CF6A916A3A2DEDF59852DC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:55:d0:15:f6:25:53:9b:90:1f:98:55:29: f0:f5:51:86:61:17:44:12:69:55:c0:78:8a:5f:e8: 4a:b4:ac:ae:44:60:2c:d8:8f:35:16:0f:86:d2:e5: bb:a4:55:61:c1:7a:6f:bc:83:c9:ed:1c:96:2d:89: 5c:01:f1:64:ce:b3:5c:fc:16:f7:41:08:72:09:73: 61:79:cf:d7:16:58:d6:bf:e7:32:9e:95:1e:3e:59: 3e:98:55:0b:ad:fc:7a:1f:35:b8:72:39:25:28:45: 80:e4:6e:2e:b0:a8:5a:2b:15:f2:f6:f8:af:5f:e9: 20:8c:43:c8:c4:45:af:ec:09:98:77:b0:b1:6b:96: 98:c3:3d:bb:e2:57:20:ee:1d:77:af:97:19:fd:11: 90:f1:a3:db:5b:a7:fd:6d:36:ec:d4:bf:ae:2e:fd: 8b:e6:9d:a2:6d:57:da:43:bb:61:aa:d1:24:dd:e6: 90:1e:bd:c0:b2:77:c4:eb:b8:81:2c:75:23:b0:80: 9a:e0:fe:82:25:62:41:34:06:d6:8d:f4:b7:47:8f: 76:80:fe:12:66:59:86:58:3d:07:5c:2f:aa:ef:da: 5a:87:9e:1c:58:d2:4a:4e:c6:75:2c:5c:df:ee:b2: 2f:69:77:5c:46:ba:d3:83:75:16:cb:48:e1:98:ca: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F3:9C:5B:CF:12:7E:79:CF:6A:91:6A:3A:2D:ED:F5:98:52:DC:84 X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9c:f7:04:2a:02:49:2e:90:33:a9:69:6e:93:cc:0e:c9:62: 3a:e5:a6:c6:fe:2a:b9:41:c9:e5:39:b8:ce:a5:8e:a7:40:7d: c4:53:c2:43:a7:af:0b:24:0c:3b:00:b4:10:b6:22:08:e1:1e: 7e:b3:a5:1a:5f:57:b5:bd:c1:4b:42:7e:91:0d:52:20:b6:7d: ef:45:9e:24:49:ac:2a:01:61:3d:47:ac:f9:62:61:f6:e1:62: 63:65:ce:72:77:27:49:a7:a6:68:e5:11:a3:22:70:6f:fa:3c: 5e:95:c4:22:74:2e:7e:c5:a8:9a:87:dc:63:4e:da:3b:cd:29: 0a:b9:f9:c1:37:e4:25:45:6e:08:40:71:00:49:43:b0:d2:70: 4a:63:00:1c:69:27:64:82:27:72:9e:bd:72:c5:01:33:e6:aa: e8:73:b8:61:dc:79:dd:e4:79:b4:81:1c:f5:7f:19:d4:85:90: c5:6c:5e:17:93:4c:b9:aa:35:e6:0a:c5:13:54:c6:09:70:d6: 9f:a2:12:91:1d:7c:a4:eb:bd:9d:d5:36:72:4b:4e:7e:e3:7e: fe:90:d3:50:85:86:9a:a0:0b:e5:bb:6c:46:dc:87:bb:60:21: 0d:51:05:72:0f:66:2d:f8:9e:45:ac:52:1d:f3:ff:01:8b:5e: af:08:3d:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6rrJCnNBnR8lYV1EB+xPaHF0ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNTEyMDQxNDI3MjVaFw0yNTEyMDcyMzIyMjVaMDMxMTAvBgNV BAMTKDI4RjM5QzVCQ0YxMjdFNzlDRjZBOTE2QTNBMkRFREY1OTg1MkRDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZFXQFfYlU5uQH5hVKfD1UYZh F0QSaVXAeIpf6Eq0rK5EYCzYjzUWD4bS5bukVWHBem+8g8ntHJYtiVwB8WTOs1z8 FvdBCHIJc2F5z9cWWNa/5zKelR4+WT6YVQut/HofNbhyOSUoRYDkbi6wqForFfL2 +K9f6SCMQ8jERa/sCZh3sLFrlpjDPbviVyDuHXevlxn9EZDxo9tbp/1tNuzUv64u /YvmnaJtV9pDu2Gq0STd5pAevcCyd8TruIEsdSOwgJrg/oIlYkE0BtaN9LdHj3aA /hJmWYZYPQdcL6rv2lqHnhxY0kpOxnUsXN/usi9pd1xGutODdRbLSOGYyqUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPOcW88SfnnPapFqOi3t9ZhS3IQwHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNE QkI0OTNCNUQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKc9wQqAkkukDOpaW6TzA7JYjrlpsb+KrlB yeU5uM6ljqdAfcRTwkOnrwskDDsAtBC2IgjhHn6zpRpfV7W9wUtCfpENUiC2fe9F niRJrCoBYT1HrPliYfbhYmNlznJ3J0mnpmjlEaMicG/6PF6VxCJ0Ln7FqJqH3GNO 2jvNKQq5+cE35CVFbghAcQBJQ7DScEpjABxpJ2SCJ3KevXLFATPmquhzuGHced3k ebSBHPV/GdSFkMVsXheTTLmqNeYKxRNUxglw1p+iEpEdfKTrvZ3VNnJLTn7jfv6Q 01CFhpqgC+W7bEbch7tgIQ1RBXIPZi34nkWsUh3z/wGLXq8IPR0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:45 2025 by rpki-client