This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json)
Hash identifier: 6zGIzv3zfCEz6R33rOO6a+pKEJZFR3hxZp1OZCHBLpM=
Subject key identifier: E6:9D:19:21:17:47:B0:09:61:DB:F9:83:82:86:D0:21:FB:05:CD:D0
Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB
Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
Certificate serial: 659D9D105F54A69261E609B81D8699078F5F5CEE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
Manifest number: 03FB
Signing time: Fri 05 Dec 2025 13:01:50 +0000
Manifest this update: Fri 05 Dec 2025 12:56:50 +0000
Manifest next update: Mon 08 Dec 2025 23:11:50 +0000
Files and hashes: 1: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=)
2: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=)
3: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=)
4: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: ny0PMq+WRDd5TPmGtBcNPDyChtDoy1Bj6SA+9CCQWFQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl
rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 23:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9d:9d:10:5f:54:a6:92:61:e6:09:b8:1d:86:99:07:8f:5f:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
Validity
Not Before: Dec 5 12:56:50 2025 GMT
Not After : Dec 8 23:11:50 2025 GMT
Subject: CN=E69D19211747B00961DBF9838286D021FB05CDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:ca:db:01:c8:c6:48:97:2c:0c:76:5a:d2:
06:3e:b1:51:1c:37:a9:d1:c6:5a:ab:4f:a5:9a:cb:
e3:e1:80:6c:c0:01:c9:0f:4f:96:de:83:42:37:07:
3e:e9:61:3c:b1:20:3f:83:70:3b:6c:96:66:54:09:
52:d7:cd:97:0a:27:de:2c:24:17:2a:20:de:e7:79:
f8:16:58:46:9b:af:1c:f9:2e:32:4a:5a:80:9e:f7:
ab:cd:26:76:8b:cd:b8:5b:74:25:af:a5:a4:49:11:
c6:cd:42:1b:c9:25:a5:c7:26:e6:97:c9:8a:a1:f0:
c0:e3:d0:a1:42:a7:55:56:ec:58:ea:56:4c:ea:67:
da:ba:3b:4f:2f:6f:17:e5:43:45:d4:f6:16:da:bb:
0b:8b:06:e7:25:a5:c2:35:25:f8:d7:92:b0:bf:7c:
cf:7b:6c:31:9e:07:52:87:a9:07:0d:1c:66:ff:11:
36:e1:2e:fa:4e:80:48:c4:32:ba:b7:17:04:73:b9:
f1:78:dd:f2:24:67:18:28:ac:8e:bd:9c:ad:33:22:
30:8a:db:3c:fc:0a:64:90:43:cc:5e:a1:d7:bf:be:
df:f0:67:ad:da:e1:93:1d:b4:02:6b:12:14:cd:3c:
b8:e9:8a:e4:59:08:89:56:dc:72:cc:0f:4a:fb:fb:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:19:21:17:47:B0:09:61:DB:F9:83:82:86:D0:21:FB:05:CD:D0
X509v3 Authority Key Identifier:
keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8f:f5:62:82:a7:b4:21:dd:5d:4e:85:a8:1f:5d:18:7d:d5:
1d:18:06:32:e8:8f:87:ee:f5:6a:2b:20:53:b4:53:9c:77:fb:
e6:f1:09:d1:4b:a6:81:0a:9c:3c:22:fd:28:b8:b1:81:b7:b2:
49:ac:2a:52:8c:b8:46:fc:a5:c8:28:4d:07:6f:f6:ec:2c:0b:
70:6b:32:04:1c:c6:af:26:ed:19:5f:0d:db:64:f6:60:c2:b7:
0b:37:d0:f1:23:0c:28:ed:69:0c:3b:9f:ae:42:ef:e8:59:fd:
f6:19:40:13:f3:45:36:d8:63:e3:48:19:29:2a:5c:b4:19:ca:
c0:d6:e6:b3:b0:33:dd:59:fe:27:12:ea:c8:17:09:b3:41:a3:
23:49:64:77:41:a0:1f:7d:1a:69:77:cb:30:3e:b6:e9:b3:c9:
9c:16:de:2b:cb:3d:95:18:77:aa:46:2e:cc:cf:7e:80:0f:3b:
0f:18:6e:75:3d:04:f5:98:07:33:1b:5c:16:10:a6:03:30:32:
02:7c:12:bc:3a:9d:ec:e8:e8:b8:88:b4:19:8a:4a:54:7c:bd:
d7:be:c1:7f:b4:77:59:17:c8:e6:b3:b1:55:d1:6e:82:40:30:
12:50:fb:41:6b:7c:0f:0e:2a:0d:55:3a:96:8b:db:48:c8:aa:
b1:d1:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:01 2025 by rpki-client