This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: jKW+ZL4+jcNjlVMzuTNDdJqDhOEYMEWZch5EHDiyvnU= Subject key identifier: ED:8B:6C:A9:BD:22:B0:AC:8C:21:8A:18:53:AB:10:14:B4:CD:11:5E Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 17FA25B2CA9AB4FA2F9C7D2CB59C67F79B097B0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: CF Signing time: Sat 06 Dec 2025 15:41:11 +0000 Manifest this update: Sat 06 Dec 2025 15:36:11 +0000 Manifest next update: Tue 09 Dec 2025 21:52:11 +0000 Files and hashes: 1: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: /4U3gr9tlxLDwi/mtM6bK5vKPeJQ0lftgDlXRNruz/g=) 2: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: Ub40BPe4KMOTxitaoAUpxbpNc0bfpI5fDNOKKNlDeX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fa:25:b2:ca:9a:b4:fa:2f:9c:7d:2c:b5:9c:67:f7:9b:09:7b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Dec 6 15:36:11 2025 GMT Not After : Dec 9 21:52:11 2025 GMT Subject: CN=ED8B6CA9BD22B0AC8C218A1853AB1014B4CD115E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:95:43:c0:fd:08:6c:4d:27:87:20:93:c1: 79:ac:1c:e2:3b:b1:d9:e6:a4:28:9c:d6:89:ce:ae: d4:56:34:9d:d4:62:bc:f5:52:25:2c:51:fa:2a:dc: bc:98:ff:73:d7:5a:a4:1f:32:c2:eb:58:a7:07:54: 19:4a:d1:68:0c:7b:5d:af:55:76:81:38:cd:f0:f0: 9e:43:24:53:0c:92:b4:fe:12:6a:a1:aa:ed:d3:8a: a5:e5:cb:bf:a5:af:c7:70:4a:8e:45:c1:34:ec:b7: e2:4e:49:07:30:44:7d:1e:b0:5e:20:41:c8:72:ba: b2:0c:a9:c1:2a:38:1a:96:81:13:6d:60:a5:9b:47: f9:12:07:a5:aa:44:34:26:17:0d:86:5c:a3:ca:1d: f1:bc:1c:ab:ca:80:59:0d:f6:6e:7d:7a:46:d4:fe: f9:57:3a:4d:79:e5:e7:b6:a2:2c:66:b5:77:a6:ab: ae:2e:48:09:7d:ee:89:16:f1:45:3e:7c:66:51:0a: 34:fc:7a:c0:78:50:7c:b1:54:6b:b4:f2:9d:18:f4: a1:3f:c0:0c:03:fd:71:7a:43:99:46:88:cb:e2:ab: 6c:d7:a5:35:76:75:cf:18:07:be:d3:86:ca:12:65: b2:8e:7d:71:7e:84:e6:f5:a1:a9:b7:34:e8:0a:8f: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8B:6C:A9:BD:22:B0:AC:8C:21:8A:18:53:AB:10:14:B4:CD:11:5E X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f5:d6:9a:c6:eb:80:7e:c1:04:32:c5:ff:6b:c6:6b:42:0a: c5:bf:6f:f4:2e:c2:18:aa:98:97:ac:75:b6:29:dc:a6:58:bf: 30:aa:bd:f5:7f:59:e6:5b:f1:65:47:22:7f:7b:2b:1e:58:8f: 45:7f:2f:a4:05:f7:a5:93:0c:60:6b:46:df:54:86:ef:d1:53: a6:d2:5b:b6:96:46:24:56:44:bb:ad:a6:2c:36:a0:26:0a:a7: 6d:c6:0d:9c:49:2d:27:65:00:ed:cc:85:aa:cb:9a:bb:91:67: 2f:c0:0d:7f:4e:01:d7:5f:8e:07:2e:f5:33:53:f6:e9:c0:1b: e4:80:a6:d7:95:41:ca:f3:ec:69:09:17:99:24:94:75:b9:e6: aa:08:4a:b8:86:51:d5:ea:d9:c1:a6:d0:d6:1a:ff:ac:e2:a0: 32:68:e3:c7:8c:a1:c5:2c:58:fe:96:c8:f1:69:48:24:8f:4d: d2:25:16:6b:c7:0d:18:b4:07:bd:70:4b:b4:1d:4e:ce:cd:05: a6:db:4d:a9:5e:1b:e7:3e:90:3c:44:23:ba:b6:75:c9:fd:0c: 0e:89:17:f5:a7:03:b8:3a:d5:93:f6:f7:ee:56:8b:39:2c:d8: b8:c2:73:f5:80:1e:d6:26:64:e1:cd:9e:25:c9:55:6c:60:c5: e9:fd:ad:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/olssqatPovnH0stZxn95sJewswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTEyMDYxNTM2MTFaFw0yNTEyMDkyMTUyMTFaMDMxMTAvBgNV BAMTKEVEOEI2Q0E5QkQyMkIwQUM4QzIxOEExODUzQUIxMDE0QjRDRDExNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKY5VDwP0IbE0nhyCTwXmsHOI7 sdnmpCic1onOrtRWNJ3UYrz1UiUsUfoq3LyY/3PXWqQfMsLrWKcHVBlK0WgMe12v VXaBOM3w8J5DJFMMkrT+Emqhqu3TiqXly7+lr8dwSo5FwTTst+JOSQcwRH0esF4g QchyurIMqcEqOBqWgRNtYKWbR/kSB6WqRDQmFw2GXKPKHfG8HKvKgFkN9m59ekbU /vlXOk155ee2oixmtXemq64uSAl97okW8UU+fGZRCjT8esB4UHyxVGu08p0Y9KE/ wAwD/XF6Q5lGiMviq2zXpTV2dc8YB77ThsoSZbKOfXF+hOb1oam3NOgKj9KdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Ytsqb0isKyMIYoYU6sQFLTNEV4wHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF711prG64B+wQQyxf9rxmtCCsW/b/Quwhiq mJesdbYp3KZYvzCqvfV/WeZb8WVHIn97Kx5Yj0V/L6QF96WTDGBrRt9Uhu/RU6bS W7aWRiRWRLutpiw2oCYKp23GDZxJLSdlAO3MharLmruRZy/ADX9OAddfjgcu9TNT 9unAG+SApteVQcrz7GkJF5kklHW55qoISriGUdXq2cGm0NYa/6zioDJo48eMocUs WP6WyPFpSCSPTdIlFmvHDRi0B71wS7QdTs7NBabbTaleG+c+kDxEI7q2dcn9DA6J F/WnA7g61ZP29+5Wizks2LjCc/WAHtYmZOHNniXJVWxgxen9rb8= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:18 2025 by rpki-client