This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft File: 6189E4F67BE53DF65282F8E1BB63165CCA784862.mft (raw, json) Hash identifier: SUZhi6XD4ccxffujnPv93VBsM7U28XHpEAZBRQedEWM= Subject key identifier: 76:FC:77:B0:F1:7F:57:92:BC:47:57:37:FF:D1:84:56:B1:A2:08:07 Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Certificate serial: 67B8DA2AF6B39635ED7F8F088BD5E040B0AF53A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft Manifest number: 01A7 Signing time: Sun 21 Dec 2025 12:42:24 +0000 Manifest this update: Sun 21 Dec 2025 12:37:24 +0000 Manifest next update: Wed 24 Dec 2025 21:39:24 +0000 Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: TA4sXIkX/1vgSRuW9l2sSfoKt1o5FCsmy++oilBd+h0=) 2: 6189E4F67BE53DF65282F8E1BB63165CCA784862.crl (hash: UGgQZuE7ujkWB9c6V35hDSm4SACbn0VX3vMvredh/sI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b8:da:2a:f6:b3:96:35:ed:7f:8f:08:8b:d5:e0:40:b0:af:53:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Validity Not Before: Dec 21 12:37:24 2025 GMT Not After : Dec 24 21:39:24 2025 GMT Subject: CN=76FC77B0F17F5792BC475737FFD18456B1A20807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:c6:96:fe:90:a1:15:48:93:37:0e:fe:bc: bb:29:b2:39:c1:5f:1d:59:f6:64:f6:88:65:5a:e1: 44:76:f7:db:4c:e7:31:7a:a5:07:f6:58:e2:82:eb: 10:93:22:68:c4:9a:b0:c3:69:8d:31:72:9d:47:c6: ea:61:51:a8:0e:b1:fb:9a:ba:98:66:ad:7d:58:e6: 1b:ad:25:8d:f2:ef:b5:fc:c8:ec:a6:2e:b9:a8:2e: 2d:79:01:28:07:21:31:2d:c0:94:6d:83:5f:53:b1: 39:c6:33:02:59:64:19:c3:6f:e8:d7:c7:3a:0c:4e: 2d:cd:17:2c:06:81:63:db:6b:cd:2b:94:dd:d1:e9: fc:5c:45:1a:78:2a:71:8c:41:8d:a4:95:85:17:ea: 9e:51:74:d9:4e:58:5f:55:ca:66:64:07:9e:6f:6e: 57:77:3a:e2:38:72:21:a1:f0:d0:db:af:3d:b7:dd: 15:ae:68:e3:18:59:fb:1e:58:0c:0f:fb:76:d7:2f: f9:16:d4:9b:27:b6:b7:10:66:5a:53:8e:49:8f:d5: fe:ee:3b:5f:5f:91:46:cd:6b:e0:b0:3d:cf:0c:9c: 13:a1:3f:12:26:90:46:54:31:ab:fd:de:d7:0e:09: 10:ec:7c:d7:36:90:5c:ed:be:e8:ba:ee:8b:7d:d5: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FC:77:B0:F1:7F:57:92:BC:47:57:37:FF:D1:84:56:B1:A2:08:07 X509v3 Authority Key Identifier: keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6c:58:18:68:45:01:08:41:8d:6f:86:2c:17:66:4f:54:14: 0e:a7:97:e6:3f:a9:85:ba:54:30:67:c2:d5:2b:0c:34:3a:45: 21:4c:df:fe:73:da:b5:01:7c:c7:b9:b9:97:46:5b:9f:b8:c1: 9f:7f:b9:fd:42:f1:33:95:91:9e:ca:8c:fd:05:b5:18:00:42: 3e:ca:79:3f:7d:1d:69:52:de:bd:55:7d:6f:7c:a7:a9:6d:fc: 92:38:70:3e:f4:d9:28:d6:3d:25:59:9a:28:87:f5:e2:35:97: 55:f6:90:fb:2e:42:6c:ff:3f:26:b8:3c:18:99:89:1c:23:a6: 1f:85:1b:11:82:e6:8e:5b:d0:2c:3c:62:02:43:e2:40:d0:17: 80:b1:4a:3e:b9:53:16:a6:4b:81:ed:25:96:e5:6b:f1:e2:70: f2:cf:df:cf:12:f6:c9:88:e1:c3:46:a0:2b:a2:73:b3:c2:d5: ab:c4:9a:fa:4a:20:8e:02:d9:f0:4c:73:4b:09:fe:0a:69:55: 86:a5:e1:83:34:de:a4:02:ef:88:1e:f9:9f:bf:bb:76:3b:76: cc:e2:ae:90:15:d0:a0:e0:83:e7:71:f4:fa:81:1c:61:2d:bc: eb:b1:97:84:cb:2e:19:02:5c:b9:4d:db:06:11:17:a8:8d:be: d3:18:3d:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7jaKvazljXtf48Ii9XgQLCvU6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND QTc4NDg2MjAeFw0yNTEyMjExMjM3MjRaFw0yNTEyMjQyMTM5MjRaMDMxMTAvBgNV BAMTKDc2RkM3N0IwRjE3RjU3OTJCQzQ3NTczN0ZGRDE4NDU2QjFBMjA4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mcaW/pChFUiTNw7+vLspsjnB Xx1Z9mT2iGVa4UR299tM5zF6pQf2WOKC6xCTImjEmrDDaY0xcp1HxuphUagOsfua uphmrX1Y5hutJY3y77X8yOymLrmoLi15ASgHITEtwJRtg19TsTnGMwJZZBnDb+jX xzoMTi3NFywGgWPba80rlN3R6fxcRRp4KnGMQY2klYUX6p5RdNlOWF9VymZkB55v bld3OuI4ciGh8NDbrz233RWuaOMYWfseWAwP+3bXL/kW1JsntrcQZlpTjkmP1f7u O19fkUbNa+CwPc8MnBOhPxImkEZUMav93tcOCRDsfNc2kFztvui67ot91ZXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdvx3sPF/V5K8R1c3/9GEVrGiCAcwHwYDVR0j BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4 NDg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2 NUNDQTc4NDg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9sWBhoRQEIQY1vhiwXZk9UFA6nl+Y/qYW6 VDBnwtUrDDQ6RSFM3/5z2rUBfMe5uZdGW5+4wZ9/uf1C8TOVkZ7KjP0FtRgAQj7K eT99HWlS3r1VfW98p6lt/JI4cD702SjWPSVZmiiH9eI1l1X2kPsuQmz/Pya4PBiZ iRwjph+FGxGC5o5b0Cw8YgJD4kDQF4CxSj65UxamS4HtJZbla/HicPLP388S9smI 4cNGoCuic7PC1avEmvpKII4C2fBMc0sJ/gppVYal4YM03qQC74ge+Z+/u3Y7dszi rpAV0KDgg+dx9PqBHGEtvOuxl4TLLhkCXLlN2wYRF6iNvtMYPU4= -----END CERTIFICATE-----Generated at Mon Dec 22 03:26:40 2025 by rpki-client