This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json)
Hash identifier: cbzV2w5bmgKO6fc7Afrd6meXN78CHkhNyfA1e2gux34=
Subject key identifier: 42:22:A1:E5:F2:C6:66:8E:79:88:0D:49:82:6C:AE:DA:4A:F1:0E:19
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial: 053157948277B0DCF4DDEC4CEAD5651DF39825C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
Manifest number: 0533
Signing time: Tue 16 Dec 2025 04:20:55 +0000
Manifest this update: Tue 16 Dec 2025 04:15:55 +0000
Manifest next update: Fri 19 Dec 2025 10:49:55 +0000
Files and hashes: 1: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=)
2: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: So2nOlSSzUaMKkEBBnhNYamU0ElW07kiXuEs3QCMI5U=)
3: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=)
4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=)
5: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 10:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:31:57:94:82:77:b0:dc:f4:dd:ec:4c:ea:d5:65:1d:f3:98:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Validity
Not Before: Dec 16 04:15:55 2025 GMT
Not After : Dec 19 10:49:55 2025 GMT
Subject: CN=4222A1E5F2C6668E79880D49826CAEDA4AF10E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:18:b9:34:38:80:81:3f:36:87:25:ee:22:
db:9c:2a:e7:01:2f:36:24:43:b9:b9:65:0b:40:4a:
83:7e:30:0b:20:02:2b:5a:6b:b9:30:8c:e3:58:bd:
00:26:bd:a4:d2:a7:95:ca:04:92:41:71:b8:45:40:
2a:01:28:bf:48:25:43:bc:c2:75:2d:26:d2:50:e8:
b4:71:fd:87:c1:5d:16:c5:ce:fe:8f:4c:77:d6:b2:
08:10:44:e2:ce:2c:30:7a:aa:8e:db:ce:7d:01:ec:
75:84:89:88:c0:d4:7b:77:a6:ce:d4:ae:da:f8:9a:
65:87:ad:14:ef:8d:4d:c7:e6:3e:04:33:8e:4e:3f:
28:92:2a:3f:73:ac:a0:00:70:dd:08:fb:db:85:b6:
46:1d:4d:ec:6d:a1:59:18:e4:47:de:73:34:9f:67:
cf:81:6e:81:9b:6e:e2:21:31:bd:e6:99:f6:13:68:
d1:76:ff:be:11:21:8d:8d:6e:d0:75:67:ca:be:8c:
ee:10:d1:fa:38:87:20:d8:49:0f:f5:18:1e:b0:cc:
c3:3b:1c:0d:bf:31:f8:3f:dd:ab:67:69:f8:31:ab:
f6:f1:fb:1b:12:7a:73:7b:c4:ea:d7:68:4b:58:96:
1c:d0:14:1a:9b:61:50:0e:ca:43:9e:55:99:4c:af:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:22:A1:E5:F2:C6:66:8E:79:88:0D:49:82:6C:AE:DA:4A:F1:0E:19
X509v3 Authority Key Identifier:
keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0b:c7:98:d3:06:6e:ee:ad:9a:29:a1:8c:ef:5f:eb:03:16:
50:ac:f0:e8:95:a5:dd:95:b4:75:4b:59:f2:a3:34:0e:a2:cf:
42:72:f7:d0:6d:90:04:91:74:ea:b2:e8:3e:ca:cc:56:12:ac:
b0:78:5a:26:52:e1:06:75:3b:ba:24:bb:dd:43:c6:8e:82:9c:
be:ed:93:6e:b7:db:d8:64:0d:2f:60:b0:1d:c3:be:de:db:97:
b8:77:11:47:0e:a7:63:e1:76:43:67:e3:9e:cf:9d:b6:70:da:
0d:78:95:cd:f5:e6:f2:b7:0e:9a:69:0b:e4:67:60:e8:5d:2f:
d3:ab:1e:32:d5:f8:e9:eb:ac:b1:16:e0:18:20:3b:1c:64:01:
8c:ce:9b:0f:66:5a:30:de:59:de:21:fb:50:0e:4d:db:69:bb:
0f:0b:a4:50:20:8f:52:b9:87:43:03:8a:58:2c:0f:9a:9a:01:
fe:4b:c8:05:61:6e:ed:73:b3:41:54:1d:2a:35:31:17:29:8b:
04:08:e7:ff:ee:e2:12:25:56:ed:e2:9d:db:cb:91:a5:e0:3d:
67:f3:e9:95:78:fd:8b:ee:c4:92:6d:e0:8e:41:f2:46:fd:de:
93:dc:7b:bb:d2:4e:98:26:0f:a9:be:4d:65:3e:3b:b4:84:97:
22:94:47:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBTFXlIJ3sNz03exM6tVlHfOYJcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3
MUQyRDEyMTAeFw0yNTEyMTYwNDE1NTVaFw0yNTEyMTkxMDQ5NTVaMDMxMTAvBgNV
BAMTKDQyMjJBMUU1RjJDNjY2OEU3OTg4MEQ0OTgyNkNBRURBNEFGMTBFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNxi5NDiAgT82hyXuItucKucB
LzYkQ7m5ZQtASoN+MAsgAitaa7kwjONYvQAmvaTSp5XKBJJBcbhFQCoBKL9IJUO8
wnUtJtJQ6LRx/YfBXRbFzv6PTHfWsggQROLOLDB6qo7bzn0B7HWEiYjA1Ht3ps7U
rtr4mmWHrRTvjU3H5j4EM45OPyiSKj9zrKAAcN0I+9uFtkYdTextoVkY5EfeczSf
Z8+BboGbbuIhMb3mmfYTaNF2/74RIY2NbtB1Z8q+jO4Q0fo4hyDYSQ/1GB6wzMM7
HA2/Mfg/3atnafgxq/bx+xsSenN7xOrXaEtYlhzQFBqbYVAOykOeVZlMr2JtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQiKh5fLGZo55iA1Jgmyu2krxDhkwHwYDVR0j
BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB
MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy
RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh
ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB
RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMELx5jTBm7urZopoYzvX+sDFlCs8OiVpd2V
tHVLWfKjNA6iz0Jy99BtkASRdOqy6D7KzFYSrLB4WiZS4QZ1O7oku91Dxo6CnL7t
k26329hkDS9gsB3Dvt7bl7h3EUcOp2PhdkNn457PnbZw2g14lc315vK3DpppC+Rn
YOhdL9OrHjLV+OnrrLEW4BggOxxkAYzOmw9mWjDeWd4h+1AOTdtpuw8LpFAgj1K5
h0MDilgsD5qaAf5LyAVhbu1zs0FUHSo1MRcpiwQI5//u4hIlVu3indvLkaXgPWfz
6ZV4/YvuxJJt4I5B8kb93pPce7vSTpgmD6m+TWU+O7SElyKUR84=
-----END CERTIFICATE-----
Generated at Wed Dec 17 13:44:16 2025 by rpki-client