This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: x6PkeE8KP729x9Z/H7TEcbZ9OG7BFXqC/h4QxQf1lO4= Subject key identifier: 73:8C:F2:65:52:48:FC:F4:34:A1:51:8B:00:22:69:EE:41:EB:4A:59 Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 17E133FFD68D96EA88DA3AAA77E823CC953C5D24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 01E5 Signing time: Fri 05 Dec 2025 04:41:31 +0000 Manifest this update: Fri 05 Dec 2025 04:36:31 +0000 Manifest next update: Mon 08 Dec 2025 08:54:31 +0000 Files and hashes: 1: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: kzjcvYwCXGkIsUyddAkmd3nP7yaR6A4/IXGUMfs55yM=) 2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e1:33:ff:d6:8d:96:ea:88:da:3a:aa:77:e8:23:cc:95:3c:5d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Dec 5 04:36:31 2025 GMT Not After : Dec 8 08:54:31 2025 GMT Subject: CN=738CF2655248FCF434A1518B002269EE41EB4A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:39:4c:c9:b5:bc:5c:c8:c6:24:88:ba:da: ac:fe:7c:3a:24:ed:4a:95:f5:99:b8:b7:3e:48:c2: 3f:cc:50:40:32:68:0c:be:87:62:95:c7:c3:0a:5b: a2:e0:fb:83:f1:08:59:49:dd:5e:6e:c4:b4:80:f6: ed:8a:0b:26:26:40:ab:01:26:fb:a3:3e:bf:5e:1f: 43:00:a6:03:9a:95:23:ff:dc:da:c7:ed:06:b0:8a: 0f:bf:3c:d1:0c:b5:b0:d9:9b:98:61:5d:5d:b6:10: 73:40:dd:97:f8:1a:2c:ee:40:74:0b:70:1b:32:aa: 16:9a:dd:fb:fd:e1:d7:ac:a8:3e:2a:04:32:c9:c4: b4:c7:35:a0:61:da:94:57:04:cf:0c:00:13:28:db: 41:eb:99:a7:1c:7a:b7:19:1a:48:d4:ee:5d:67:af: 4c:f6:4f:51:83:44:57:7f:c6:ea:c3:e2:1d:e9:04: 78:52:0f:31:1b:9d:d7:1f:77:77:b5:e2:53:67:a9: 39:c0:ff:2c:fe:b1:7e:93:d2:d0:05:d4:14:6c:9a: 79:85:a1:8b:0b:41:67:a1:39:c1:ce:c4:b8:77:5e: 68:5e:92:f0:84:76:4e:53:bf:4d:8e:7a:6b:63:1a: cb:6d:65:52:dd:cc:bb:59:22:4a:e5:d3:36:a0:a1: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8C:F2:65:52:48:FC:F4:34:A1:51:8B:00:22:69:EE:41:EB:4A:59 X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:a9:aa:5b:27:ef:19:44:8f:63:20:b8:c9:db:14:7c:23:72: 3a:71:d3:97:0f:0e:f2:7c:c4:9d:7f:30:e8:1b:13:c0:e1:34: a8:5a:2d:65:0a:2d:e7:48:0a:d3:c6:09:51:73:2c:95:6a:ab: d8:6e:37:90:a7:fe:8e:50:d3:19:b3:b9:0b:e0:f5:bf:92:c1: 65:27:db:98:52:20:de:60:1c:b3:7a:9d:34:34:60:13:27:88: 63:4b:86:a5:fa:50:a3:ad:0f:1c:07:6d:44:fa:1b:ae:7c:b2: d4:25:8d:79:ad:c0:4c:3d:c6:1e:0e:66:7d:2a:4b:8f:b6:85: c9:3f:0c:64:15:a7:60:6f:28:fd:5b:04:29:79:8b:5f:62:5f: 88:d1:a0:23:c2:f6:58:62:26:7e:fe:d5:63:41:41:ad:2b:4c: c9:86:d0:16:3e:95:6b:f4:09:0e:f1:fd:14:ec:94:4a:22:b5: bb:f6:48:28:b9:64:3a:89:0a:90:1e:fa:1e:07:dc:97:56:05: f1:67:04:67:c7:be:d2:92:ff:fd:60:f1:6a:67:e4:79:0d:47: 80:eb:cd:37:b9:26:df:1a:7f:46:f4:6b:c6:39:fe:73:0c:eb: 51:9f:1c:e5:ab:ce:ce:46:65:81:da:71:b6:cd:10:3c:a5:44: 92:dd:76:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+Ez/9aNluqI2jqqd+gjzJU8XSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNTEyMDUwNDM2MzFaFw0yNTEyMDgwODU0MzFaMDMxMTAvBgNV BAMTKDczOENGMjY1NTI0OEZDRjQzNEExNTE4QjAwMjI2OUVFNDFFQjRBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnjlMybW8XMjGJIi62qz+fDok 7UqV9Zm4tz5Iwj/MUEAyaAy+h2KVx8MKW6Lg+4PxCFlJ3V5uxLSA9u2KCyYmQKsB JvujPr9eH0MApgOalSP/3NrH7Qawig+/PNEMtbDZm5hhXV22EHNA3Zf4GizuQHQL cBsyqhaa3fv94desqD4qBDLJxLTHNaBh2pRXBM8MABMo20HrmaccercZGkjU7l1n r0z2T1GDRFd/xurD4h3pBHhSDzEbndcfd3e14lNnqTnA/yz+sX6T0tAF1BRsmnmF oYsLQWehOcHOxLh3XmhekvCEdk5Tv02OemtjGsttZVLdzLtZIkrl0zagoajfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc4zyZVJI/PQ0oVGLACJp7kHrSlkwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMepqlsn7xlEj2MguMnbFHwjcjpx05cPDvJ8 xJ1/MOgbE8DhNKhaLWUKLedICtPGCVFzLJVqq9huN5Cn/o5Q0xmzuQvg9b+SwWUn 25hSIN5gHLN6nTQ0YBMniGNLhqX6UKOtDxwHbUT6G658stQljXmtwEw9xh4OZn0q S4+2hck/DGQVp2BvKP1bBCl5i19iX4jRoCPC9lhiJn7+1WNBQa0rTMmG0BY+lWv0 CQ7x/RTslEoitbv2SCi5ZDqJCpAe+h4H3JdWBfFnBGfHvtKS//1g8Wpn5HkNR4Dr zTe5Jt8af0b0a8Y5/nMM61GfHOWrzs5GZYHacbbNEDylRJLddro= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:03 2025 by rpki-client