This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: f1szdIwFkf0bYCau695iMZj9b97gcgrNmlO2cbfY514= Subject key identifier: F7:95:07:85:A8:3E:A0:B2:B0:EA:EE:2E:E4:3C:F8:EC:F0:BA:43:80 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 318BF98D5996E6F37C0392F313495094BD282A72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: A1 Signing time: Fri 05 Dec 2025 18:22:24 +0000 Manifest this update: Fri 05 Dec 2025 18:17:24 +0000 Manifest next update: Tue 09 Dec 2025 03:18:24 +0000 Files and hashes: 1: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: qZQ4FJYs46n/+hOc10zmPRfwJHK6+NPt/Sqykb6up2s=) 2: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: qHrXMqQTucTeofIinh+6AXijbtXSBcDb8eithAS0vbA=) 3: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: jZM60p+ihsOsnG/o5i9hHgFmzFPD3WS1aTcQqe2yPLg=) 4: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: H33ymI9ju2NfQ2pOTJN+8hPqJ6LyJFP7aCyIqWIccfg=) 5: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: 2bo14asIeMFuulQFAuyOMWvwruZszgFyWNm1gWivGps=) 6: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: v84hAZIM+aP085rz1zJvt2LXyaLhNXbJ1TUWIVfvkek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8b:f9:8d:59:96:e6:f3:7c:03:92:f3:13:49:50:94:bd:28:2a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Dec 5 18:17:24 2025 GMT Not After : Dec 9 03:18:24 2025 GMT Subject: CN=F7950785A83EA0B2B0EAEE2EE43CF8ECF0BA4380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:a1:3a:53:ef:97:31:7d:f6:6d:c1:66:6e: 2e:aa:14:fc:d9:ba:9f:c1:d8:2e:35:26:e3:b5:ca: 63:3f:8c:7e:ab:28:76:eb:0f:dd:22:ed:05:6c:f0: d4:c3:cd:f1:2e:34:fe:37:cc:93:84:c5:26:e8:35: 4f:ad:71:da:82:71:6f:c9:af:5a:0a:06:06:0b:c4: 8b:26:12:b3:29:84:d7:df:d2:b8:1c:ca:91:ea:08: 1f:d4:ac:ca:54:2c:a3:e9:c4:88:8d:09:25:39:a5: ba:3c:90:d5:50:51:fb:3e:b1:fa:8e:72:f0:71:56: f8:d2:2f:8c:f6:d0:07:29:76:55:b6:6f:a8:62:3d: 93:36:52:e3:b8:02:ac:e2:be:c5:e8:42:a2:7d:a8: f2:af:2d:9b:84:cf:5c:fa:b0:ce:1e:6e:60:b9:c8: 4e:cf:04:a5:3d:0a:a5:47:35:66:c4:30:ef:40:a2: df:fc:b4:70:24:61:0d:da:39:49:25:65:5e:07:95: b5:8f:70:b6:fc:44:93:c1:77:9b:9c:a2:f6:9f:c4: 0b:6d:7c:18:99:cf:84:4b:d9:55:75:8a:e1:9a:5d: 0d:52:5d:21:e0:72:00:f7:93:7c:33:5d:9b:2d:87: f9:f8:6c:8a:2c:bf:34:ba:96:ee:e1:ca:35:0c:92: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:95:07:85:A8:3E:A0:B2:B0:EA:EE:2E:E4:3C:F8:EC:F0:BA:43:80 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9a:ae:61:af:5a:93:d3:3b:cb:f0:e3:c6:0c:d8:bd:2f:9b: f9:43:f3:01:f5:5f:dc:72:87:e0:2a:45:ba:0c:aa:fa:36:85: 80:e4:65:15:6f:e5:27:f1:92:83:37:ed:5f:cb:8d:5c:ee:de: c8:da:fd:31:91:83:28:1f:b4:24:9e:3f:b6:06:8f:49:04:a4: b4:d7:4e:ee:9b:0b:3d:89:8f:5a:d3:89:73:05:da:54:cb:03: 6d:d9:71:10:02:e5:c7:fd:14:b4:2e:b0:50:a1:0e:37:9c:96: 5c:4f:be:be:3d:7e:9e:43:bf:e4:0a:b0:ca:d3:c9:70:9f:e5: 1f:78:41:a2:0c:08:b2:dd:b5:89:2d:1f:10:d6:9f:6d:d7:ff: c8:42:a0:7c:3e:38:be:da:6b:eb:c9:19:44:2e:2b:45:d5:14: 0a:b2:73:0d:78:d5:89:e8:b8:99:9a:3d:7b:39:ee:3b:d4:41: a0:b7:38:0d:37:15:21:d9:3b:34:6b:ee:72:9f:fb:9d:d1:63: 88:15:24:79:19:2c:56:95:e0:d2:56:2e:7a:2b:eb:73:d1:b7: 23:af:ed:e1:23:f4:52:b8:26:70:b5:84:ff:a1:5d:49:e0:7c: 5b:9c:89:3f:b2:71:b0:70:4d:8f:2b:c3:00:79:b6:98:75:2e: 83:bd:7c:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYv5jVmW5vN8A5LzE0lQlL0oKnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTEyMDUxODE3MjRaFw0yNTEyMDkwMzE4MjRaMDMxMTAvBgNV BAMTKEY3OTUwNzg1QTgzRUEwQjJCMEVBRUUyRUU0M0NGOEVDRjBCQTQzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNqE6U++XMX32bcFmbi6qFPzZ up/B2C41JuO1ymM/jH6rKHbrD90i7QVs8NTDzfEuNP43zJOExSboNU+tcdqCcW/J r1oKBgYLxIsmErMphNff0rgcypHqCB/UrMpULKPpxIiNCSU5pbo8kNVQUfs+sfqO cvBxVvjSL4z20AcpdlW2b6hiPZM2UuO4AqzivsXoQqJ9qPKvLZuEz1z6sM4ebmC5 yE7PBKU9CqVHNWbEMO9Aot/8tHAkYQ3aOUklZV4HlbWPcLb8RJPBd5ucovafxAtt fBiZz4RL2VV1iuGaXQ1SXSHgcgD3k3wzXZsth/n4bIosvzS6lu7hyjUMkqdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU95UHhag+oLKw6u4u5Dz47PC6Q4AwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGarmGvWpPTO8vw48YM2L0vm/lD8wH1X9xy h+AqRboMqvo2hYDkZRVv5SfxkoM37V/LjVzu3sja/TGRgygftCSeP7YGj0kEpLTX Tu6bCz2Jj1rTiXMF2lTLA23ZcRAC5cf9FLQusFChDjecllxPvr49fp5Dv+QKsMrT yXCf5R94QaIMCLLdtYktHxDWn23X/8hCoHw+OL7aa+vJGUQuK0XVFAqycw141Yno uJmaPXs57jvUQaC3OA03FSHZOzRr7nKf+53RY4gVJHkZLFaV4NJWLnor63PRtyOv 7eEj9FK4JnC1hP+hXUngfFuciT+ycbBwTY8rwwB5tph1LoO9fDI= -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:41 2025 by rpki-client