This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft File: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json) Hash identifier: E1PvaCprbUBkCry71lZ3BIvO91tiQketTJeNQ/EsB/Y= Subject key identifier: 9F:F1:21:68:1B:9C:C9:A1:11:69:F6:63:EC:98:42:57:90:56:1D:E8 Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Certificate serial: 195B732966B148C5E296C3BAC15A2FA642788074 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft Manifest number: 01CD Signing time: Fri 05 Dec 2025 17:51:16 +0000 Manifest this update: Fri 05 Dec 2025 17:46:16 +0000 Manifest next update: Mon 08 Dec 2025 19:26:16 +0000 Files and hashes: 1: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 2T9anWJYGXV0eFwi77jhWK8yssFnyZlgHKcoPcMUt7I=) 2: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: xIS6sNK0UqeUJFxq14NuNTlsbhpsETkb9gDhOu1ONl8=) 3: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: GWXv/Jcvhsgx5xupvgCdstajkZkqV0dY8SAdabOvJ9g=) 4: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: +6C2B3CTc7jHlhP7dUiTrN2aCO/4goz3iGAeCivyaak=) 5: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: fqgPEiZyAb0hynbzck5IXEWLrXIgp6VsY2Pj0WiOvP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5b:73:29:66:b1:48:c5:e2:96:c3:ba:c1:5a:2f:a6:42:78:80:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Validity Not Before: Dec 5 17:46:16 2025 GMT Not After : Dec 8 19:26:16 2025 GMT Subject: CN=9FF121681B9CC9A11169F663EC98425790561DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:83:d8:f7:75:a0:1d:2f:66:f8:b0:6d:c4: b7:01:29:93:3c:5c:6c:96:56:35:93:4a:e9:86:9c: 12:b7:c2:35:4e:a4:b7:26:95:28:fb:7e:a3:13:79: 37:6c:dc:83:00:9c:9b:ac:71:08:5c:b3:e5:cd:0e: be:67:39:09:bd:23:a6:da:93:85:fa:c6:64:dd:3f: c6:1f:b5:cb:7a:7c:c3:f4:f6:17:19:42:ce:32:0a: 17:01:cc:14:b5:6a:20:49:84:96:fc:bb:80:61:f7: 8e:40:cd:3a:76:c5:b3:95:3a:17:2e:c7:da:4e:e9: 4b:8a:68:c3:38:a0:16:79:d7:95:b5:14:d2:90:fd: 5e:0f:b4:af:56:6a:0c:7b:a5:32:f8:51:90:aa:c6: 1b:be:cb:4a:56:7e:10:9e:03:a0:fa:a5:12:24:d8: c5:f3:d6:d8:4e:63:fc:70:19:70:1f:db:a7:42:e6: d5:2c:fc:18:33:37:8f:ed:42:c0:fd:dc:d7:0d:71: 23:3f:29:6c:41:ac:8a:cc:ff:4c:f3:87:64:56:0e: 04:f2:28:05:cd:b2:56:f1:a2:ba:63:83:29:92:f4: 5f:b2:4c:25:66:25:28:8d:19:59:13:6a:a3:68:be: b8:e8:8d:29:66:e7:5b:ae:7b:0f:f5:8d:c0:58:e9: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F1:21:68:1B:9C:C9:A1:11:69:F6:63:EC:98:42:57:90:56:1D:E8 X509v3 Authority Key Identifier: keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8b:43:67:63:f1:b0:39:dc:67:ac:81:ce:5d:84:d0:20:2a: 29:81:28:8e:6b:a4:db:c5:4d:0d:9e:66:bb:d7:96:ca:1b:c5: 43:75:23:ad:ec:d6:91:24:33:92:d2:a5:da:a8:bc:da:b9:b2: 3a:61:0b:87:8b:2d:ee:7c:e8:f7:bf:e0:86:d9:a7:b4:eb:ab: 13:24:5b:a0:14:08:51:ed:9c:f8:44:e0:92:54:47:3d:69:06: 59:10:76:b5:93:86:fa:76:10:ad:35:44:eb:4e:c5:5f:d9:0e: 0f:2f:f4:3c:f9:ac:6a:5c:68:ba:51:08:00:af:19:f5:c3:2b: c1:01:b1:fc:e6:75:91:7c:17:c7:bc:da:45:79:fd:a2:b5:d8: 07:83:c6:46:30:53:32:c3:86:c4:24:1f:a7:4f:ee:7a:3d:84: e6:87:0b:c3:c4:b7:b3:d2:a2:96:d6:03:9e:fa:6e:89:cf:da: d7:d2:29:f5:6b:66:0e:22:83:67:26:a9:15:4f:d1:77:0e:9b: e7:0b:70:27:d4:02:e7:c2:06:a2:75:6c:56:56:83:73:cb:8d: a4:f1:92:79:be:b2:f8:c6:21:20:ea:c4:25:c2:9e:2f:45:ad: 0a:bc:88:3c:1d:8f:6f:48:e9:33:48:df:9d:35:60:f7:45:1d: a6:a9:54:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVtzKWaxSMXilsO6wVovpkJ4gHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD RjY2QjgwMTAeFw0yNTEyMDUxNzQ2MTZaFw0yNTEyMDgxOTI2MTZaMDMxMTAvBgNV BAMTKDlGRjEyMTY4MUI5Q0M5QTExMTY5RjY2M0VDOTg0MjU3OTA1NjFERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgoPY93WgHS9m+LBtxLcBKZM8 XGyWVjWTSumGnBK3wjVOpLcmlSj7fqMTeTds3IMAnJuscQhcs+XNDr5nOQm9I6ba k4X6xmTdP8Yftct6fMP09hcZQs4yChcBzBS1aiBJhJb8u4Bh945AzTp2xbOVOhcu x9pO6UuKaMM4oBZ515W1FNKQ/V4PtK9Wagx7pTL4UZCqxhu+y0pWfhCeA6D6pRIk 2MXz1thOY/xwGXAf26dC5tUs/BgzN4/tQsD93NcNcSM/KWxBrIrM/0zzh2RWDgTy KAXNslbxorpjgymS9F+yTCVmJSiNGVkTaqNovrjojSlm51uuew/1jcBY6f0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn/EhaBucyaERafZj7JhCV5BWHegwHwYDVR0j BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2 QjgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5 M0JDRjY2QjgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2LQ2dj8bA53Gesgc5dhNAgKimBKI5rpNvF TQ2eZrvXlsobxUN1I63s1pEkM5LSpdqovNq5sjphC4eLLe586Pe/4IbZp7TrqxMk W6AUCFHtnPhE4JJURz1pBlkQdrWThvp2EK01ROtOxV/ZDg8v9Dz5rGpcaLpRCACv GfXDK8EBsfzmdZF8F8e82kV5/aK12AeDxkYwUzLDhsQkH6dP7no9hOaHC8PEt7PS opbWA576bonP2tfSKfVrZg4ig2cmqRVP0XcOm+cLcCfUAufCBqJ1bFZWg3PLjaTx knm+svjGISDqxCXCni9FrQq8iDwdj29I6TNI3501YPdFHaapVBU= -----END CERTIFICATE-----Generated at Sun Dec 7 03:27:30 2025 by rpki-client