This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: Ag87IDPyKEv9R1ytg+zRKO3n4c+BzDuaCbZ8lyaFdMU= Subject key identifier: 13:60:19:84:EA:9A:EA:81:46:26:2B:AD:32:35:BB:1A:69:38:16:C1 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 4ABCAE0C7BFB6277701B63307ECB83159A94A604 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 0249 Signing time: Sat 06 Dec 2025 17:10:56 +0000 Manifest this update: Sat 06 Dec 2025 17:05:56 +0000 Manifest next update: Wed 10 Dec 2025 03:45:56 +0000 Files and hashes: 1: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) 2: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: e+KO2hnSc3xHjavOzbiLyOlSyky0+AoxXhUYPrG0REI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bc:ae:0c:7b:fb:62:77:70:1b:63:30:7e:cb:83:15:9a:94:a6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Dec 6 17:05:56 2025 GMT Not After : Dec 10 03:45:56 2025 GMT Subject: CN=13601984EA9AEA8146262BAD3235BB1A693816C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:a5:b5:18:47:6b:ad:51:5c:2d:14:ed:3c: 2c:e7:aa:78:f7:e5:28:f4:9c:1a:31:2d:cd:e2:64: c2:71:4d:fb:e8:2a:c8:7b:1d:35:03:28:16:4c:b1: 50:f3:7d:6f:a0:7f:02:2f:f4:7b:41:d5:88:cb:54: 6a:4b:0b:17:1c:e5:e7:b9:6b:07:94:71:b4:cd:57: 90:ae:43:c6:92:de:2e:e1:a4:3d:aa:db:a8:fd:6b: 33:1f:aa:a5:f1:fd:2e:99:a7:d3:fb:1c:b1:0e:9d: 36:d1:4e:b6:9c:92:c4:6a:93:f9:27:04:14:fb:31: b5:a5:f8:02:69:bd:8c:2e:d5:56:9a:f9:f2:03:1a: 13:df:11:8c:61:df:f8:b5:67:d0:20:9d:8f:7d:bb: d7:c8:3d:23:11:a3:06:a7:f4:47:df:a2:8b:a4:11: 36:4a:4d:e5:ac:4e:04:06:18:09:97:cb:4e:47:2a: b0:5d:c1:81:a4:58:49:14:92:5d:aa:5d:3a:a7:c6: b1:bf:57:2f:f6:15:05:ba:a0:07:cc:b7:04:75:11: 07:d7:69:ee:32:54:d3:d3:3c:af:af:ec:66:af:d9: 6a:f5:33:36:c5:6a:a7:28:61:a7:1e:b9:93:04:3a: 95:ef:ae:ca:7c:5f:7a:e7:a5:fc:18:c9:6a:11:5a: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:60:19:84:EA:9A:EA:81:46:26:2B:AD:32:35:BB:1A:69:38:16:C1 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b1:9f:63:d3:42:aa:da:f9:94:55:67:f7:f4:4d:b7:96:8d: d9:30:98:c1:43:a9:ce:ea:a1:14:49:ec:dc:de:8b:10:9c:c0: 3f:4d:c3:90:88:64:4b:b1:b5:ed:08:fa:db:1c:9a:e0:24:18: 58:60:be:7d:d0:8b:c6:32:65:fe:79:82:27:a8:33:fb:25:9b: 60:ea:3c:e3:5b:b0:5c:88:80:95:7a:88:bb:59:f3:96:ae:ab: b9:2d:af:cb:74:31:b0:80:b6:43:05:2d:34:86:5b:60:fa:2d: 72:e4:bb:d0:57:95:9c:c1:51:25:fe:cb:49:5f:08:b5:fc:a4: 44:a9:18:47:65:1f:73:8f:4e:11:de:87:1b:1a:0f:50:cf:27: 62:18:84:54:92:17:35:2c:fa:23:1f:88:7e:51:dc:14:83:33: 6f:83:75:d4:80:e4:f6:6e:69:3d:a8:12:8a:9a:41:55:7b:35: 61:c4:8b:bd:6c:d8:ca:19:20:4e:aa:21:ab:74:be:28:e7:ed: 66:fc:17:0a:7d:dc:bf:8e:bb:8d:5d:a5:87:49:9e:74:48:8a: 56:16:88:c2:f7:f5:d4:ca:2b:54:f6:84:58:c4:7c:1d:be:39: 16:77:6f:19:5e:05:04:01:4a:83:88:18:6c:e7:72:f0:04:9b: b2:d3:df:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSryuDHv7YndwG2MwfsuDFZqUpgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTEyMDYxNzA1NTZaFw0yNTEyMTAwMzQ1NTZaMDMxMTAvBgNV BAMTKDEzNjAxOTg0RUE5QUVBODE0NjI2MkJBRDMyMzVCQjFBNjkzODE2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlKW1GEdrrVFcLRTtPCznqnj3 5Sj0nBoxLc3iZMJxTfvoKsh7HTUDKBZMsVDzfW+gfwIv9HtB1YjLVGpLCxcc5ee5 aweUcbTNV5CuQ8aS3i7hpD2q26j9azMfqqXx/S6Zp9P7HLEOnTbRTracksRqk/kn BBT7MbWl+AJpvYwu1Vaa+fIDGhPfEYxh3/i1Z9AgnY99u9fIPSMRowan9Effoouk ETZKTeWsTgQGGAmXy05HKrBdwYGkWEkUkl2qXTqnxrG/Vy/2FQW6oAfMtwR1EQfX ae4yVNPTPK+v7Gav2Wr1MzbFaqcoYaceuZMEOpXvrsp8X3rnpfwYyWoRWiLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2AZhOqa6oFGJiutMjW7Gmk4FsEwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+xn2PTQqra+ZRVZ/f0TbeWjdkwmMFDqc7q oRRJ7NzeixCcwD9Nw5CIZEuxte0I+tscmuAkGFhgvn3Qi8YyZf55gieoM/slm2Dq PONbsFyIgJV6iLtZ85auq7ktr8t0MbCAtkMFLTSGW2D6LXLku9BXlZzBUSX+y0lf CLX8pESpGEdlH3OPThHehxsaD1DPJ2IYhFSSFzUs+iMfiH5R3BSDM2+DddSA5PZu aT2oEoqaQVV7NWHEi71s2MoZIE6qIat0vijn7Wb8Fwp93L+Ou41dpYdJnnRIilYW iML39dTKK1T2hFjEfB2+ORZ3bxleBQQBSoOIGGzncvAEm7LT3wI= -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:49 2025 by rpki-client