This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: erYeDtiDJ/RFLvd/l70oLiTW2XkP8EOwAh6JBDLty60= Subject key identifier: EB:3F:CD:0A:D2:2C:A1:FB:15:D6:67:71:6E:81:BD:F2:BC:D1:21:C4 Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 1F8975CEBC74BA3FDF911E2A06C008862A0BDECB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 0529 Signing time: Fri 05 Dec 2025 08:01:13 +0000 Manifest this update: Fri 05 Dec 2025 07:56:13 +0000 Manifest next update: Mon 08 Dec 2025 17:52:13 +0000 Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=) 2: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: scnysjgouovAziQ/JAXXCY0q8rPRy8O2jxt3LrVKXzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:89:75:ce:bc:74:ba:3f:df:91:1e:2a:06:c0:08:86:2a:0b:de:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: Dec 5 07:56:13 2025 GMT Not After : Dec 8 17:52:13 2025 GMT Subject: CN=EB3FCD0AD22CA1FB15D667716E81BDF2BCD121C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:ba:8d:21:a4:43:de:e7:7a:75:c1:2d:18: a7:d8:7b:bf:18:12:8d:93:8f:ea:d0:d5:b7:61:34: 52:02:48:61:f0:09:e5:15:9e:1d:6d:f7:d3:0f:c4: ce:6c:eb:b4:0c:51:aa:ac:ac:9d:aa:a2:24:3a:cf: 05:5c:a8:e3:5a:d6:65:c2:b7:f1:b0:05:2f:f2:8f: 05:cf:26:5c:12:0d:d1:5b:41:34:89:df:f7:31:30: b5:95:3f:84:fa:89:83:2e:27:3a:ed:ca:93:b9:4f: 38:7f:05:c9:b8:b7:f0:16:9d:bd:7b:31:f0:23:79: db:41:71:59:d9:7c:32:45:ab:17:a2:45:8d:1a:80: 44:eb:28:8e:da:56:a0:05:f2:d1:6d:7f:38:7e:ff: 8d:1d:0b:ee:22:00:0b:ba:46:ba:e5:6f:9c:1a:76: 31:8a:19:b0:04:de:ca:6b:04:58:2b:88:a4:83:d5: 2e:0a:f1:55:0b:d0:4a:c8:7c:f1:17:73:80:31:b7: 8a:7f:e2:67:ed:70:c3:05:96:f3:8b:29:e7:30:ab: 2a:8a:06:03:98:1c:5a:a7:ac:95:b3:7e:c4:6e:ac: f7:01:97:1b:c1:2b:ee:37:73:d3:97:89:99:dd:0f: cc:67:cb:79:0f:ea:44:45:8a:cc:89:8b:5b:8b:23: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3F:CD:0A:D2:2C:A1:FB:15:D6:67:71:6E:81:BD:F2:BC:D1:21:C4 X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:25:a7:b8:a4:91:a6:e4:e8:4c:b3:ca:af:68:f5:a3:60:95: 66:94:ad:32:3d:2d:dc:62:b4:9c:71:c9:81:0d:f2:65:99:8a: ef:37:9c:b1:97:04:95:f2:53:62:7a:e4:b3:44:d4:a7:ba:9c: a8:a2:98:bc:ab:6b:a9:8c:27:c3:a1:0f:52:1b:be:75:9d:9e: 5c:38:ba:f1:94:56:18:79:f2:d6:63:1c:1b:47:e7:f5:a0:a4: 30:d2:02:27:c1:2e:f1:c6:94:de:b3:9e:be:9b:b8:fa:82:e9: 27:73:40:d0:f9:63:f8:40:7d:6b:d4:71:f5:96:62:14:52:3d: 26:3a:89:2b:ff:84:d7:12:88:24:fb:28:9f:66:5c:cb:4e:af: fc:01:38:94:e0:6b:da:8a:61:6e:f5:98:5a:01:0c:b8:1b:cb: ed:00:34:b6:75:45:9a:70:f5:be:a5:dc:f8:6c:af:57:c9:e7: 4d:d2:45:03:d2:01:a2:a7:8f:af:22:83:b3:b4:e6:3f:11:69: b9:f1:88:6a:c0:01:6a:f3:46:d5:81:70:5f:fb:57:ed:ab:c3: ef:a7:c8:68:b6:ce:9e:eb:e9:f5:db:55:40:80:36:2d:93:de: af:74:a2:02:fd:da:fe:87:89:62:eb:d6:7d:c4:a7:3e:e3:b1: 90:ae:16:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4l1zrx0uj/fkR4qBsAIhioL3sswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNTEyMDUwNzU2MTNaFw0yNTEyMDgxNzUyMTNaMDMxMTAvBgNV BAMTKEVCM0ZDRDBBRDIyQ0ExRkIxNUQ2Njc3MTZFODFCREYyQkNEMTIxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgbqNIaRD3ud6dcEtGKfYe78Y Eo2Tj+rQ1bdhNFICSGHwCeUVnh1t99MPxM5s67QMUaqsrJ2qoiQ6zwVcqONa1mXC t/GwBS/yjwXPJlwSDdFbQTSJ3/cxMLWVP4T6iYMuJzrtypO5Tzh/Bcm4t/AWnb17 MfAjedtBcVnZfDJFqxeiRY0agETrKI7aVqAF8tFtfzh+/40dC+4iAAu6Rrrlb5wa djGKGbAE3sprBFgriKSD1S4K8VUL0ErIfPEXc4Axt4p/4mftcMMFlvOLKecwqyqK BgOYHFqnrJWzfsRurPcBlxvBK+43c9OXiZndD8xny3kP6kRFisyJi1uLI1AJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6z/NCtIsofsV1mdxboG98rzRIcQwHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0lp7ikkabk6Eyzyq9o9aNglWaUrTI9Ldxi tJxxyYEN8mWZiu83nLGXBJXyU2J65LNE1Ke6nKiimLyra6mMJ8OhD1IbvnWdnlw4 uvGUVhh58tZjHBtH5/WgpDDSAifBLvHGlN6znr6buPqC6SdzQND5Y/hAfWvUcfWW YhRSPSY6iSv/hNcSiCT7KJ9mXMtOr/wBOJTga9qKYW71mFoBDLgby+0ANLZ1RZpw 9b6l3Phsr1fJ503SRQPSAaKnj68ig7O05j8RabnxiGrAAWrzRtWBcF/7V+2rw++n yGi2zp7r6fXbVUCANi2T3q90ogL92v6HiWLr1n3Epz7jsZCuFgU= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:16 2025 by rpki-client