This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json)
Hash identifier: AQIZP+RLT0iJ3n/7ncofl0Y5c9OgENcE+SWcfKskYt4=
Subject key identifier: 54:38:E1:B8:A0:32:40:57:E3:FE:D9:7E:66:9D:AB:6F:B1:B2:40:A1
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial: 59A297292D2A713551C30E175117267B88D9B5B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
Manifest number: B3
Signing time: Fri 05 Dec 2025 15:41:42 +0000
Manifest this update: Fri 05 Dec 2025 15:36:42 +0000
Manifest next update: Mon 08 Dec 2025 18:31:42 +0000
Files and hashes: 1: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=)
2: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=)
3: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: td0OSINBGBuv5HEsFIZ58nSKSttNzeWBzHe87KLyw90=)
4: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: EFGcBtHDQ5bIxmJe1FH7q/CPStZtaOK9dnZBiV0B19w=)
5: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: MByiWqioSG0bs5FrR2S5ZWO/VS/KpKaL9p/BlUB5wIY=)
6: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=)
7: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: BohmVCdqXlKZG+sKe25j9jAyDRmpT+hYiOTt1ls3vLA=)
8: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: SznPKhQPKlumNSdukCt0jZbfcUX8DE7OHpbeCdn75DM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 18:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a2:97:29:2d:2a:71:35:51:c3:0e:17:51:17:26:7b:88:d9:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Validity
Not Before: Dec 5 15:36:42 2025 GMT
Not After : Dec 8 18:31:42 2025 GMT
Subject: CN=5438E1B8A0324057E3FED97E669DAB6FB1B240A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:15:eb:ce:67:e1:e0:c8:85:6d:4f:50:ab:
15:72:6b:ef:47:12:58:84:3f:40:9e:e4:2a:f0:bf:
c9:c2:83:1c:c7:68:2f:21:d9:20:5b:2d:ed:6b:d4:
27:89:c3:01:bd:67:93:a7:b0:4e:ff:fa:aa:fa:fe:
15:dc:a7:7f:b5:55:f5:4b:25:3d:f5:8f:45:e2:6b:
45:c7:58:4b:99:d0:05:fb:84:f1:4f:96:8f:7a:3f:
df:b2:26:09:fb:6a:e8:93:e0:ab:32:e9:23:99:19:
b6:f2:df:ea:4f:35:00:e3:23:4a:be:c2:2d:66:b8:
a2:88:9d:44:96:a9:51:de:04:e3:44:c6:d4:18:66:
64:d8:38:0d:c9:af:d5:bf:e7:f5:b1:f9:75:94:5e:
01:32:ee:80:55:84:6b:f0:41:60:b6:36:c5:ae:fe:
a0:e1:44:ed:4c:8a:56:a9:32:0b:b3:03:75:2a:9f:
a9:2b:ce:a5:23:9f:f9:a4:d0:5b:2d:11:75:b0:d4:
3e:53:6f:e6:b0:1a:e2:00:a0:e5:72:eb:d1:84:ba:
54:94:0a:4c:ca:2d:c5:f9:87:20:9a:eb:c3:d9:39:
8c:31:b6:5d:3c:ae:13:24:6e:f3:39:b8:31:f6:34:
6e:41:70:29:6b:02:70:84:84:b1:e0:ea:fe:18:d3:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:38:E1:B8:A0:32:40:57:E3:FE:D9:7E:66:9D:AB:6F:B1:B2:40:A1
X509v3 Authority Key Identifier:
keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:fe:1a:75:34:06:79:92:b3:a5:a4:7e:f1:e1:54:18:fb:da:
d0:43:5d:7f:6a:34:62:f4:d0:36:5f:55:82:45:3e:31:a0:84:
22:15:eb:a1:32:6f:e1:78:e1:da:ac:80:cf:f0:70:28:ca:10:
46:06:af:59:ce:b4:b9:1e:fa:50:f4:dd:fe:1d:60:73:d3:8c:
e1:38:d4:00:10:b8:56:44:ea:f6:0c:2b:4e:9d:04:82:b6:39:
2d:01:30:55:e5:bc:df:04:b5:01:ab:2d:18:13:23:cd:20:dd:
d6:09:b7:f1:61:ca:89:26:e0:44:ea:fd:1e:ee:2d:aa:43:79:
4f:70:97:7d:63:bc:06:8a:75:fa:4a:8e:71:e4:15:cd:92:72:
0a:46:5b:23:e8:90:dc:6b:f3:e1:f0:e8:ab:9e:f9:c1:d4:92:
a7:06:f0:f8:cd:2c:1a:d4:0d:2b:82:2b:8a:25:dc:94:eb:ea:
30:41:da:66:99:79:a6:18:22:dd:8c:16:3f:bf:f1:bf:98:9e:
98:13:97:49:48:55:d8:ff:18:50:df:47:d6:3c:c6:f2:8a:cb:
c9:c5:b9:55:9e:78:ec:93:0a:2e:aa:84:b8:a5:e4:e2:58:5b:
fd:7a:54:95:1a:88:18:e0:07:26:1e:d3:42:43:8d:10:3b:e6:
5e:d8:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:44 2025 by rpki-client