This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft (raw, json)
Hash identifier: cUNocxIdKRCE1Za1TOG3BChhRnxSN7x+0/BkaCVi+M8=
Subject key identifier: 38:CB:22:62:53:A7:B2:11:9F:89:78:7B:6D:4A:DE:AE:E9:B6:47:A5
Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
Certificate issuer: /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Certificate serial: 72FE9D99BDDF718E2FA80C4D378BCE0D2EFAE2E2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
Manifest number: 04BC
Signing time: Sat 06 Dec 2025 19:11:04 +0000
Manifest this update: Sat 06 Dec 2025 19:06:04 +0000
Manifest next update: Wed 10 Dec 2025 02:21:04 +0000
Files and hashes: 1: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl (hash: ucsgzDFXyr406b6i5GJNviN1Va4s885WgU8pyQmNI5E=)
2: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: u5WfQAzN1c26Bk/yoWUZSKe+Zg3RVzlzDJ1SjGA5ptQ=)
3: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: b/xbORHT+fQcjRsUPACV/EddNJE5h6xg8w5gIZewjWA=)
4: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: sD1D71HTJcX0Tgc5u0wKCnB+drLmqPRrwWzHCdL5tpk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fe:9d:99:bd:df:71:8e:2f:a8:0c:4d:37:8b:ce:0d:2e:fa:e2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Validity
Not Before: Dec 6 19:06:04 2025 GMT
Not After : Dec 10 02:21:04 2025 GMT
Subject: CN=38CB226253A7B2119F89787B6D4ADEAEE9B647A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:f0:ff:f7:86:d6:7e:9d:9b:72:b9:44:db:
22:dd:a8:1d:0a:e8:48:fb:8b:4b:01:b3:ff:43:e5:
01:e7:8f:20:2b:2b:6b:84:6c:c1:6f:7d:6c:4f:43:
86:6d:3f:0a:6b:e4:0e:95:d1:b5:13:7c:79:5f:76:
90:d6:9d:7c:b4:b9:45:89:e9:2a:01:ee:03:ba:9f:
b2:f8:22:9a:94:d1:79:1b:d9:e5:2c:32:39:f7:b4:
7f:5a:63:d5:76:5f:e6:74:b1:5b:fa:ba:1f:2c:9c:
5e:0e:ac:7a:ee:84:46:78:7c:8b:b0:30:f9:b3:23:
0f:60:bb:0d:03:a6:81:69:c8:1e:84:2a:58:85:1e:
1f:4b:f0:dd:80:2c:82:b3:67:3f:94:09:81:33:07:
13:74:70:cf:c2:59:0d:c7:91:ce:b3:b4:c5:f0:7c:
d7:a7:55:a5:bb:11:ed:23:96:40:20:68:76:cf:4e:
95:24:69:32:fb:29:21:b5:79:e3:64:20:c9:5f:b2:
2c:21:2b:73:8b:0f:63:c9:fc:4f:83:a5:c0:1a:35:
4b:b1:b7:23:e8:03:ba:87:d6:7b:e5:30:60:94:04:
de:7f:82:d0:a4:e7:af:79:1e:89:14:33:c2:57:6a:
34:49:2b:41:fd:b5:21:b6:5c:2a:63:6c:b2:1e:b6:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:22:62:53:A7:B2:11:9F:89:78:7B:6D:4A:DE:AE:E9:B6:47:A5
X509v3 Authority Key Identifier:
keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d9:1c:33:98:36:46:7a:fd:54:be:c8:66:8e:98:9b:82:02:
6d:4b:b0:dc:85:9b:22:d1:4e:35:b7:7e:5a:2a:f6:e1:da:5a:
e1:cc:a8:39:93:d1:83:e8:91:bc:c1:39:f0:03:5a:e2:cd:16:
08:6d:50:63:eb:81:59:b4:e7:98:ad:00:b7:5f:6f:2f:c6:07:
c7:1d:d5:0f:cc:19:4b:00:f8:c6:fd:ce:ba:4d:86:7e:cb:bd:
1b:c2:c4:61:2a:6b:55:97:d4:fb:2c:86:5d:da:cd:01:6d:f8:
e4:4f:2a:96:47:6c:60:72:08:11:3b:52:e3:0e:ab:86:07:51:
08:19:13:af:11:54:16:98:bb:fb:50:7d:65:e4:4d:17:04:6d:
87:22:65:18:f4:f3:cd:68:c6:1d:75:28:cb:13:3d:cb:3d:e7:
e0:97:b8:b3:4a:c6:78:b9:75:58:fa:f8:2f:a3:7c:f4:08:b7:
4d:b4:4e:20:f1:83:2b:b4:c0:5b:7f:8a:02:71:d2:3b:42:a9:
80:0c:51:b4:c9:b5:2d:cd:44:7a:30:86:ab:8e:70:0d:63:3d:
a3:60:aa:ac:03:4d:73:ae:f4:8a:53:e8:83:59:d0:9a:31:b0:
0f:07:b8:76:a5:a3:aa:41:58:47:3b:6e:85:be:10:c1:51:87:
89:1b:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:41:35 2025 by rpki-client