This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft File: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft (raw, json) Hash identifier: li4aFWaboKOirquQfq4ubYqEu2r2jFckC8UuoZujEKo= Subject key identifier: 49:71:A1:3F:2F:83:60:35:D0:D1:73:26:9C:C3:9B:12:78:B1:AA:AC Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Certificate serial: 7BCDF59E698BC5BCEE685E7FBC1F7FD3FF9FFE0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft Manifest number: 032C Signing time: Sun 07 Dec 2025 03:31:58 +0000 Manifest this update: Sun 07 Dec 2025 03:26:58 +0000 Manifest next update: Wed 10 Dec 2025 07:10:58 +0000 Files and hashes: 1: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: g0qXlise9HaMFGbsno6S9nxOreCjvNtFTp/h65NgFw8=) 2: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl (hash: WLhA5BDzIXY6yAVc4ZnDxGB0Xlt7tkQPzbwGWpjY7os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cd:f5:9e:69:8b:c5:bc:ee:68:5e:7f:bc:1f:7f:d3:ff:9f:fe:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Validity Not Before: Dec 7 03:26:58 2025 GMT Not After : Dec 10 07:10:58 2025 GMT Subject: CN=4971A13F2F836035D0D173269CC39B1278B1AAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:87:b9:88:84:c2:d1:57:01:43:85:4e:ee: cb:a9:05:ad:f4:1b:f9:39:7f:5d:c8:c7:ef:85:ee: 8f:49:4e:eb:d8:09:7e:30:f9:72:b2:71:df:95:ba: fe:8a:99:7d:67:49:c3:11:d7:7b:40:b7:eb:57:cb: d6:1e:b2:6b:45:6c:aa:e7:fd:0b:da:ac:00:f3:4f: 87:4f:ab:9e:93:e6:17:23:c0:5c:68:87:1c:d6:7d: df:19:a3:cf:bb:45:5d:26:e9:db:45:32:5c:b5:65: 60:32:6b:4f:d9:00:3a:00:42:06:29:c5:49:de:b0: 25:70:8d:f4:f0:5a:ff:d7:d1:55:46:81:ed:9f:37: c3:8d:75:d7:f6:37:a1:35:9e:7b:c3:79:40:c9:8e: 96:6f:21:ed:c8:c5:44:54:f3:9e:0a:85:3b:b2:a9: cb:f7:bd:86:f5:f1:03:07:46:92:03:47:19:73:f6: 3a:32:de:6a:97:e7:c2:5a:47:08:1d:77:5e:f7:79: 2b:64:99:c1:a7:73:8a:cc:77:07:5f:7b:67:14:56: 5a:5f:a9:18:cb:3c:b0:64:be:30:65:56:f6:43:68: a5:b0:8a:df:9d:76:5d:7b:c7:6f:61:fc:55:3c:4a: e3:2f:70:04:4a:04:9d:87:8e:46:52:a8:d1:fb:f6: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:71:A1:3F:2F:83:60:35:D0:D1:73:26:9C:C3:9B:12:78:B1:AA:AC X509v3 Authority Key Identifier: keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:75:78:16:f8:7c:0f:11:da:f0:96:4a:21:a7:8e:54:b6:0d: 00:4e:a1:2c:5f:de:11:f2:32:86:ca:46:d7:13:89:99:eb:f9: 08:2d:c4:5d:ac:40:7d:41:98:97:40:f7:34:63:a3:61:90:b9: b3:9b:4b:33:e7:a3:ca:ad:36:5e:e4:da:39:2b:96:fb:e1:e2: 38:0d:de:80:a3:30:85:fd:3b:ae:50:66:74:1f:a4:ab:1e:a7: 9e:30:b2:2e:36:c9:f4:61:11:88:30:3b:03:21:8e:3b:77:4f: c1:56:72:85:fa:4f:af:82:cb:79:0d:a6:01:e9:3f:6e:22:b0: 26:d5:ec:34:48:52:dc:91:ff:7c:d7:c3:8c:d7:33:b9:4c:56: 21:d3:07:37:58:aa:31:7d:c9:77:87:50:6f:89:21:51:22:f0: 23:d8:f4:49:ed:aa:bf:60:54:a9:4d:b3:e4:91:24:21:62:51: b3:62:b2:04:61:4c:c8:20:27:29:87:aa:9c:57:2e:a6:ef:a7: 87:32:80:6d:6f:09:62:57:c5:38:26:3a:0b:9d:1c:62:46:7b: 9f:96:1d:57:4c:a6:dd:a8:13:6c:94:7f:29:ef:cf:db:8f:72: 93:a1:6a:95:53:ab:e9:a6:b2:24:e4:c2:d4:73:82:d1:2d:1d: 8d:d9:48:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe831nmmLxbzuaF5/vB9/0/+f/g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0 NDQ5QUM2RTAeFw0yNTEyMDcwMzI2NThaFw0yNTEyMTAwNzEwNThaMDMxMTAvBgNV BAMTKDQ5NzFBMTNGMkY4MzYwMzVEMEQxNzMyNjlDQzM5QjEyNzhCMUFBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+4e5iITC0VcBQ4VO7supBa30 G/k5f13Ix++F7o9JTuvYCX4w+XKycd+Vuv6KmX1nScMR13tAt+tXy9YesmtFbKrn /QvarADzT4dPq56T5hcjwFxohxzWfd8Zo8+7RV0m6dtFMly1ZWAya0/ZADoAQgYp xUnesCVwjfTwWv/X0VVGge2fN8ONddf2N6E1nnvDeUDJjpZvIe3IxURU854KhTuy qcv3vYb18QMHRpIDRxlz9joy3mqX58JaRwgdd173eStkmcGnc4rMdwdfe2cUVlpf qRjLPLBkvjBlVvZDaKWwit+ddl17x29h/FU8SuMvcARKBJ2HjkZSqNH79u2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSXGhPy+DYDXQ0XMmnMObEnixqqwwHwYDVR0j BBgwFoAUtoKfXn73td8zl80yIhYL6URJrG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTA5MDU3My02YWQzLTRlNjMtOGFmNC04YTJkNTgyYWEwY2QvMC9CNjgyOUY1RTdF RjdCNURGMzM5N0NEMzIyMjE2MEJFOTQ0NDlBQzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0NDQ5 QUM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh ZjQtOGEyZDU4MmFhMGNkLzAvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBC RTk0NDQ5QUM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAp1eBb4fA8R2vCWSiGnjlS2DQBOoSxf3hHy MobKRtcTiZnr+QgtxF2sQH1BmJdA9zRjo2GQubObSzPno8qtNl7k2jkrlvvh4jgN 3oCjMIX9O65QZnQfpKsep54wsi42yfRhEYgwOwMhjjt3T8FWcoX6T6+Cy3kNpgHp P24isCbV7DRIUtyR/3zXw4zXM7lMViHTBzdYqjF9yXeHUG+JIVEi8CPY9Entqr9g VKlNs+SRJCFiUbNisgRhTMggJymHqpxXLqbvp4cygG1vCWJXxTgmOgudHGJGe5+W HVdMpt2oE2yUfynvz9uPcpOhapVTq+mmsiTkwtRzgtEtHY3ZSAc= -----END CERTIFICATE-----Generated at Sun Dec 7 05:15:40 2025 by rpki-client