This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: 0EqCi3AAssDA9KtYSpTYVfj5O+0ZCiTlUXENFHrHI9w= Subject key identifier: 66:E4:FA:F8:70:FD:BA:25:F5:71:0D:C4:7E:6C:AC:7D:B7:D5:34:E0 Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 66C62B69DE12214A54CA80F4AABD80FE3A12204F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 0311 Signing time: Sun 14 Dec 2025 10:41:13 +0000 Manifest this update: Sun 14 Dec 2025 10:36:13 +0000 Manifest next update: Wed 17 Dec 2025 10:59:13 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: KlJ7xe9jxJPv2ghljBXv+XqaG+xdsmEYctXqZgRhERI=) 2: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: 0rDdLwb4upLWOZm68ccn4IeYSnKuuWfFMNP+u15N3EI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 10:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:2b:69:de:12:21:4a:54:ca:80:f4:aa:bd:80:fe:3a:12:20:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Dec 14 10:36:13 2025 GMT Not After : Dec 17 10:59:13 2025 GMT Subject: CN=66E4FAF870FDBA25F5710DC47E6CAC7DB7D534E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3d:fc:5f:6b:80:1d:c8:91:da:d8:5a:86:16: 5a:7e:62:75:7b:67:b3:38:2d:53:72:57:a9:86:0b: cc:2c:51:8d:a5:9c:b6:aa:74:b2:63:37:5d:cc:f8: 5d:20:5d:1f:d1:0c:12:d8:0d:b0:91:a8:be:ad:33: 9e:29:5a:87:b1:ee:3b:d0:5e:1c:e8:8d:94:35:e6: bd:ce:55:af:44:4b:ab:3b:93:34:00:f8:d1:fd:55: 6c:85:94:e0:73:45:76:f2:3a:05:6b:f0:5f:53:79: 13:fd:89:d7:6e:33:a9:97:2a:9a:96:b8:02:16:07: e9:fa:7e:6b:ae:58:6b:d6:4c:74:31:33:06:cc:05: 10:01:c9:26:9b:a3:a2:06:5a:5d:98:60:46:86:8c: df:b8:be:73:03:85:22:0f:0a:5c:68:af:00:14:66: 03:43:a5:25:4a:fa:5f:4f:a3:1f:bd:a1:38:58:3a: 86:02:47:9b:8d:73:7b:9d:c1:9a:ab:59:7a:3c:bb: 7e:19:fb:cc:55:95:70:2c:d2:b8:8b:2a:0a:68:45: d3:84:6f:6b:c8:75:af:d5:b2:8e:c8:79:61:ff:0b: 21:46:6f:b2:9a:37:88:c2:03:fb:5e:8c:95:e9:fe: f5:58:a3:0f:ba:8f:10:66:44:6c:32:ff:8c:21:7d: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E4:FA:F8:70:FD:BA:25:F5:71:0D:C4:7E:6C:AC:7D:B7:D5:34:E0 X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b2:84:ca:d1:f6:4e:d1:4c:e6:4c:42:51:a8:84:c0:e1:5c: 9a:be:4f:e4:f1:cd:4e:d9:a1:a9:ea:86:37:b4:69:29:ba:4e: 03:ae:a4:20:94:bd:a3:be:1e:9f:19:18:72:af:7e:d2:a4:58: 34:a0:7f:2c:5d:1c:6c:59:11:79:d6:50:b0:ab:d1:76:bd:32: 49:78:43:ce:3f:7d:56:35:15:92:5c:fd:ea:a9:39:44:b8:3d: 52:00:77:a1:fc:d9:77:ed:fb:47:7a:05:71:7c:a4:19:04:98: 54:9f:88:72:04:f6:72:83:c2:86:e3:c6:53:27:0b:c1:c5:de: b2:8c:7d:cf:12:15:95:ed:bd:6f:c2:6a:57:12:07:93:d7:2b: 11:f6:64:df:b8:c5:af:12:3b:51:e2:c6:cc:24:92:f5:77:b2: 68:9e:5e:19:8f:c0:54:11:8c:e0:ae:3f:96:b6:83:77:85:f5: 13:89:5d:20:ce:47:49:3a:68:2b:1a:0a:2a:ae:c2:f7:a6:2a: 90:ec:e4:9d:79:66:fa:21:56:be:ff:dd:9a:39:17:6a:d8:be: 83:44:9d:4c:76:0a:3e:12:a8:9e:05:79:af:b3:0f:e3:ce:fe: 05:fa:a6:cb:36:7f:9d:34:e4:b2:0a:cc:27:e4:c7:5e:3a:73: 2f:e8:59:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsYrad4SIUpUyoD0qr2A/joSIE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNTEyMTQxMDM2MTNaFw0yNTEyMTcxMDU5MTNaMDMxMTAvBgNV BAMTKDY2RTRGQUY4NzBGREJBMjVGNTcxMERDNDdFNkNBQzdEQjdENTM0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvPfxfa4AdyJHa2FqGFlp+YnV7 Z7M4LVNyV6mGC8wsUY2lnLaqdLJjN13M+F0gXR/RDBLYDbCRqL6tM54pWoex7jvQ XhzojZQ15r3OVa9ES6s7kzQA+NH9VWyFlOBzRXbyOgVr8F9TeRP9idduM6mXKpqW uAIWB+n6fmuuWGvWTHQxMwbMBRABySabo6IGWl2YYEaGjN+4vnMDhSIPClxorwAU ZgNDpSVK+l9Pox+9oThYOoYCR5uNc3udwZqrWXo8u34Z+8xVlXAs0riLKgpoRdOE b2vIda/Vso7IeWH/CyFGb7KaN4jCA/tejJXp/vVYow+6jxBmRGwy/4whfZKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZuT6+HD9uiX1cQ3EfmysfbfVNOAwHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOyhMrR9k7RTOZMQlGohMDhXJq+T+TxzU7Z oanqhje0aSm6TgOupCCUvaO+Hp8ZGHKvftKkWDSgfyxdHGxZEXnWULCr0Xa9Mkl4 Q84/fVY1FZJc/eqpOUS4PVIAd6H82Xft+0d6BXF8pBkEmFSfiHIE9nKDwobjxlMn C8HF3rKMfc8SFZXtvW/CalcSB5PXKxH2ZN+4xa8SO1HixswkkvV3smieXhmPwFQR jOCuP5a2g3eF9ROJXSDOR0k6aCsaCiquwvemKpDs5J15ZvohVr7/3Zo5F2rYvoNE nUx2Cj4SqJ4Fea+zD+PO/gX6pss2f5005LIKzCfkx146cy/oWSc= -----END CERTIFICATE-----Generated at Tue Dec 16 00:30:18 2025 by rpki-client