This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: SfT8Kip+GAvpUq83KB/aar8k8Qwe+efsMf8vKiI1fGQ= Subject key identifier: A5:B9:EB:F3:46:5D:85:87:33:70:5D:F1:66:85:F9:85:C4:7F:14:AF Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 19BE1842DE7993793CED86DFA1E68050D4324771 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 030D Signing time: Fri 05 Dec 2025 12:11:11 +0000 Manifest this update: Fri 05 Dec 2025 12:06:11 +0000 Manifest next update: Mon 08 Dec 2025 21:45:11 +0000 Files and hashes: 1: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: gUN6zCo4lw5JPHbkzN1usBvmAN9uh/jJxvTOSVwdWys=) 2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: KlJ7xe9jxJPv2ghljBXv+XqaG+xdsmEYctXqZgRhERI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:be:18:42:de:79:93:79:3c:ed:86:df:a1:e6:80:50:d4:32:47:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Dec 5 12:06:11 2025 GMT Not After : Dec 8 21:45:11 2025 GMT Subject: CN=A5B9EBF3465D858733705DF16685F985C47F14AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:03:c3:bf:30:c5:c6:55:f9:7b:1e:43:bd: 22:bd:3f:4f:1a:e5:1c:d9:ee:f8:7f:08:3e:e8:19: c7:24:b2:a5:78:6e:b1:ce:50:69:5a:03:ee:b2:ca: 16:53:be:bc:6f:ec:43:69:50:76:b7:e0:20:fb:f7: b1:c8:c6:40:6b:73:46:90:3d:0b:1f:85:ec:8e:d0: 7b:35:6e:f4:78:c4:0f:36:29:78:af:b9:43:1e:68: b3:25:31:74:75:ac:d7:d7:c6:2e:47:82:f7:82:c8: 00:5b:18:e4:9f:1c:44:0c:40:b3:74:ef:d0:10:6a: 9c:6b:c0:0d:e8:32:70:47:08:1b:8a:85:91:1c:68: f5:cc:14:44:97:7c:b4:b3:13:55:ad:13:6a:32:d3: 4a:e5:71:63:31:60:8b:ba:c4:2b:ab:54:b3:ed:14: 5c:57:cc:1c:a0:95:32:0d:ba:80:e3:8b:92:f6:5a: b7:e1:8f:db:0b:06:fe:e2:dc:f6:b0:a4:bb:0e:65: 41:64:f8:13:ba:d7:67:1f:fe:6e:c3:97:d8:0d:56: 53:3c:ab:e3:37:cd:e9:65:5e:f2:62:94:e5:a8:43: 48:2e:91:e9:a1:bb:db:94:72:6f:3f:c9:44:9a:16: 30:7e:76:f7:b0:f6:98:5b:42:a1:53:29:21:1d:5a: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B9:EB:F3:46:5D:85:87:33:70:5D:F1:66:85:F9:85:C4:7F:14:AF X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d6:49:e4:f6:7b:c6:0d:e1:4b:2d:e5:ee:96:22:43:aa:5f: 5e:48:02:3b:20:64:de:26:43:9f:ae:aa:c9:27:8e:38:f2:53: 8f:f2:7e:bb:71:63:16:6b:6c:f8:c8:3e:30:7d:d1:aa:23:71: 79:a4:38:18:53:c0:8c:33:f2:68:7c:14:66:23:a0:19:39:15: 17:31:1d:88:c0:2b:61:59:73:c0:3d:26:8a:33:68:be:6b:f0: 0e:f5:15:08:26:1f:15:90:7d:e8:de:0f:84:6b:b2:ad:0c:e0: e6:18:d8:3c:97:01:50:27:78:e9:53:04:59:57:bc:e7:89:f1: 9c:e3:4d:88:8f:2c:f9:46:17:73:02:6d:6d:b7:ed:b8:ee:aa: 01:36:5c:a2:8b:da:b3:30:2a:b3:0d:6d:d4:67:51:df:c7:d8: a8:59:47:ab:54:ce:20:50:d2:3a:a6:00:c1:c4:c9:b5:f2:f6: fc:22:af:e2:75:f9:40:59:2a:da:12:57:d8:59:83:93:ae:30: b3:5c:42:4e:b7:22:ae:d8:d0:e4:c4:95:a0:4b:5e:5a:98:48: 19:21:43:a4:6d:b8:c6:09:28:ef:b6:02:07:91:14:21:0c:3f: 5b:cb:a5:ad:44:4d:61:25:23:89:b5:0f:09:d0:99:11:98:6f: 75:37:8d:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGb4YQt55k3k87YbfoeaAUNQyR3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNTEyMDUxMjA2MTFaFw0yNTEyMDgyMTQ1MTFaMDMxMTAvBgNV BAMTKEE1QjlFQkYzNDY1RDg1ODczMzcwNURGMTY2ODVGOTg1QzQ3RjE0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQwPDvzDFxlX5ex5DvSK9P08a 5RzZ7vh/CD7oGccksqV4brHOUGlaA+6yyhZTvrxv7ENpUHa34CD797HIxkBrc0aQ PQsfheyO0Hs1bvR4xA82KXivuUMeaLMlMXR1rNfXxi5HgveCyABbGOSfHEQMQLN0 79AQapxrwA3oMnBHCBuKhZEcaPXMFESXfLSzE1WtE2oy00rlcWMxYIu6xCurVLPt FFxXzByglTINuoDji5L2Wrfhj9sLBv7i3PawpLsOZUFk+BO612cf/m7Dl9gNVlM8 q+M3zellXvJilOWoQ0gukemhu9uUcm8/yUSaFjB+dvew9phbQqFTKSEdWpCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpbnr80ZdhYczcF3xZoX5hcR/FK8wHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3WSeT2e8YN4Ust5e6WIkOqX15IAjsgZN4m Q5+uqsknjjjyU4/yfrtxYxZrbPjIPjB90aojcXmkOBhTwIwz8mh8FGYjoBk5FRcx HYjAK2FZc8A9JoozaL5r8A71FQgmHxWQfejeD4Rrsq0M4OYY2DyXAVAneOlTBFlX vOeJ8ZzjTYiPLPlGF3MCbW237bjuqgE2XKKL2rMwKrMNbdRnUd/H2KhZR6tUziBQ 0jqmAMHEybXy9vwir+J1+UBZKtoSV9hZg5OuMLNcQk63Iq7Y0OTElaBLXlqYSBkh Q6RtuMYJKO+2AgeRFCEMP1vLpa1ETWElI4m1DwnQmRGYb3U3jbE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:49:43 2025 by rpki-client