This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: OvbSvocbdemEMM/C+E7JYQ1rUWBSXM61Ud00UVzE0gc= Subject key identifier: D4:B6:FD:CB:51:17:5F:46:C9:33:34:5B:EF:27:45:5D:B1:87:2A:9C Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 43C458BA862B6E11C544D050CC2C45716D0CC663 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 0274 Signing time: Sat 06 Dec 2025 15:21:01 +0000 Manifest this update: Sat 06 Dec 2025 15:16:01 +0000 Manifest next update: Tue 09 Dec 2025 16:15:01 +0000 Files and hashes: 1: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=) 2: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: pFmd2Evf1JfCwSJUq1zKZ7DKdZUK7KTT5wZCiV9Wfcs=) 3: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: EXt/s3HMY6DVF/qlrhVSQgJ0ku4a+g1XmL8wQYemKDg=) 4: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: XhAJmRm6ZcTMjlVm4d1YrSxmeNRfzEm7fPRW8yuZLvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c4:58:ba:86:2b:6e:11:c5:44:d0:50:cc:2c:45:71:6d:0c:c6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Dec 6 15:16:01 2025 GMT Not After : Dec 9 16:15:01 2025 GMT Subject: CN=D4B6FDCB51175F46C933345BEF27455DB1872A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:dc:46:34:c8:4d:53:d8:a7:4d:f1:d5:a4: e1:a8:2d:99:d7:34:72:02:d3:3f:4d:00:d3:e7:ed: e0:96:16:06:f8:79:9b:ec:81:cc:fd:03:cc:00:a5: 46:93:78:7d:0f:96:e1:54:52:3a:b3:52:c8:f5:b8: 6f:a1:4f:77:8c:7e:a9:d3:d6:ac:f2:7e:85:f6:6d: e0:35:f4:b5:3b:a2:b3:23:c7:5d:6d:4e:c6:51:ae: b7:cc:da:14:51:4d:50:12:a2:a9:19:73:56:59:3b: 13:1e:d8:ee:27:f6:e7:7b:c6:ee:5c:89:0e:85:68: c5:16:80:38:46:33:53:9d:15:c2:f2:0f:a3:a2:f1: 25:1d:03:f8:3b:d5:eb:83:16:a1:8e:29:55:b4:fd: f3:f0:24:b8:d3:70:2d:86:65:e5:a8:d3:ca:13:b1: 13:48:b4:df:c6:2b:9f:52:b6:00:7a:7b:ec:77:eb: a3:ca:d1:79:2b:87:ce:2e:e8:36:d9:45:5c:90:4c: 0e:bb:3c:dd:40:5e:b4:15:42:a7:a5:75:08:d9:40: f8:e1:77:53:6d:b3:8d:5d:42:2e:61:1e:5e:7c:12: 52:ef:56:66:94:7f:c8:94:22:e3:36:72:74:23:d3: 2b:aa:d7:b7:c9:f3:34:c2:32:ed:bb:94:de:96:61: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B6:FD:CB:51:17:5F:46:C9:33:34:5B:EF:27:45:5D:B1:87:2A:9C X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a7:6c:2f:11:e2:cc:91:89:28:64:d6:d8:2f:2f:82:68:2d: 8a:70:21:10:d4:b6:37:3d:db:15:0f:c3:a7:e4:ab:24:1f:d6: 9a:e3:a6:98:02:dd:23:7d:11:5d:22:21:a7:1b:89:c9:70:ab: ef:47:7c:e1:0e:3f:b3:70:05:e2:bf:d5:6d:bf:fa:e3:15:9e: e7:6f:b7:d7:41:02:79:5b:0c:70:af:1a:fd:39:7b:c6:23:9f: 7a:c1:16:ce:db:5c:ff:36:40:d5:0b:23:55:0a:d5:8e:7b:3e: 83:22:84:51:28:85:0f:56:a4:11:a2:35:fd:26:40:d2:03:df: 1b:51:41:81:5f:bb:56:a2:a5:af:6f:4c:ad:22:14:8b:50:38: 59:d8:a5:a4:15:07:84:aa:3f:8b:9a:d7:a4:a1:54:6e:59:f5: 9e:73:af:d2:16:85:38:a7:d7:62:25:74:d8:41:f4:ff:92:9a: fd:83:39:76:04:4c:ca:0a:a1:59:e6:55:cd:be:55:eb:58:1e: e8:73:ce:6e:21:02:f6:9f:11:d9:c6:2e:2b:95:d1:0d:7d:ec: d0:d1:23:cb:95:e7:48:cc:66:85:2f:b5:a6:b6:be:f4:f0:60: dd:4e:45:b3:97:b2:7b:e0:41:31:68:5d:b0:d0:e3:26:a5:67: 20:51:8e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ8RYuoYrbhHFRNBQzCxFcW0MxmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTEyMDYxNTE2MDFaFw0yNTEyMDkxNjE1MDFaMDMxMTAvBgNV BAMTKEQ0QjZGRENCNTExNzVGNDZDOTMzMzQ1QkVGMjc0NTVEQjE4NzJBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrm9xGNMhNU9inTfHVpOGoLZnX NHIC0z9NANPn7eCWFgb4eZvsgcz9A8wApUaTeH0PluFUUjqzUsj1uG+hT3eMfqnT 1qzyfoX2beA19LU7orMjx11tTsZRrrfM2hRRTVASoqkZc1ZZOxMe2O4n9ud7xu5c iQ6FaMUWgDhGM1OdFcLyD6Oi8SUdA/g71euDFqGOKVW0/fPwJLjTcC2GZeWo08oT sRNItN/GK59StgB6e+x366PK0Xkrh84u6DbZRVyQTA67PN1AXrQVQqeldQjZQPjh d1Nts41dQi5hHl58ElLvVmaUf8iUIuM2cnQj0yuq17fJ8zTCMu27lN6WYdFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Lb9y1EXX0bJMzRb7ydFXbGHKpwwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+nbC8R4syRiShk1tgvL4JoLYpwIRDUtjc9 2xUPw6fkqyQf1prjppgC3SN9EV0iIacbiclwq+9HfOEOP7NwBeK/1W2/+uMVnudv t9dBAnlbDHCvGv05e8Yjn3rBFs7bXP82QNULI1UK1Y57PoMihFEohQ9WpBGiNf0m QNID3xtRQYFfu1aipa9vTK0iFItQOFnYpaQVB4SqP4ua16ShVG5Z9Z5zr9IWhTin 12IldNhB9P+Smv2DOXYETMoKoVnmVc2+VetYHuhzzm4hAvafEdnGLiuV0Q197NDR I8uV50jMZoUvtaa2vvTwYN1ORbOXsnvgQTFoXbDQ4yalZyBRjv4= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:14 2025 by rpki-client