This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json) Hash identifier: z/Xx0Y8dunEUJZvN7TvWCbh1EvebdVvrKBW9pweZSP4= Subject key identifier: E8:08:78:12:AB:45:25:B6:6D:1F:2A:C7:AF:98:B7:0A:6F:CB:7D:16 Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721 Certificate serial: 2E525A9B4B2951491AC8E5819ED4D152E0C51C65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft Manifest number: 01E0 Signing time: Sat 06 Dec 2025 17:22:17 +0000 Manifest this update: Sat 06 Dec 2025 17:17:17 +0000 Manifest next update: Wed 10 Dec 2025 04:21:17 +0000 Files and hashes: 1: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: oMDwOdVs0lBtmkhMYbIoBJteRDxL3nQ5GsaMF57w8vE=) 2: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Z9x86L9cvYXdwPWT7FHQP4GKwyxq3AVT2OalSxbymqQ=) 3: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: IbLWzBm08AS4RfKW9sTYAdOcxbZNJ6mrAM/VuC4qUdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:52:5a:9b:4b:29:51:49:1a:c8:e5:81:9e:d4:d1:52:e0:c5:1c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721 Validity Not Before: Dec 6 17:17:17 2025 GMT Not After : Dec 10 04:21:17 2025 GMT Subject: CN=E8087812AB4525B66D1F2AC7AF98B70A6FCB7D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b6:86:1c:f4:39:60:75:e0:8e:a1:39:42:93: ef:96:6b:49:5b:18:fd:3b:83:a2:df:12:bc:4b:1b: b6:1d:c4:02:9a:d8:8e:1d:6a:55:91:8f:39:44:19: 27:52:9c:47:c9:91:75:19:12:02:8b:ae:6d:b9:0f: ce:69:18:0b:06:b7:ac:d6:2a:17:cb:47:d4:1c:0c: 81:c9:3b:eb:29:c8:5a:78:67:3c:c4:27:bb:d5:e6: 14:52:52:5c:e5:01:c4:27:1a:7f:a3:4b:81:dd:37: c6:7c:99:a6:65:fd:9d:d1:de:17:7e:11:c3:38:54: 9b:38:52:a8:61:06:89:8d:4e:90:ee:41:70:31:3a: c6:4f:15:b9:5e:13:9c:86:10:b2:5c:62:3e:6a:63: 02:f8:ec:b3:0c:2b:a2:65:26:72:85:9f:8e:8c:ce: a4:f4:04:3d:d9:26:fb:d7:53:15:25:d3:86:21:9d: 92:1f:a6:d4:e0:af:41:e6:4f:45:c1:69:7b:a1:23: ed:22:de:98:5f:ff:ca:52:66:c9:4e:f5:f4:ca:35: 5d:be:d9:ca:94:55:fe:55:a2:d3:c8:41:04:f6:26: ac:ac:db:3a:7d:7b:21:3b:88:30:93:68:6e:69:1f: ea:89:b6:84:90:54:ac:44:09:57:2f:5e:8c:bb:c7: 8a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:08:78:12:AB:45:25:B6:6D:1F:2A:C7:AF:98:B7:0A:6F:CB:7D:16 X509v3 Authority Key Identifier: keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:dc:d2:5e:0b:4e:4e:d7:39:82:e6:17:76:e9:e5:55:d2:9f: d7:ae:df:72:bf:15:d1:c3:e5:03:ce:9b:4a:32:46:e9:1b:67: fc:de:1a:b5:0d:aa:5c:5d:e4:56:9f:55:73:63:2c:94:71:56: 97:99:5a:8a:40:39:5e:c7:52:b3:6d:1f:b5:b1:d7:8e:b2:28: 16:e4:65:9e:e4:91:64:62:2a:f6:a5:d7:3d:0f:26:ea:ae:bb: 90:b4:28:d1:b7:2b:7b:0a:de:b8:2a:72:5e:8b:24:90:04:1c: 4a:0d:dd:43:ac:10:3c:7d:a1:58:1d:a5:44:da:fe:fa:99:64: 9b:45:16:e7:e5:91:1b:6e:7c:04:ad:a7:88:e7:bb:86:1e:f9: 1c:fb:48:69:92:48:8b:7d:a5:c8:e4:af:27:25:71:88:bf:5c: cb:c6:98:ef:a3:0b:d2:79:43:4f:80:81:a2:f9:9a:ee:af:6f: 07:18:96:89:7d:65:36:82:6f:41:af:f9:c1:64:08:8f:e2:b6: 1e:cb:49:22:43:56:8f:ab:78:a0:79:f1:d7:21:d9:63:e2:7f: 27:cf:07:9f:7b:47:fd:38:a6:7d:18:6f:93:25:c7:ae:95:2a: ca:4a:28:34:34:a4:2d:94:e1:75:ce:61:6b:74:ee:34:27:58: 0e:53:98:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlJam0spUUkayOWBntTRUuDFHGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB QzMzQTcyMTAeFw0yNTEyMDYxNzE3MTdaFw0yNTEyMTAwNDIxMTdaMDMxMTAvBgNV BAMTKEU4MDg3ODEyQUI0NTI1QjY2RDFGMkFDN0FGOThCNzBBNkZDQjdEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDotoYc9DlgdeCOoTlCk++Wa0lb GP07g6LfErxLG7YdxAKa2I4dalWRjzlEGSdSnEfJkXUZEgKLrm25D85pGAsGt6zW KhfLR9QcDIHJO+spyFp4ZzzEJ7vV5hRSUlzlAcQnGn+jS4HdN8Z8maZl/Z3R3hd+ EcM4VJs4UqhhBomNTpDuQXAxOsZPFbleE5yGELJcYj5qYwL47LMMK6JlJnKFn46M zqT0BD3ZJvvXUxUl04YhnZIfptTgr0HmT0XBaXuhI+0i3phf/8pSZslO9fTKNV2+ 2cqUVf5VotPIQQT2Jqys2zp9eyE7iDCTaG5pH+qJtoSQVKxECVcvXoy7x4qBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Ah4EqtFJbZtHyrHr5i3Cm/LfRYwHwYDVR0j BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/c0l4LTk7XOYLmF3bp5VXSn9eu33K/FdHD 5QPOm0oyRukbZ/zeGrUNqlxd5FafVXNjLJRxVpeZWopAOV7HUrNtH7Wx146yKBbk ZZ7kkWRiKval1z0PJuquu5C0KNG3K3sK3rgqcl6LJJAEHEoN3UOsEDx9oVgdpUTa /vqZZJtFFuflkRtufAStp4jnu4Ye+Rz7SGmSSIt9pcjkryclcYi/XMvGmO+jC9J5 Q0+AgaL5mu6vbwcYlol9ZTaCb0Gv+cFkCI/ith7LSSJDVo+reKB58dch2WPifyfP B597R/04pn0Yb5Mlx66VKspKKDQ0pC2U4XXOYWt07jQnWA5TmKU= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:41 2025 by rpki-client