This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json)
Hash identifier: KKu3JJiq3mp6vxJ8WWU8HsU5vzQi7VxgW0/O8F4+61Q=
Subject key identifier: E9:C3:33:DC:D8:E8:3D:D0:EF:DA:3A:4B:68:40:5C:23:24:BF:35:EE
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial: 14971FF637ACAD4BACEF7B602AD5040CFEDBF698
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
Manifest number: 0529
Signing time: Sat 06 Dec 2025 13:20:41 +0000
Manifest this update: Sat 06 Dec 2025 13:15:41 +0000
Manifest next update: Tue 09 Dec 2025 17:19:41 +0000
Files and hashes: 1: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=)
2: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=)
3: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=)
4: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=)
5: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=)
6: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: Mt1pL4WZLVNHyTWjLR3F2ZoYTA8HVv/1xfFVIspq0N0=)
7: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=)
8: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:97:1f:f6:37:ac:ad:4b:ac:ef:7b:60:2a:d5:04:0c:fe:db:f6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Validity
Not Before: Dec 6 13:15:41 2025 GMT
Not After : Dec 9 17:19:41 2025 GMT
Subject: CN=E9C333DCD8E83DD0EFDA3A4B68405C2324BF35EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:53:c9:d0:32:09:c7:e8:b7:cd:f1:cc:43:
72:84:bc:f9:da:f3:2a:b6:50:00:95:a7:e3:9a:e8:
ea:7f:ed:c6:79:f9:b2:95:3e:b8:59:fc:17:50:5c:
26:8f:81:12:fb:c1:17:6d:41:16:39:bf:fc:4c:15:
2a:a7:36:68:e0:be:0b:c7:6c:9d:20:db:7a:47:11:
d9:cd:04:fd:0c:af:62:57:e7:76:2c:d4:f3:13:51:
5e:15:3a:94:15:1b:35:9b:a0:81:c1:1a:7c:37:42:
44:92:42:1d:2c:25:43:61:33:3f:bf:50:58:94:d0:
66:6c:7e:d5:27:2a:7c:71:79:cb:67:e6:13:e2:f4:
64:2a:36:a1:8b:04:f8:34:57:75:19:a0:f0:16:1e:
be:73:99:57:66:e6:bc:1e:d5:7a:c5:8f:0d:1f:a1:
4e:67:22:9f:98:ab:f0:5f:e3:13:29:1c:f9:23:44:
48:5b:ba:db:f1:88:4d:fb:3a:c6:59:c6:0a:6e:e5:
ff:08:af:be:ac:19:a0:9c:1c:7d:0b:60:61:f1:57:
9e:8b:72:83:2b:a1:b6:2d:65:04:6d:0a:e3:92:ba:
1a:c4:86:c4:9f:48:02:e8:ae:6d:f8:eb:d8:f1:6f:
46:53:e1:8c:fb:4c:48:d9:f3:a3:66:20:b3:a5:98:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:33:DC:D8:E8:3D:D0:EF:DA:3A:4B:68:40:5C:23:24:BF:35:EE
X509v3 Authority Key Identifier:
keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a1:c1:5c:ed:92:c5:95:6b:7d:02:0a:e1:59:2b:87:57:c9:
a5:0b:66:b7:38:ca:2e:47:9a:ed:13:77:5f:62:48:7c:23:c1:
e1:13:75:07:1f:e5:fe:79:0a:44:52:a0:b1:b0:06:71:95:a7:
0c:c2:7a:fb:4b:85:88:40:1e:6b:7d:82:ff:53:35:23:19:00:
ed:f4:57:fe:4c:68:aa:82:40:07:49:46:f1:ec:53:bf:f4:67:
b1:32:ff:87:94:a8:a6:3b:8d:92:97:1c:ed:58:1e:67:55:33:
47:0a:44:61:09:0f:00:c9:70:a4:61:41:c7:29:f4:85:dc:52:
a9:5a:5f:4b:2a:61:0f:a5:2e:9a:6b:a7:f9:6e:3f:93:2b:fc:
a2:2c:3d:7a:a4:37:4a:d9:05:1a:2f:0a:9b:94:56:9a:f5:df:
d2:c5:4d:64:84:8a:33:72:ca:33:de:7f:06:0a:2c:43:ec:50:
6a:8a:3f:6b:5d:b9:5e:b7:d1:e6:7f:27:72:96:2e:79:bf:4d:
53:df:4a:82:a4:a1:fe:38:51:db:a6:cd:4a:67:ed:5c:1c:e7:
61:48:57:25:da:8d:cd:f4:fa:52:55:ac:86:00:4e:36:88:61:
df:36:d1:a9:66:5e:1c:45:22:93:56:08:79:fc:fb:1b:ec:a0:
93:c5:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:23:00 2025 by rpki-client