This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: kwWKDHTWRF4Y/2QN97RlqnrUIkc2f78kIM1pA6Xd6c4= Subject key identifier: A6:0D:18:F3:FB:27:89:AD:F4:E7:29:A4:11:56:D6:CE:97:7B:22:8A Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 74D17D5767F5658B9BE33BF3BE25EC42B97304E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01F8 Signing time: Fri 05 Dec 2025 09:40:43 +0000 Manifest this update: Fri 05 Dec 2025 09:35:43 +0000 Manifest next update: Mon 08 Dec 2025 18:08:43 +0000 Files and hashes: 1: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: wyY3CPGpB3zzZUc8QiVL+ydL4s6XrQRhF73erj2QQSs=) 2: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) 3: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: sksB0+JpfamOk8agUpLTqgwXQckz8CSkrdrAWOtJ4OI=) 4: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: byEIMfVIpi1JawMaMOYvYHpMSPNUD58jGzuVYke3rQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d1:7d:57:67:f5:65:8b:9b:e3:3b:f3:be:25:ec:42:b9:73:04:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Dec 5 09:35:43 2025 GMT Not After : Dec 8 18:08:43 2025 GMT Subject: CN=A60D18F3FB2789ADF4E729A41156D6CE977B228A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:5d:cb:96:58:b3:80:12:2e:7e:54:49:45: 92:59:40:21:8f:5b:21:c2:ff:e0:33:23:6b:10:e4: ce:f0:fd:fb:5a:6a:f6:83:07:3a:b6:63:a2:ff:02: 48:d0:8e:59:5f:64:e5:e6:17:e2:4f:8a:2d:3b:6a: 6e:97:22:5c:04:52:9a:f6:82:47:98:bc:36:1e:5e: 8c:cb:e5:87:ec:b0:b0:61:35:0b:c6:ec:51:33:95: 10:8d:04:4d:1a:3f:48:27:d7:5e:23:48:d1:17:5f: 74:eb:82:09:9e:11:51:9c:fc:c9:ff:c3:25:cf:86: 96:ca:c3:8f:40:1b:92:f6:11:cd:7a:1e:3f:aa:7d: 2b:dc:c3:d8:69:29:23:45:03:06:24:80:17:a4:02: fb:cb:d6:25:25:0d:e0:05:37:c1:d1:b4:42:1e:79: b7:2f:e9:be:3d:8b:6e:41:ec:43:9a:37:38:cd:ec: f4:96:a7:23:60:16:e3:2d:4b:c3:ae:3a:a2:ec:bc: 36:fd:6b:b4:c5:e2:a4:75:45:6a:0a:eb:89:eb:c4: f9:04:2b:fb:40:07:b6:ee:77:31:0b:27:94:04:2c: 1a:61:88:5f:65:50:90:c5:9c:81:40:4a:2b:34:93: c9:30:01:30:53:6a:2a:e9:69:7d:25:d9:9d:39:c5: 4c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0D:18:F3:FB:27:89:AD:F4:E7:29:A4:11:56:D6:CE:97:7B:22:8A X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fe:b1:a5:c0:e6:ae:2b:27:7d:7b:7b:8a:f1:1c:7a:43:11: 31:83:7c:73:31:82:2d:76:4b:90:6d:7c:6b:6b:59:fb:3a:ce: 42:64:9d:e5:b4:a1:0f:da:9d:7e:4e:ad:f1:6f:1b:3a:d0:85: 52:49:34:01:38:ed:48:0a:e1:c1:1a:3a:c8:2b:ee:6f:db:1a: 41:c9:5e:15:5c:d6:3e:a0:61:20:55:d1:fe:77:4d:92:8b:77: 30:40:6d:85:d9:11:70:95:d9:65:b8:53:a3:5d:91:92:6f:51: a6:13:c8:96:53:04:ca:0d:6b:9b:30:c9:1f:cb:4c:5e:fe:a4: 16:f6:15:04:2d:e0:66:53:32:f9:3e:ea:99:85:16:6b:fb:e9: 41:3e:f4:91:f4:c4:41:0a:75:f2:44:a8:77:21:30:6f:0f:9b: 01:a7:c1:94:66:12:fe:13:f7:4f:f7:ac:4c:5d:67:75:07:83: 6c:36:66:ba:70:c4:a5:51:a1:b9:30:63:5e:48:44:f0:08:3d: 39:77:92:3c:43:d1:33:53:56:18:9e:bc:86:8b:d0:5b:12:3f: 68:57:ba:86:4b:71:96:be:72:b1:d4:23:e3:ae:a3:95:91:dd: 49:22:98:ae:d6:81:c1:fd:e7:32:c0:a8:51:e2:96:ff:10:9a: 3d:1e:80:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNF9V2f1ZYub4zvzviXsQrlzBOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTEyMDUwOTM1NDNaFw0yNTEyMDgxODA4NDNaMDMxMTAvBgNV BAMTKEE2MEQxOEYzRkIyNzg5QURGNEU3MjlBNDExNTZENkNFOTc3QjIyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6V3LllizgBIuflRJRZJZQCGP WyHC/+AzI2sQ5M7w/ftaavaDBzq2Y6L/AkjQjllfZOXmF+JPii07am6XIlwEUpr2 gkeYvDYeXozL5YfssLBhNQvG7FEzlRCNBE0aP0gn114jSNEXX3TrggmeEVGc/Mn/ wyXPhpbKw49AG5L2Ec16Hj+qfSvcw9hpKSNFAwYkgBekAvvL1iUlDeAFN8HRtEIe ebcv6b49i25B7EOaNzjN7PSWpyNgFuMtS8OuOqLsvDb9a7TF4qR1RWoK64nrxPkE K/tAB7budzELJ5QELBphiF9lUJDFnIFASis0k8kwATBTairpaX0l2Z05xUzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpg0Y8/snia305ymkEVbWzpd7IoowHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACv+saXA5q4rJ317e4rxHHpDETGDfHMxgi12 S5BtfGtrWfs6zkJkneW0oQ/anX5OrfFvGzrQhVJJNAE47UgK4cEaOsgr7m/bGkHJ XhVc1j6gYSBV0f53TZKLdzBAbYXZEXCV2WW4U6NdkZJvUaYTyJZTBMoNa5swyR/L TF7+pBb2FQQt4GZTMvk+6pmFFmv76UE+9JH0xEEKdfJEqHchMG8PmwGnwZRmEv4T 90/3rExdZ3UHg2w2ZrpwxKVRobkwY15IRPAIPTl3kjxD0TNTVhievIaL0FsSP2hX uoZLcZa+crHUI+Ouo5WR3UkimK7WgcH95zLAqFHilv8Qmj0egCU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:50:53 2025 by rpki-client