This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft File: 6592459773B9BF90E892EF4DE9361A991482809F.mft (raw, json) Hash identifier: hStu64Lt3zWwBDM4hxDPy18lifAn16EKBGfr5aq48PI= Subject key identifier: 2E:0E:8B:F5:65:50:30:0A:F4:A9:DF:6E:1D:D0:B5:5F:13:A2:EA:59 Authority key identifier: 65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F Certificate issuer: /CN=6592459773B9BF90E892EF4DE9361A991482809F Certificate serial: 7D96EB19A12656F2A9D586EFB0D43ED196633A4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft Manifest number: 018C Signing time: Thu 04 Dec 2025 14:12:25 +0000 Manifest this update: Thu 04 Dec 2025 14:07:25 +0000 Manifest next update: Sun 07 Dec 2025 23:33:25 +0000 Files and hashes: 1: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: Yqses+sM6Ch7Yy0wlsERwjD51XaycOIOWt4JofJnhIQ=) 2: 6592459773B9BF90E892EF4DE9361A991482809F.crl (hash: nECca/Fr/00h5B6u4uVHNyipe+ZOWax6rVOjgTaaT+8=) 3: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: OzDPsQ0j/kOveCiQy/dCFt8m39AccV/cQJY2lcE/LQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 23:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:96:eb:19:a1:26:56:f2:a9:d5:86:ef:b0:d4:3e:d1:96:63:3a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6592459773B9BF90E892EF4DE9361A991482809F Validity Not Before: Dec 4 14:07:25 2025 GMT Not After : Dec 7 23:33:25 2025 GMT Subject: CN=2E0E8BF56550300AF4A9DF6E1DD0B55F13A2EA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:30:07:f8:7d:f6:e8:96:23:88:2f:f5:19: 3b:82:49:52:4b:a3:c8:bb:b3:9c:a3:f9:13:2c:44: 19:41:69:70:1d:e7:64:f3:f1:93:d9:56:35:df:08: 8e:78:66:94:e3:08:25:17:9b:7f:b9:76:04:81:f6: 0d:01:bf:6b:da:b1:56:4d:35:70:7c:47:43:43:0e: 50:44:a1:1f:d5:28:17:21:2f:39:c6:f9:58:13:86: ad:24:5f:61:0f:c7:fc:73:fa:fe:9b:27:f0:8c:72: eb:76:2a:2c:80:3f:37:99:d0:13:eb:5a:1c:27:c6: 2f:1b:d0:09:11:0a:43:56:d9:62:82:7c:a2:b1:70: 13:4c:e9:5d:dc:c9:67:9a:07:40:27:d9:58:95:46: 8a:72:60:1f:cb:76:26:f2:7e:1a:22:68:0e:7a:b3: 54:66:06:e2:a4:99:8e:9c:b5:1d:b0:b0:a9:56:1e: 3e:17:7e:24:0e:8e:38:10:06:11:70:a3:71:e7:b3: cd:cb:e2:46:08:94:fe:90:01:67:24:6d:11:7b:9d: d1:d4:43:5d:71:87:25:67:2d:c7:5c:2f:8a:99:05: b1:50:67:f5:4f:d3:d4:06:c9:5a:5f:7a:b5:16:11: d3:6b:e1:19:c6:d8:64:ec:07:9d:bc:a5:2a:04:1f: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0E:8B:F5:65:50:30:0A:F4:A9:DF:6E:1D:D0:B5:5F:13:A2:EA:59 X509v3 Authority Key Identifier: keyid:65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:15:cf:e7:e4:75:50:ee:29:0d:a5:b8:06:da:bb:a4:e4:d8: a0:42:61:47:e1:ea:64:27:82:5e:81:1b:af:f8:5d:96:a2:e0: 16:28:ba:f6:b5:7b:6e:fd:4c:c3:19:4e:8d:0a:ca:93:ae:14: 5a:c2:a4:88:19:49:71:b5:f9:de:1c:c7:bb:28:1a:b7:01:a2: 0a:9f:e6:e9:92:b3:3f:18:0b:fd:71:3f:e4:17:b3:4f:b3:cf: 7d:1f:6d:c6:27:9a:ee:16:12:55:b8:95:61:72:d3:4b:51:e1: e0:d0:6d:93:cb:7e:c2:52:42:91:84:e7:58:c7:6b:cf:d1:a3: 3c:7c:e3:3d:4a:71:df:b8:d3:e4:27:9d:c4:9f:21:ee:42:33: f1:82:d2:9e:2d:a1:72:a6:24:d6:a9:94:f2:bf:56:be:0c:37: 75:de:84:43:d9:ba:08:f7:05:7b:ec:0b:ac:e0:26:e4:ad:3c: 26:5d:80:88:81:b4:96:ad:84:94:dd:cf:69:e8:bd:da:aa:a7: 92:20:74:c7:f6:3e:54:86:5e:9c:51:27:77:22:ea:66:50:a1: 8e:a6:29:41:40:cb:3c:8d:40:a7:d3:67:e4:d2:da:30:b9:3a: 78:47:57:b1:bf:ba:40:37:a3:b6:8e:e6:dd:51:85:a3:9b:92: 55:ef:0a:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZbrGaEmVvKp1YbvsNQ+0ZZjOk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU5MjQ1OTc3M0I5QkY5MEU4OTJFRjRERTkzNjFBOTkx NDgyODA5RjAeFw0yNTEyMDQxNDA3MjVaFw0yNTEyMDcyMzMzMjVaMDMxMTAvBgNV BAMTKDJFMEU4QkY1NjU1MDMwMEFGNEE5REY2RTFERDBCNTVGMTNBMkVBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sTAH+H326JYjiC/1GTuCSVJL o8i7s5yj+RMsRBlBaXAd52Tz8ZPZVjXfCI54ZpTjCCUXm3+5dgSB9g0Bv2vasVZN NXB8R0NDDlBEoR/VKBchLznG+VgThq0kX2EPx/xz+v6bJ/CMcut2KiyAPzeZ0BPr Whwnxi8b0AkRCkNW2WKCfKKxcBNM6V3cyWeaB0An2ViVRopyYB/LdibyfhoiaA56 s1RmBuKkmY6ctR2wsKlWHj4XfiQOjjgQBhFwo3Hns83L4kYIlP6QAWckbRF7ndHU Q11xhyVnLcdcL4qZBbFQZ/VP09QGyVpferUWEdNr4RnG2GTsB528pSoEHwWVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULg6L9WVQMAr0qd9uHdC1XxOi6lkwHwYDVR0j BBgwFoAUZZJFl3O5v5Doku9N6TYamRSCgJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODc4YzA2Mi1iMDkyLTQwMjUtOWI2OC1iZmViOWI2NWE1YTAvMC82NTkyNDU5Nzcz QjlCRjkwRTg5MkVGNERFOTM2MUE5OTE0ODI4MDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU5MjQ1OTc3M0I5QkY5MEU4OTJFRjRERTkzNjFBOTkxNDgy ODA5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvNjU5MjQ1OTc3M0I5QkY5MEU4OTJFRjRERTkzNjFB OTkxNDgyODA5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEVz+fkdVDuKQ2luAbau6Tk2KBCYUfh6mQn gl6BG6/4XZai4BYouva1e279TMMZTo0KypOuFFrCpIgZSXG1+d4cx7soGrcBogqf 5umSsz8YC/1xP+QXs0+zz30fbcYnmu4WElW4lWFy00tR4eDQbZPLfsJSQpGE51jH a8/Rozx84z1Kcd+40+QnncSfIe5CM/GC0p4toXKmJNaplPK/Vr4MN3XehEPZugj3 BXvsC6zgJuStPCZdgIiBtJathJTdz2novdqqp5IgdMf2PlSGXpxRJ3ci6mZQoY6m KUFAyzyNQKfTZ+TS2jC5OnhHV7G/ukA3o7aO5t1RhaObklXvCos= -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:44 2025 by rpki-client