This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json)
Hash identifier: fCcD+F+DovH2Qu8c4zkNYsfEwKjPiQgyIGOMKPNDgck=
Subject key identifier: B8:FF:E8:90:B3:7C:F3:0F:C8:02:A0:9B:01:A8:D5:D4:05:0C:B6:55
Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F
Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F
Certificate serial: 73050AB47AC751E5670E9004668B308D8C8FF70E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
Manifest number: FA
Signing time: Sat 06 Dec 2025 12:01:18 +0000
Manifest this update: Sat 06 Dec 2025 11:56:18 +0000
Manifest next update: Tue 09 Dec 2025 17:02:18 +0000
Files and hashes: 1: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: MiGoU+24hCapXJRAgpbtZ2XrLakndlrC1c3teJhVvgM=)
2: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl
rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:05:0a:b4:7a:c7:51:e5:67:0e:90:04:66:8b:30:8d:8c:8f:f7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F
Validity
Not Before: Dec 6 11:56:18 2025 GMT
Not After : Dec 9 17:02:18 2025 GMT
Subject: CN=B8FFE890B37CF30FC802A09B01A8D5D4050CB655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:b2:1f:8d:61:83:c3:2e:b0:73:98:e3:61:
93:33:ec:23:d7:d0:3f:f0:48:1a:fb:a0:76:1f:9b:
ec:f8:2a:fc:4d:d4:9a:bb:54:9b:78:3e:54:c0:de:
b5:17:ab:e2:74:1b:e2:99:6a:2a:bc:58:fe:3b:03:
c3:22:fb:fe:30:54:94:92:d7:16:ba:89:a9:4b:04:
08:68:11:bf:fe:ff:69:fa:4d:75:51:f2:05:fb:97:
9c:fb:a2:0c:ce:7f:65:22:61:de:5a:8e:dd:94:05:
a7:6c:1b:71:d9:b5:82:f1:59:e0:09:a6:11:9f:4f:
ac:e7:dc:47:fb:f4:32:42:03:c5:f6:5d:e7:7a:75:
47:28:3f:01:58:2b:4d:71:8a:80:6e:44:99:47:77:
57:25:00:bb:53:b6:33:d1:cb:d4:bf:40:bf:2f:dd:
f0:70:d0:0c:3b:53:f6:1a:ce:2a:43:4e:76:c5:ba:
46:90:cb:63:f7:d0:fe:f7:fd:6e:80:65:67:7f:ac:
1e:ce:50:63:61:7b:b6:79:5a:4b:14:91:8b:5c:d6:
9e:cd:23:93:a6:f8:fd:18:33:cf:04:df:a7:a9:c5:
b6:6f:36:f2:f6:f7:25:cb:99:5a:ac:34:bf:58:45:
1b:32:69:65:95:ab:3f:c0:4b:47:73:d9:a3:d6:39:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FF:E8:90:B3:7C:F3:0F:C8:02:A0:9B:01:A8:D5:D4:05:0C:B6:55
X509v3 Authority Key Identifier:
keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:84:2f:33:33:eb:26:fb:d3:e9:60:58:4c:8e:3d:82:3e:12:
b4:3e:a9:ee:13:89:58:d4:28:04:d8:35:57:e9:1b:7c:ab:90:
1e:d4:cf:f1:41:c7:a7:d6:8c:32:3a:d0:01:a5:2c:9d:07:ad:
d1:69:de:c3:2c:6e:9f:7b:db:7e:ec:91:52:a3:6e:df:b6:2f:
2a:a2:85:ac:bb:16:ca:8f:c1:2a:66:e5:b5:88:88:7b:ba:ee:
dc:7b:2e:9d:bd:5b:aa:03:9a:fb:8e:e6:4c:84:7c:d6:61:c2:
2d:2c:fc:12:1f:52:99:5f:77:51:d4:cd:75:b5:58:8a:0c:e6:
aa:bd:1f:14:e6:78:f3:21:55:6d:8a:dc:95:50:20:9a:4a:7a:
67:6b:f6:aa:d5:51:49:dc:32:18:3d:ca:c7:12:fc:72:94:f1:
69:9c:35:da:b5:90:75:f3:1f:e2:7b:8f:d8:23:54:b2:6d:99:
4f:e3:86:c8:d7:54:e3:97:78:d7:01:35:52:dc:8b:1c:34:6a:
43:f4:27:51:9a:ea:70:35:83:95:08:a1:20:26:a1:18:bd:0e:
2d:bd:83:0f:79:3c:e6:7f:7b:af:51:ee:03:2c:b8:a6:44:19:
be:35:a9:0e:9e:18:0f:57:18:5e:b9:8e:9c:ba:7f:fb:e6:a8:
f4:77:60:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:01:08 2025 by rpki-client