This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft File: 6DBEA32A7EE18535066521365EFB05C4148698C9.mft (raw, json) Hash identifier: efwrZsIbAocV0IdiOiZrT6/3KLKBCZBx4mLvRWglCBs= Subject key identifier: 05:D4:CF:E1:87:F9:BD:3A:E7:76:78:7B:07:A5:71:C6:E3:A0:ED:F4 Authority key identifier: 6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 Certificate issuer: /CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Certificate serial: 21FE6E00036575B107455EDF47D0D0AB9C8EC135 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft Manifest number: 052A Signing time: Thu 04 Dec 2025 18:42:57 +0000 Manifest this update: Thu 04 Dec 2025 18:37:57 +0000 Manifest next update: Sun 07 Dec 2025 20:57:57 +0000 Files and hashes: 1: 6DBEA32A7EE18535066521365EFB05C4148698C9.crl (hash: XSnt6CT9Cj0+0jXhSIci5oX3I47+r6AjEZE85l4J4o4=) 2: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: Py1k6xmnp+wD3zAOREcnFDtaHJ01Rtyy2hDt3IzTRvw=) 3: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: ZX6Ox+wx5nbIu1GT16bLGXKsL0RQ4fgAjbd+X3UIku8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 20:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fe:6e:00:03:65:75:b1:07:45:5e:df:47:d0:d0:ab:9c:8e:c1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Validity Not Before: Dec 4 18:37:57 2025 GMT Not After : Dec 7 20:57:57 2025 GMT Subject: CN=05D4CFE187F9BD3AE776787B07A571C6E3A0EDF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:1e:a3:8f:ef:af:d0:dd:ef:8d:a7:ae:72: 2e:82:83:35:0d:ef:ff:97:4e:ea:4c:2e:37:4d:f8: 1e:bf:fa:14:5f:c5:98:71:cd:25:12:76:8c:a6:cc: 36:44:b7:0c:36:ca:b4:b4:85:df:1b:9d:84:09:ce: f3:65:fb:66:de:dd:c3:b9:4a:3f:9c:b1:76:a3:24: 27:f3:b8:d3:9d:7e:9e:a2:98:a2:db:17:7b:aa:5c: bb:c7:60:8a:7f:01:32:19:d2:b4:7d:6f:ba:58:f5: 61:b0:b6:41:17:ae:1a:5d:80:3d:01:f2:2a:b3:1f: 69:90:06:c4:34:10:2b:db:f2:10:ff:50:dd:33:04: 7b:0f:cc:25:1c:4e:f9:8f:cf:55:18:da:64:8d:6f: d6:8c:48:82:72:b0:1c:c3:c4:92:6a:75:3a:5d:1d: 7d:98:05:6e:34:72:c7:50:9f:1a:05:e2:67:db:91: fb:74:c8:4f:71:40:0d:be:55:a1:91:80:30:09:49: 35:66:dc:f5:35:7f:da:6f:20:e0:57:8a:e3:7c:24: de:73:ee:23:95:14:a6:a2:99:9e:23:f7:39:ef:5d: 79:7c:25:c4:3b:4e:f9:a2:1c:3a:31:31:f1:09:20: a5:ad:46:bf:1b:bb:a9:63:2a:3a:75:a5:c3:95:ee: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D4:CF:E1:87:F9:BD:3A:E7:76:78:7B:07:A5:71:C6:E3:A0:ED:F4 X509v3 Authority Key Identifier: keyid:6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fe:ac:d8:3c:55:95:46:6e:92:aa:38:04:b8:63:3f:69:17: 60:e4:70:b6:61:31:77:c7:17:11:a1:29:54:e0:96:ef:43:9b: 23:f8:52:00:dc:26:a6:f6:ac:7b:52:9e:28:b6:c1:23:73:41: c0:96:8f:c4:ba:d5:8a:bd:72:4c:5e:bc:61:80:47:b2:da:32: d4:e0:67:0f:63:30:90:d3:69:d6:02:07:46:dd:c2:6e:83:60: 88:1c:b4:9c:2a:a2:8b:81:12:2d:4e:75:cd:e9:1f:2a:31:5b: c9:28:78:40:3a:bd:44:8c:21:5a:f6:ba:db:37:e3:00:57:48: 67:48:22:01:69:b3:e5:87:d0:84:56:31:7e:c5:f6:dd:a7:fe: d1:c4:1c:68:aa:83:97:b2:1e:f2:ae:1c:4b:55:41:84:20:82: 7b:6b:1e:99:d6:41:24:78:27:aa:2f:b4:ee:ca:64:ae:85:fb: fd:81:57:88:c9:2a:48:fa:d9:91:59:46:c4:85:a5:d4:d5:ac: 9b:2a:d4:18:d0:ff:c8:00:61:dd:70:a5:73:86:24:7b:00:1a: 50:4e:45:cc:59:1e:c2:24:47:7e:49:73:c9:a7:d7:42:71:27: d0:e9:11:a0:13:aa:38:09:6e:87:d5:5c:de:36:78:3f:a0:8c: e8:17:7d:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIf5uAANldbEHRV7fR9DQq5yOwTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQx NDg2OThDOTAeFw0yNTEyMDQxODM3NTdaFw0yNTEyMDcyMDU3NTdaMDMxMTAvBgNV BAMTKDA1RDRDRkUxODdGOUJEM0FFNzc2Nzg3QjA3QTU3MUM2RTNBMEVERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dx6jj++v0N3vjaeuci6CgzUN 7/+XTupMLjdN+B6/+hRfxZhxzSUSdoymzDZEtww2yrS0hd8bnYQJzvNl+2be3cO5 Sj+csXajJCfzuNOdfp6imKLbF3uqXLvHYIp/ATIZ0rR9b7pY9WGwtkEXrhpdgD0B 8iqzH2mQBsQ0ECvb8hD/UN0zBHsPzCUcTvmPz1UY2mSNb9aMSIJysBzDxJJqdTpd HX2YBW40csdQnxoF4mfbkft0yE9xQA2+VaGRgDAJSTVm3PU1f9pvIOBXiuN8JN5z 7iOVFKaimZ4j9znvXXl8JcQ7TvmiHDoxMfEJIKWtRr8bu6ljKjp1pcOV7iCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdTP4Yf5vTrndnh7B6VxxuOg7fQwHwYDVR0j BBgwFoAUbb6jKn7hhTUGZSE2XvsFxBSGmMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ4ODBkNC1jMzNlLTQwMWUtYjQ2OC1hNWE2YThhYWYzZDcvMC82REJFQTMyQTdF RTE4NTM1MDY2NTIxMzY1RUZCMDVDNDE0ODY5OEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQxNDg2 OThDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1 QzQxNDg2OThDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3+rNg8VZVGbpKqOAS4Yz9pF2DkcLZhMXfH FxGhKVTglu9DmyP4UgDcJqb2rHtSnii2wSNzQcCWj8S61Yq9ckxevGGAR7LaMtTg Zw9jMJDTadYCB0bdwm6DYIgctJwqoouBEi1Odc3pHyoxW8koeEA6vUSMIVr2uts3 4wBXSGdIIgFps+WH0IRWMX7F9t2n/tHEHGiqg5eyHvKuHEtVQYQggntrHpnWQSR4 J6ovtO7KZK6F+/2BV4jJKkj62ZFZRsSFpdTVrJsq1BjQ/8gAYd1wpXOGJHsAGlBO RcxZHsIkR35Jc8mn10JxJ9DpEaATqjgJbofVXN42eD+gjOgXfQU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:08 2025 by rpki-client