This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: MU+wZQ+Xp4bO7TCOt1pClSX32nJ6eUA+fDts9ViLFHw= Subject key identifier: 32:CD:DA:1E:75:E9:F7:22:70:06:DD:A1:93:46:DC:2D:12:CA:4E:A8 Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 3C54965D6C95D9D4984A38E065F0DAD3BE0DC399 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: B5 Signing time: Fri 05 Dec 2025 17:11:30 +0000 Manifest this update: Fri 05 Dec 2025 17:06:30 +0000 Manifest next update: Mon 08 Dec 2025 18:20:30 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=) 2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: T3JL/cIKzHS1g2aI7HmP59TZd3LgO5krZAvffCiTc3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:54:96:5d:6c:95:d9:d4:98:4a:38:e0:65:f0:da:d3:be:0d:c3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Dec 5 17:06:30 2025 GMT Not After : Dec 8 18:20:30 2025 GMT Subject: CN=32CDDA1E75E9F7227006DDA19346DC2D12CA4EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:16:33:8f:da:c3:1b:f5:27:42:65:d0:64: c3:87:35:b2:52:71:21:4c:e6:46:5c:ad:a0:35:46: a3:33:f6:89:76:0b:c5:ee:14:76:60:a9:77:4c:ba: 3a:ff:2b:47:04:db:3d:26:cf:e3:59:a7:f3:42:57: 0d:13:a4:83:4a:49:7d:59:f7:b3:35:80:c8:c9:28: 35:d6:de:4a:86:ab:e6:3d:a6:07:53:2b:c7:84:89: 59:a1:a0:f8:5f:b0:73:34:fe:cd:c9:8b:80:a4:d1: b9:ed:3e:64:1c:62:3d:8f:e5:4c:bd:40:00:84:66: 92:fd:3b:f0:f9:3b:79:bb:9d:fe:f8:00:fd:2b:9a: 71:17:9d:3c:c5:01:fd:00:4b:f0:28:9c:48:3b:ee: cc:73:ef:74:93:50:98:cd:cd:42:be:fc:a7:f7:fb: 47:dc:ec:00:8a:e0:0c:c2:94:d0:ae:a3:bf:76:c1: 74:c4:c2:18:9d:5f:07:2c:56:a5:f8:9e:a6:c0:fb: d3:b6:61:8d:c9:a3:1b:f5:f5:5f:a9:eb:4f:39:37: 64:c3:25:e7:53:b0:60:57:fc:4d:a1:67:2e:af:c3: 6a:db:9e:25:e2:61:d2:bf:19:bd:04:86:61:2f:ef: 3a:68:dd:b6:dc:2a:ba:ad:7d:15:54:0d:98:5d:39: da:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CD:DA:1E:75:E9:F7:22:70:06:DD:A1:93:46:DC:2D:12:CA:4E:A8 X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:66:58:3e:0f:8d:9a:a9:70:55:71:cd:63:f1:08:8e:d0:f4: 47:6a:7f:2b:b7:55:2d:e6:ef:b4:3a:d1:a9:01:53:1c:82:84: 0f:30:22:35:70:49:8d:19:87:40:4a:bb:6e:db:88:2f:c7:e1: 4a:1a:85:2b:49:8e:b3:6d:03:a6:56:34:c7:0f:28:9a:a5:91: 1e:56:d1:24:b5:c8:d2:38:c3:bc:1b:d4:75:e5:62:4b:de:25: 00:cb:12:7e:cd:2d:e9:d7:5c:8e:66:b4:eb:cc:63:71:aa:9a: 6b:73:62:4f:08:43:df:49:d9:c8:f4:9a:54:58:ad:60:cb:87: 6c:81:9c:1a:f4:ca:f6:c5:79:d1:b4:36:37:d0:d4:6c:74:fe: 7c:07:ca:c9:54:5b:b7:fb:30:e8:66:39:8a:61:7c:7a:9a:34: b2:ca:a1:3f:87:82:80:ba:e8:cf:68:d2:c9:38:6c:f3:58:b5: 35:ef:b2:a7:44:0b:06:dc:62:07:48:9a:68:72:ee:5f:6a:e4: cd:2f:3c:10:74:02:02:94:f4:a0:45:48:5b:d2:b6:cb:c5:44: 35:46:b3:d8:89:2c:df:6e:aa:89:f1:04:65:44:ab:1b:ce:f3: c1:3e:c0:62:53:26:b6:17:ec:63:99:f1:00:7d:91:d1:89:76: 6c:b8:37:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPFSWXWyV2dSYSjjgZfDa074Nw5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTEyMDUxNzA2MzBaFw0yNTEyMDgxODIwMzBaMDMxMTAvBgNV BAMTKDMyQ0REQTFFNzVFOUY3MjI3MDA2RERBMTkzNDZEQzJEMTJDQTRFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TBYzj9rDG/UnQmXQZMOHNbJS cSFM5kZcraA1RqMz9ol2C8XuFHZgqXdMujr/K0cE2z0mz+NZp/NCVw0TpINKSX1Z 97M1gMjJKDXW3kqGq+Y9pgdTK8eEiVmhoPhfsHM0/s3Ji4Ck0bntPmQcYj2P5Uy9 QACEZpL9O/D5O3m7nf74AP0rmnEXnTzFAf0AS/AonEg77sxz73STUJjNzUK+/Kf3 +0fc7ACK4AzClNCuo792wXTEwhidXwcsVqX4nqbA+9O2YY3Joxv19V+p6085N2TD JedTsGBX/E2hZy6vw2rbniXiYdK/Gb0EhmEv7zpo3bbcKrqtfRVUDZhdOdpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMs3aHnXp9yJwBt2hk0bcLRLKTqgwHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdmWD4PjZqpcFVxzWPxCI7Q9Edqfyu3VS3m 77Q60akBUxyChA8wIjVwSY0Zh0BKu27biC/H4UoahStJjrNtA6ZWNMcPKJqlkR5W 0SS1yNI4w7wb1HXlYkveJQDLEn7NLenXXI5mtOvMY3GqmmtzYk8IQ99J2cj0mlRY rWDLh2yBnBr0yvbFedG0NjfQ1Gx0/nwHyslUW7f7MOhmOYphfHqaNLLKoT+HgoC6 6M9o0sk4bPNYtTXvsqdECwbcYgdImmhy7l9q5M0vPBB0AgKU9KBFSFvStsvFRDVG s9iJLN9uqonxBGVEqxvO88E+wGJTJrYX7GOZ8QB9kdGJdmy4N2E= -----END CERTIFICATE-----Generated at Sun Dec 7 01:36:09 2025 by rpki-client