This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: 70LCw+MZdHwf/v9tvy886MG2n90xn9JQtt7PHnEB42o= Subject key identifier: 38:0E:10:6C:87:5F:37:92:23:1C:5C:F3:4D:49:D9:85:8D:07:F0:51 Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 480FCEA8089D8CE6D9BCADEBD4B329DF1BAE3AF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: 0136 Signing time: Fri 05 Dec 2025 01:42:03 +0000 Manifest this update: Fri 05 Dec 2025 01:37:03 +0000 Manifest next update: Mon 08 Dec 2025 09:58:03 +0000 Files and hashes: 1: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: +I5heW9usC3g2V3ncP2BbzxquKjOSk/cY9LMtr15d84=) 2: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: 3vD40EFSibX8+W04rd2m5Nlm7qEoeZXgcDbhAe8WGM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0f:ce:a8:08:9d:8c:e6:d9:bc:ad:eb:d4:b3:29:df:1b:ae:3a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Dec 5 01:37:03 2025 GMT Not After : Dec 8 09:58:03 2025 GMT Subject: CN=380E106C875F3792231C5CF34D49D9858D07F051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:68:27:82:3b:6c:36:92:ac:d8:3b:42:7a: b8:9f:7f:f5:92:5f:d3:ec:a2:63:d7:6b:90:17:c8: 33:73:2a:0c:5f:20:5b:2e:63:e3:82:47:98:13:ed: 93:d1:dc:5d:64:ad:82:c8:f7:8b:57:a1:35:b9:b1: a1:eb:60:21:88:ef:34:77:b2:da:14:25:ed:42:af: b5:44:66:e7:81:62:b7:0a:93:1d:13:e7:9d:8e:fe: 04:1d:c5:65:4e:e1:c9:01:5c:b3:07:d9:6a:f9:2a: 2e:f5:f3:ad:e1:fc:42:7a:8b:1c:db:05:9e:8e:6d: 5c:ea:1c:3f:00:1b:23:0a:79:2c:ac:ba:66:62:17: f7:e3:35:f1:20:5a:0f:79:80:3f:6b:05:c5:52:27: 96:b4:98:26:7c:97:d1:04:b1:a0:3e:c7:2c:7b:99: 25:e1:30:d3:e1:0f:e5:94:b1:3e:29:35:1b:e4:bb: 52:5f:34:cd:fb:91:8c:25:84:5e:ee:53:b0:f8:87: 92:b7:45:41:1f:1c:76:f5:56:89:6c:ad:c9:68:ef: 49:af:5a:46:3a:25:2d:e1:6a:c3:4b:e5:0c:7e:0e: 6d:af:69:e0:fa:8a:70:95:5f:3c:06:f1:a9:9c:4f: 6a:c7:5a:0d:72:a5:da:7f:17:20:98:a4:20:e5:53: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0E:10:6C:87:5F:37:92:23:1C:5C:F3:4D:49:D9:85:8D:07:F0:51 X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c8:e7:30:48:bf:2f:77:54:2a:cb:9c:02:29:09:bd:b8:1f: 1d:92:d3:37:a4:06:4a:99:03:df:fa:78:64:4b:6b:3b:a1:bb: ce:6c:04:67:12:ea:74:54:fc:b2:5a:eb:05:2b:bd:42:1b:05: f6:e7:7e:be:43:83:fa:10:55:a4:78:3b:5a:f9:aa:f5:ef:2d: 11:5c:aa:d7:69:8c:bf:b3:f5:8d:f3:0d:b9:d2:fe:7e:4c:f4: a9:bd:d5:ac:bb:f8:2b:00:c2:3e:5b:e5:fd:4a:66:0e:0b:03: 6f:f6:0b:b6:72:41:15:23:78:14:b3:9a:ad:6a:e2:9d:d8:81: 9d:ae:8d:01:2e:a5:24:58:02:97:3e:8b:b5:ae:84:3e:28:6a: 48:3e:48:9f:c1:02:93:52:50:83:30:90:9e:20:44:c5:50:20: 8f:75:15:33:e7:35:ae:48:e7:63:32:2f:41:d3:ce:1a:4d:68: c7:d3:22:83:8c:f5:a1:45:84:e9:6f:c7:df:92:86:5f:1a:c8: 87:b7:6e:55:50:c2:63:56:4e:ab:ba:a9:f9:d3:e0:30:e6:6a: c8:ef:cc:b3:ef:f2:66:d6:d3:e0:3d:19:3e:47:5b:15:8e:73: c3:64:c4:ac:2e:33:10:93:61:f9:fd:eb:0b:3a:4b:79:d7:7c: 5a:27:02:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSA/OqAidjObZvK3r1LMp3xuuOvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTEyMDUwMTM3MDNaFw0yNTEyMDgwOTU4MDNaMDMxMTAvBgNV BAMTKDM4MEUxMDZDODc1RjM3OTIyMzFDNUNGMzRENDlEOTg1OEQwN0YwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGWgngjtsNpKs2DtCeriff/WS X9PsomPXa5AXyDNzKgxfIFsuY+OCR5gT7ZPR3F1krYLI94tXoTW5saHrYCGI7zR3 stoUJe1Cr7VEZueBYrcKkx0T552O/gQdxWVO4ckBXLMH2Wr5Ki71863h/EJ6ixzb BZ6ObVzqHD8AGyMKeSysumZiF/fjNfEgWg95gD9rBcVSJ5a0mCZ8l9EEsaA+xyx7 mSXhMNPhD+WUsT4pNRvku1JfNM37kYwlhF7uU7D4h5K3RUEfHHb1Volsrclo70mv WkY6JS3hasNL5Qx+Dm2vaeD6inCVXzwG8amcT2rHWg1ypdp/FyCYpCDlU+stAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOA4QbIdfN5IjHFzzTUnZhY0H8FEwHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjI5zBIvy93VCrLnAIpCb24Hx2S0zekBkqZ A9/6eGRLazuhu85sBGcS6nRU/LJa6wUrvUIbBfbnfr5Dg/oQVaR4O1r5qvXvLRFc qtdpjL+z9Y3zDbnS/n5M9Km91ay7+CsAwj5b5f1KZg4LA2/2C7ZyQRUjeBSzmq1q 4p3YgZ2ujQEupSRYApc+i7WuhD4oakg+SJ/BApNSUIMwkJ4gRMVQII91FTPnNa5I 52MyL0HTzhpNaMfTIoOM9aFFhOlvx9+Shl8ayIe3blVQwmNWTqu6qfnT4DDmasjv zLPv8mbW0+A9GT5HWxWOc8NkxKwuMxCTYfn96ws6S3nXfFonAoQ= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:51 2025 by rpki-client