This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: cfFjm286DSqLDCSBA6qE7qfNg2NSJaGwxFQkujsgV8E= Subject key identifier: A9:5C:18:E8:33:C5:E4:91:81:41:BD:50:31:A9:F3:C4:DE:6D:A4:5D Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 5E6D04F3EBEAB9D67B8AF719D30D73A57A4C101D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: E7 Signing time: Sat 06 Dec 2025 16:10:50 +0000 Manifest this update: Sat 06 Dec 2025 16:05:49 +0000 Manifest next update: Tue 09 Dec 2025 23:55:49 +0000 Files and hashes: 1: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) 2: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: IrYpQjbo3+ZIvHXEhIuTR5OW76a52k8BSM2byH8ZZbo=) 3: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6d:04:f3:eb:ea:b9:d6:7b:8a:f7:19:d3:0d:73:a5:7a:4c:10:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Dec 6 16:05:49 2025 GMT Not After : Dec 9 23:55:49 2025 GMT Subject: CN=A95C18E833C5E4918141BD5031A9F3C4DE6DA45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:59:2a:f9:3a:40:fb:4e:f6:86:11:3a:a2: 3b:e8:ec:b1:c0:7e:18:2a:c7:df:44:d2:ce:de:c4: e3:cc:8c:71:e4:f7:7d:7a:e1:32:e0:d6:e3:88:9e: 34:03:cc:01:8d:1a:19:bb:a2:46:3f:6a:cf:49:29: 4f:15:f8:6f:73:45:a4:cd:42:19:79:65:ac:55:c4: fb:a5:d4:22:bd:e7:82:7f:9f:56:91:59:ab:db:b3: 91:40:17:c5:a3:45:0f:57:ff:09:6f:1e:fd:fa:bb: 8a:56:db:df:78:40:af:44:81:73:51:54:38:c1:e9: aa:97:5b:f8:54:e0:51:40:7f:8c:9d:9f:e0:00:3b: a9:73:13:9c:f6:de:40:d8:5f:bb:f4:d4:2c:77:3e: 00:d0:7a:ce:31:17:d0:7d:7a:69:2d:4c:85:b0:cc: 49:6a:ac:4f:07:28:a8:ce:46:3f:3a:c0:57:c8:61: d7:4e:29:9e:d4:31:0c:fb:a0:66:e6:41:a3:2d:54: 76:0a:25:61:ad:e6:9e:72:c4:03:fa:33:bd:87:ba: fb:76:d0:0d:5a:ea:78:cb:83:3c:25:92:3a:0e:6d: 32:df:99:69:70:81:a6:9d:50:7b:3d:60:25:22:cd: de:09:62:30:18:30:98:38:e4:84:cc:f1:62:2f:a3: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5C:18:E8:33:C5:E4:91:81:41:BD:50:31:A9:F3:C4:DE:6D:A4:5D X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:09:67:d5:42:4e:6a:33:f2:fd:e7:ae:e4:79:75:ab:b6:a7: 62:d9:cd:59:31:40:29:c5:de:ba:03:1e:08:37:54:67:fa:3c: a6:6c:cd:39:91:22:eb:eb:c6:2a:00:fb:ad:1b:e4:f5:2d:3d: 34:5e:25:23:56:c1:ae:b7:19:66:3e:a3:88:09:3d:05:dd:0d: 73:58:94:f8:4a:65:fc:97:a1:07:ed:9e:0b:10:49:6b:60:9f: 21:b3:34:1f:24:bf:42:f1:e7:13:95:d4:12:4d:08:8d:e2:ca: fd:d2:44:cf:7c:96:a3:38:42:0d:f3:43:38:d6:ac:8f:7f:e2: ec:9e:6d:44:86:df:e5:0b:f9:cd:3d:f3:ba:7c:c4:4c:e6:84: e1:e9:d4:51:e1:a7:99:bd:f3:35:88:13:a1:99:f3:a1:5f:5b: 8e:12:f9:9a:32:95:6a:b2:ab:07:91:47:75:82:70:91:50:0b: e7:37:c8:e7:74:fe:ba:7a:d0:9a:8d:a4:c5:8d:75:cd:4d:3c: d3:f1:27:b9:1c:d5:57:fc:3d:92:91:f4:d0:d4:58:93:40:17: 57:b3:07:5d:0b:98:57:cd:82:c5:32:ae:72:3b:3e:d1:0d:31: 60:64:ab:2f:81:be:31:9b:28:8c:b4:35:b0:86:90:48:d3:c0: 05:b8:aa:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXm0E8+vqudZ7ivcZ0w1zpXpMEB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTEyMDYxNjA1NDlaFw0yNTEyMDkyMzU1NDlaMDMxMTAvBgNV BAMTKEE5NUMxOEU4MzNDNUU0OTE4MTQxQkQ1MDMxQTlGM0M0REU2REE0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OFkq+TpA+072hhE6ojvo7LHA fhgqx99E0s7exOPMjHHk93164TLg1uOInjQDzAGNGhm7okY/as9JKU8V+G9zRaTN Qhl5ZaxVxPul1CK954J/n1aRWavbs5FAF8WjRQ9X/wlvHv36u4pW2994QK9EgXNR VDjB6aqXW/hU4FFAf4ydn+AAO6lzE5z23kDYX7v01Cx3PgDQes4xF9B9emktTIWw zElqrE8HKKjORj86wFfIYddOKZ7UMQz7oGbmQaMtVHYKJWGt5p5yxAP6M72Huvt2 0A1a6njLgzwlkjoObTLfmWlwgaadUHs9YCUizd4JYjAYMJg45ITM8WIvo8UxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqVwY6DPF5JGBQb1QManzxN5tpF0wHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8JZ9VCTmoz8v3nruR5dau2p2LZzVkxQCnF 3roDHgg3VGf6PKZszTmRIuvrxioA+60b5PUtPTReJSNWwa63GWY+o4gJPQXdDXNY lPhKZfyXoQftngsQSWtgnyGzNB8kv0Lx5xOV1BJNCI3iyv3SRM98lqM4Qg3zQzjW rI9/4uyebUSG3+UL+c0987p8xEzmhOHp1FHhp5m98zWIE6GZ86FfW44S+ZoylWqy qweRR3WCcJFQC+c3yOd0/rp60JqNpMWNdc1NPNPxJ7kc1Vf8PZKR9NDUWJNAF1ez B10LmFfNgsUyrnI7PtENMWBkqy+BvjGbKIy0NbCGkEjTwAW4qgQ= -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:27 2025 by rpki-client