This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft File: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft (raw, json) Hash identifier: n8AEJC3v71mI/cMxGY6Io1oe8C3CbvpwoElwpgJs0sE= Subject key identifier: 10:8D:DE:34:B2:08:FB:8D:E8:0B:59:5C:84:74:60:1D:B4:CE:80:E5 Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Certificate serial: 6B36955C71C4DE4247B9AC08605F6E01D563B8C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft Manifest number: 02D1 Signing time: Fri 05 Dec 2025 05:31:19 +0000 Manifest this update: Fri 05 Dec 2025 05:26:19 +0000 Manifest next update: Mon 08 Dec 2025 10:34:19 +0000 Files and hashes: 1: 3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa (hash: 1qisgGmZ4ZLz1lme/uSxLcvbwX2pXl2QEYezWVi61a0=) 2: 3130332e3137342e31362e302f32342d3234203d3e20313437303933.roa (hash: KF7nH5pW5/ZblyJqWbcvRko2OuzeK910SdQ0o3we0k8=) 3: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl (hash: JjiY9aVrrl3G9bCCmsb45edhHXYmflJaF2b+5L45yOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:36:95:5c:71:c4:de:42:47:b9:ac:08:60:5f:6e:01:d5:63:b8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Validity Not Before: Dec 5 05:26:19 2025 GMT Not After : Dec 8 10:34:19 2025 GMT Subject: CN=108DDE34B208FB8DE80B595C8474601DB4CE80E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:c5:ec:32:2d:92:8b:9e:c0:b9:dd:1e:52: b5:5c:0e:c8:6c:c9:2b:58:f1:bd:63:3f:c7:ed:40: 19:36:ff:74:fc:e4:0d:3d:c1:2b:6a:36:86:5c:39: b3:84:38:6d:f7:85:cb:dc:46:91:18:b1:b2:d4:cb: a3:de:35:65:49:a9:aa:bc:0b:5d:29:65:76:d4:7f: a7:2e:8c:4c:ec:dc:e4:45:69:05:f4:f2:4c:e2:46: 0d:a9:c7:d6:f5:59:c2:9b:00:16:7a:ce:27:ca:23: 31:3b:f3:9f:a6:d8:67:6d:45:4d:4f:84:88:87:f1: b2:70:b6:ea:d8:fb:fb:4e:0e:7e:f8:d1:dd:9f:12: 2f:9a:a2:cc:b3:7c:03:b8:03:d9:80:13:e1:a0:1c: 82:7d:a7:dc:a8:1c:1a:0d:99:3a:ef:6b:48:76:f0: a0:30:11:eb:ee:0c:c9:f7:ad:1f:97:5d:92:01:64: 92:2a:fd:07:2f:97:42:58:55:9e:17:bf:f6:7e:58: f8:e8:e2:ad:92:91:81:08:66:2a:4f:48:71:df:82: e4:96:62:f7:be:b1:d6:3d:ee:a1:68:20:10:12:b0: e6:f5:15:f5:fb:6c:88:fd:f5:08:9a:06:a2:20:40: 03:6c:7e:67:9e:9c:0d:0c:d5:92:9c:f7:3a:39:86: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8D:DE:34:B2:08:FB:8D:E8:0B:59:5C:84:74:60:1D:B4:CE:80:E5 X509v3 Authority Key Identifier: keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:9f:bf:b5:45:87:8b:fa:7a:99:98:f3:c0:29:42:4c:61:dd: 7f:17:bb:d2:1f:93:6f:12:a4:ed:8e:6b:66:bf:90:7c:5b:ac: d4:75:3d:73:96:70:51:6a:d1:ae:f7:c0:c4:68:2f:85:d3:fa: c7:ff:8b:29:40:31:74:af:2d:7b:b7:8e:4d:5c:91:61:b7:dd: 02:13:14:80:22:27:5f:e4:27:59:cd:1e:1e:7c:3c:91:22:f1: f2:1f:7d:84:a9:71:5d:fc:58:7c:1f:32:b4:a3:97:bb:81:e5: f0:97:07:93:93:67:b8:85:1f:9b:bb:a1:a5:f7:90:d2:cc:3f: 06:4e:96:de:16:07:92:bc:fd:c0:f9:ba:ff:03:2a:83:f1:38: 7b:a4:c9:6c:86:49:70:6d:c9:3b:64:e3:c1:aa:9b:c3:37:19: 2e:d0:31:89:53:9d:44:6c:07:71:37:e4:40:b0:78:00:eb:d0: e0:63:29:25:c8:50:c5:0f:41:5c:28:82:e2:a0:1d:a0:ce:32: dc:68:5d:3c:21:23:d1:c9:d0:86:f7:a1:9d:9b:69:f8:7e:29: 93:ed:c1:3d:ed:c5:c9:12:98:31:50:bd:c1:40:2e:a0:4c:85: 4a:e2:8b:1d:5a:94:b6:90:3a:89:26:86:cf:e7:22:08:5c:01: 50:c2:50:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazaVXHHE3kJHuawIYF9uAdVjuMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG RTVCRTVGNDAeFw0yNTEyMDUwNTI2MTlaFw0yNTEyMDgxMDM0MTlaMDMxMTAvBgNV BAMTKDEwOERERTM0QjIwOEZCOERFODBCNTk1Qzg0NzQ2MDFEQjRDRTgwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXb8XsMi2Si57Aud0eUrVcDshs yStY8b1jP8ftQBk2/3T85A09wStqNoZcObOEOG33hcvcRpEYsbLUy6PeNWVJqaq8 C10pZXbUf6cujEzs3ORFaQX08kziRg2px9b1WcKbABZ6zifKIzE785+m2GdtRU1P hIiH8bJwturY+/tODn740d2fEi+aosyzfAO4A9mAE+GgHIJ9p9yoHBoNmTrva0h2 8KAwEevuDMn3rR+XXZIBZJIq/Qcvl0JYVZ4Xv/Z+WPjo4q2SkYEIZipPSHHfguSW Yve+sdY97qFoIBASsOb1FfX7bIj99QiaBqIgQANsfmeenA0M1ZKc9zo5hjo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEI3eNLII+43oC1lchHRgHbTOgOUwHwYDVR0j BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC RTVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYx MjdGRTVCRTVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6fv7VFh4v6epmY88ApQkxh3X8Xu9Ifk28S pO2Oa2a/kHxbrNR1PXOWcFFq0a73wMRoL4XT+sf/iylAMXSvLXu3jk1ckWG33QIT FIAiJ1/kJ1nNHh58PJEi8fIffYSpcV38WHwfMrSjl7uB5fCXB5OTZ7iFH5u7oaX3 kNLMPwZOlt4WB5K8/cD5uv8DKoPxOHukyWyGSXBtyTtk48Gqm8M3GS7QMYlTnURs B3E35ECweADr0OBjKSXIUMUPQVwoguKgHaDOMtxoXTwhI9HJ0Ib3oZ2bafh+KZPt wT3txckSmDFQvcFALqBMhUriix1alLaQOokmhs/nIghcAVDCUPk= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:38 2025 by rpki-client