This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft (raw, json) Hash identifier: DOriOlPE6SJWShrU/PSuXRiHQ4yUlizLRW5kau9Yo1E= Subject key identifier: 70:85:D8:F4:70:05:53:0D:AA:4A:8B:CA:60:DE:99:7C:A0:E6:05:65 Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F Certificate issuer: /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Certificate serial: 7C9062A999F6B1E692F1B600CE1643E0D507855F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft Manifest number: 0534 Signing time: Sat 06 Dec 2025 15:30:47 +0000 Manifest this update: Sat 06 Dec 2025 15:25:47 +0000 Manifest next update: Wed 10 Dec 2025 02:18:47 +0000 Files and hashes: 1: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl (hash: /cRMjo0fbcIglFD9Zl7JaLwURW0KsWyMAVft2eqiAz4=) 2: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: /yZJ48q5869CHyqd6SiEVpfiGq8gtKkTaa5YhAFQVoI=) 3: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: E4zG118v/qHLN7ZNOQGDXXsw7DicdH5quyuAOIhYJfs=) 4: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: OYW0otw/C3geO3TMH4Vh+kOExJnpA1YbtcKJkivMvls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:90:62:a9:99:f6:b1:e6:92:f1:b6:00:ce:16:43:e0:d5:07:85:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Validity Not Before: Dec 6 15:25:47 2025 GMT Not After : Dec 10 02:18:47 2025 GMT Subject: CN=7085D8F47005530DAA4A8BCA60DE997CA0E60565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:72:a0:0c:80:1f:5c:d9:99:a2:41:35:43: 66:ac:c0:62:ef:55:a0:77:32:9c:be:b0:01:dc:e2: 02:ec:e0:d2:82:9f:30:6a:e0:2e:4c:22:f0:32:dd: 72:97:86:b3:9e:50:0e:93:a0:b8:ac:25:2c:1d:c0: 37:4c:5f:3a:b6:3a:93:aa:2e:18:9b:25:56:d6:19: fc:e2:95:f1:11:79:5e:91:ef:3f:a0:46:0b:05:ef: 1a:f4:72:b0:6c:48:44:d7:b2:6f:20:c1:fe:3e:a4: b7:14:5e:a7:90:3e:64:46:28:a7:e1:3c:68:25:9b: 82:d1:a6:dc:74:f3:f5:fa:09:4e:f5:e3:70:5e:6d: e0:ba:37:ea:82:69:8d:6d:33:8d:87:e3:90:22:9d: cf:84:45:c6:18:b8:9d:fd:e4:9d:e4:8c:c2:be:6f: bb:50:d9:eb:bd:5b:03:a0:00:35:9e:e7:ac:7a:9d: 8b:72:f2:96:35:71:f8:e5:6c:42:43:91:48:46:92: 1c:80:02:cd:05:fb:dd:6b:c1:e3:b4:f7:77:90:c5: 4c:b2:f9:91:be:6a:ea:49:5c:d3:58:9c:bb:aa:b6: b2:90:b2:e3:f4:8e:8f:7a:6d:cc:45:af:a0:e4:24: f5:8a:72:a6:d2:90:cc:65:7c:b9:58:12:b4:21:a6: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:D8:F4:70:05:53:0D:AA:4A:8B:CA:60:DE:99:7C:A0:E6:05:65 X509v3 Authority Key Identifier: keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:87:d2:d6:74:2f:d5:03:57:ee:1c:6c:83:1e:67:09:83:37: d5:b5:90:fd:c4:d9:c0:7f:68:0d:ca:c7:29:49:8d:c6:49:b1: 24:ef:64:ed:b6:e8:5a:d8:b4:ca:b4:e5:c2:fc:fa:d6:91:1a: a4:f5:12:59:0f:e9:48:ea:ca:d5:f6:3a:cd:c3:a3:37:e9:f3: ea:fd:6d:97:df:c2:2d:47:6e:f1:85:8f:2b:10:05:9d:d7:6e: 42:69:04:97:b8:ab:0d:ac:24:cb:1e:66:8a:74:ae:67:f1:ff: 37:25:8a:74:f2:da:bf:cf:58:f5:59:41:cd:d2:56:59:05:c5: 07:35:62:fa:42:08:bd:99:e4:56:d6:1b:ec:37:5e:49:2d:aa: 68:4b:3a:86:84:6d:8a:4d:00:98:2b:a9:c1:31:47:c3:19:2b: 44:a2:e4:fb:be:b1:32:7e:0f:ad:9b:d9:ec:8d:36:df:1f:a9: 09:66:08:c1:b4:07:5c:44:95:40:2f:9a:a1:82:fd:ad:ae:e7: 3c:0f:f5:4d:89:9a:b2:7e:bf:40:7d:c3:f4:07:5e:b3:c7:e1: 0b:cd:08:32:d9:9a:2f:91:60:48:09:19:a8:f5:af:91:f1:d5: f9:2d:b6:75:b2:44:e5:f7:72:b7:70:b1:5a:2e:1f:d8:8a:ae: b0:e6:1e:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJBiqZn2seaS8bYAzhZD4NUHhV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIw RkE5MzkyRjAeFw0yNTEyMDYxNTI1NDdaFw0yNTEyMTAwMjE4NDdaMDMxMTAvBgNV BAMTKDcwODVEOEY0NzAwNTUzMERBQTRBOEJDQTYwREU5OTdDQTBFNjA1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbHKgDIAfXNmZokE1Q2aswGLv VaB3Mpy+sAHc4gLs4NKCnzBq4C5MIvAy3XKXhrOeUA6ToLisJSwdwDdMXzq2OpOq LhibJVbWGfzilfEReV6R7z+gRgsF7xr0crBsSETXsm8gwf4+pLcUXqeQPmRGKKfh PGglm4LRptx08/X6CU7143BebeC6N+qCaY1tM42H45Ainc+ERcYYuJ395J3kjMK+ b7tQ2eu9WwOgADWe56x6nYty8pY1cfjlbEJDkUhGkhyAAs0F+91rweO093eQxUyy +ZG+aupJXNNYnLuqtrKQsuP0jo96bcxFr6DkJPWKcqbSkMxlfLlYErQhphQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcIXY9HAFUw2qSovKYN6ZfKDmBWUwHwYDVR0j BBgwFoAUbcxpUI705nDvvFxpID1rEg+pOS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC82RENDNjk1MDhF RjRFNjcwRUZCQzVDNjkyMDNENkIxMjBGQTkzOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIwRkE5 MzkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZC MTIwRkE5MzkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOH0tZ0L9UDV+4cbIMeZwmDN9W1kP3E2cB/ aA3KxylJjcZJsSTvZO226FrYtMq05cL8+taRGqT1ElkP6UjqytX2Os3Dozfp8+r9 bZffwi1HbvGFjysQBZ3XbkJpBJe4qw2sJMseZop0rmfx/zclinTy2r/PWPVZQc3S VlkFxQc1YvpCCL2Z5FbWG+w3XkktqmhLOoaEbYpNAJgrqcExR8MZK0Si5Pu+sTJ+ D62b2eyNNt8fqQlmCMG0B1xElUAvmqGC/a2u5zwP9U2JmrJ+v0B9w/QHXrPH4QvN CDLZmi+RYEgJGaj1r5Hx1fkttnWyROX3crdwsVouH9iKrrDmHhU= -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:17 2025 by rpki-client