This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: b2f7TNKdAHrNTed4FgPxZIwz2ch+teJM//4oq/U59HA= Subject key identifier: 51:BF:3A:B9:7A:61:8A:48:F8:D3:BD:EC:25:43:E5:8F:0D:4F:93:43 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 6E1EA53359EEFAE059602EA43C09D8A5AFB5B2D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: DD Signing time: Sat 06 Dec 2025 02:30:49 +0000 Manifest this update: Sat 06 Dec 2025 02:25:49 +0000 Manifest next update: Tue 09 Dec 2025 13:47:49 +0000 Files and hashes: 1: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: yvdO5HPwr6p6L08kgiXspzfSxDAn1sGIRshIYCtA/Ss=) 2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: jOlBtBmkXSj+fSYaHlDdKI9RGX/xpsWQdqL9iASpC0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1e:a5:33:59:ee:fa:e0:59:60:2e:a4:3c:09:d8:a5:af:b5:b2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Dec 6 02:25:49 2025 GMT Not After : Dec 9 13:47:49 2025 GMT Subject: CN=51BF3AB97A618A48F8D3BDEC2543E58F0D4F9343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:89:5a:f6:11:61:02:35:34:04:5c:5b:57: cd:76:49:87:6c:d6:1e:65:e0:0b:69:10:57:d0:f6: a1:24:bd:e1:19:f1:2b:6b:ec:f7:3f:3a:3a:d4:79: 9d:03:ba:5c:8a:87:63:f1:83:20:70:21:45:e8:c9: f3:1d:52:12:45:69:d6:49:91:2e:b3:66:23:ac:a1: 0f:2c:0b:af:0f:66:1f:a5:42:00:0f:e3:d8:08:78: 7e:5a:0f:38:73:59:11:c9:36:71:d0:9c:08:ba:8b: 9d:a5:6c:21:74:e9:bc:c9:b5:9e:33:1d:1c:18:42: 40:d5:2d:50:99:82:14:0d:3f:5e:37:b9:64:4b:c6: 51:01:4a:c0:c8:34:9a:09:9d:26:25:8e:15:2e:bf: 93:23:1c:56:ec:b4:b5:0f:7f:d2:e7:19:ee:91:00: 46:58:93:cc:eb:02:d4:71:92:3a:a8:17:33:cb:b7: 9c:76:6a:1f:5d:a9:3b:72:3e:41:08:21:2d:60:7d: f2:49:52:8b:11:d1:25:3d:6d:5b:79:de:df:c8:9f: 5f:8c:47:a5:44:73:c7:d2:bb:18:d4:7f:3e:9b:c6: 20:2c:76:2b:d1:68:64:42:50:17:35:34:f3:6a:3c: a2:0c:58:98:c2:c3:f6:14:bd:3d:c4:13:1a:40:e5: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BF:3A:B9:7A:61:8A:48:F8:D3:BD:EC:25:43:E5:8F:0D:4F:93:43 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:02:86:b6:17:1a:a7:2e:02:e4:fd:2b:b0:e8:64:29:e2:c7: f4:b7:a4:af:12:62:d2:c9:02:37:05:65:83:74:98:4e:8b:95: 5a:48:f6:6b:29:66:0d:0c:0c:04:ba:0c:14:3f:97:26:e1:df: 68:8d:ef:fe:67:83:9f:0f:bd:ea:65:26:12:c6:bb:8a:37:38: d5:6f:70:81:ec:43:18:de:29:d4:4f:fa:b3:5d:d8:ca:2f:dd: d5:df:11:76:8d:a3:ac:dd:30:c0:4b:e0:74:72:e4:79:68:e6: 02:6c:57:73:3e:f6:60:c3:66:d5:33:a9:1a:9e:a8:fc:21:1c: 7a:97:16:cb:dd:a6:ec:65:7f:a4:90:06:41:4d:09:e1:86:92: c4:f3:e5:11:c4:39:46:e3:b2:6b:63:66:9a:eb:63:c1:a2:cb: 07:ad:4b:f9:00:a2:dc:ec:dd:27:29:71:10:d1:58:61:05:a1: 4e:1b:a5:49:a9:bc:19:49:2d:21:40:cd:25:43:83:8b:51:45: d1:c1:6d:41:3d:f4:56:c6:3f:67:08:78:5f:cf:d3:b6:18:6d: ea:3e:7c:81:82:4a:42:ab:0c:3d:bf:e6:40:1f:e2:b9:53:f5: bc:f6:cf:0d:cb:a9:0e:e0:af:3a:38:0e:67:73:a8:22:4e:89: 86:5e:7c:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbh6lM1nu+uBZYC6kPAnYpa+1stQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTEyMDYwMjI1NDlaFw0yNTEyMDkxMzQ3NDlaMDMxMTAvBgNV BAMTKDUxQkYzQUI5N0E2MThBNDhGOEQzQkRFQzI1NDNFNThGMEQ0RjkzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8Ila9hFhAjU0BFxbV812SYds 1h5l4AtpEFfQ9qEkveEZ8Str7Pc/OjrUeZ0DulyKh2PxgyBwIUXoyfMdUhJFadZJ kS6zZiOsoQ8sC68PZh+lQgAP49gIeH5aDzhzWRHJNnHQnAi6i52lbCF06bzJtZ4z HRwYQkDVLVCZghQNP143uWRLxlEBSsDINJoJnSYljhUuv5MjHFbstLUPf9LnGe6R AEZYk8zrAtRxkjqoFzPLt5x2ah9dqTtyPkEIIS1gffJJUosR0SU9bVt53t/In1+M R6VEc8fSuxjUfz6bxiAsdivRaGRCUBc1NPNqPKIMWJjCw/YUvT3EExpA5cgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUb86uXphikj4073sJUPljw1Pk0MwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIChrYXGqcuAuT9K7DoZCnix/S3pK8SYtLJ AjcFZYN0mE6LlVpI9mspZg0MDAS6DBQ/lybh32iN7/5ng58PveplJhLGu4o3ONVv cIHsQxjeKdRP+rNd2Mov3dXfEXaNo6zdMMBL4HRy5Hlo5gJsV3M+9mDDZtUzqRqe qPwhHHqXFsvdpuxlf6SQBkFNCeGGksTz5RHEOUbjsmtjZprrY8GiywetS/kAotzs 3ScpcRDRWGEFoU4bpUmpvBlJLSFAzSVDg4tRRdHBbUE99FbGP2cIeF/P07YYbeo+ fIGCSkKrDD2/5kAf4rlT9bz2zw3LqQ7grzo4DmdzqCJOiYZefKM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:44 2025 by rpki-client