This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft File: C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft (raw, json) Hash identifier: WDLUOX9yDs1YLSE7QY8lTMPqEzYX0CpwM3LrUqFoMa8= Subject key identifier: DA:FB:ED:D0:07:4D:38:95:AF:D1:BD:B4:BB:A5:08:E7:23:04:C4:B7 Authority key identifier: C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 Certificate issuer: /CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Certificate serial: 0E7B05C8DF973E37A15B069D9ED1550E407BB84C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft Manifest number: 052B Signing time: Fri 05 Dec 2025 10:02:31 +0000 Manifest this update: Fri 05 Dec 2025 09:57:31 +0000 Manifest next update: Mon 08 Dec 2025 19:27:31 +0000 Files and hashes: 1: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: p4QmW11QVKIy/H0IsIo9siyqhBsQC1fGJ4OCrOJGVFc=) 2: C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl (hash: Bh2NoHLEGBwnjlVrUXGU70z42nSn++1D20jL5HAOonU=) 3: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: n2P3Yp+pRtsLYzAJB7+7TGk1BY1SpgPoZfiLyMV51xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7b:05:c8:df:97:3e:37:a1:5b:06:9d:9e:d1:55:0e:40:7b:b8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Validity Not Before: Dec 5 09:57:31 2025 GMT Not After : Dec 8 19:27:31 2025 GMT Subject: CN=DAFBEDD0074D3895AFD1BDB4BBA508E72304C4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:a7:62:f4:ec:a8:09:3c:78:72:70:a5:f2: bd:08:3f:7f:f6:f1:c8:1b:34:e0:42:00:b8:b1:da: 18:2a:66:3b:dc:f5:09:b4:5f:ba:ca:89:81:0d:f5: 30:2c:96:5e:f9:5d:0e:37:3d:e4:7f:53:47:6b:2c: db:57:b0:b2:09:4c:c4:ef:5a:d1:4f:c5:a8:0c:9a: 7b:90:d0:5b:10:8b:1d:df:a6:67:fd:c5:b3:4a:0b: 44:47:cd:22:0f:db:3b:ef:0d:08:cf:e9:71:3a:6c: f3:fc:19:a5:88:a9:b2:8e:f6:c2:44:e3:f3:d8:87: 26:90:ad:40:eb:a1:9a:c7:19:de:8c:7d:82:37:ee: e3:39:ed:3f:fd:86:bf:75:24:c8:55:af:48:6f:59: a8:8d:ef:d8:b4:9b:ae:05:8d:2b:bb:f9:8e:81:83: 4f:5f:d6:5e:c0:5a:3e:54:87:12:98:b0:10:c9:d1: 8f:fe:85:e7:9b:66:68:19:31:d1:64:01:e2:1c:9d: eb:e6:32:c3:52:a7:4f:ed:49:3c:2b:83:f7:01:6e: 67:b2:ce:60:1f:b8:67:e6:60:6d:ee:15:62:6a:ef: e5:54:d9:eb:9f:48:a5:ad:13:47:25:fb:6b:9b:83: c3:e1:bc:9c:12:d3:2a:ce:3c:4b:f4:3c:ed:0b:90: f2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FB:ED:D0:07:4D:38:95:AF:D1:BD:B4:BB:A5:08:E7:23:04:C4:B7 X509v3 Authority Key Identifier: keyid:C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:28:38:a2:1d:ca:36:b3:4a:51:2f:95:4d:ee:46:7f:86:8a: a6:8c:72:df:39:72:61:d6:48:c7:90:11:8f:bb:f6:c4:70:a1: fe:be:89:7e:56:9b:d4:67:98:f3:14:a8:e8:92:9a:cb:2e:71: 17:91:97:a1:48:3c:76:d3:b0:dc:db:a2:5b:39:26:c6:0d:71: 15:7e:78:c5:ea:ec:52:b7:69:07:2d:f4:88:d2:ca:2e:c2:8f: d2:ef:dc:39:e5:f6:8b:0f:4d:cb:ac:a0:d9:76:58:97:49:34: 5b:c9:2b:d4:56:0a:1d:f7:34:25:23:e2:4f:58:28:fb:0c:84: 47:e8:6a:d0:56:98:8a:e1:b4:aa:5a:e0:d2:a4:e6:62:bc:b9: 3c:88:72:40:92:ff:f5:0f:a9:95:19:89:af:0d:63:ec:db:9f: 44:fc:8f:8a:7a:bc:60:6b:e4:95:ca:e8:d1:34:ab:0a:a3:a5: c4:81:c2:ad:1d:c6:f3:48:dd:17:ca:60:9a:90:4f:24:1c:5f: f4:92:bc:ff:09:42:ba:76:c8:aa:d6:96:80:44:51:d8:2e:96: 94:98:49:17:2e:75:47:7b:12:c7:cd:42:d6:d7:24:9c:cd:46: 9d:ef:35:73:11:3a:d2:a4:7d:c4:83:6c:cd:ba:4c:54:f6:cd: 71:3a:76:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnsFyN+XPjehWwadntFVDkB7uEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkx NUExOEIzMzAeFw0yNTEyMDUwOTU3MzFaFw0yNTEyMDgxOTI3MzFaMDMxMTAvBgNV BAMTKERBRkJFREQwMDc0RDM4OTVBRkQxQkRCNEJCQTUwOEU3MjMwNEM0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJadi9OyoCTx4cnCl8r0IP3/2 8cgbNOBCALix2hgqZjvc9Qm0X7rKiYEN9TAsll75XQ43PeR/U0drLNtXsLIJTMTv WtFPxagMmnuQ0FsQix3fpmf9xbNKC0RHzSIP2zvvDQjP6XE6bPP8GaWIqbKO9sJE 4/PYhyaQrUDroZrHGd6MfYI37uM57T/9hr91JMhVr0hvWaiN79i0m64FjSu7+Y6B g09f1l7AWj5UhxKYsBDJ0Y/+heebZmgZMdFkAeIcnevmMsNSp0/tSTwrg/cBbmey zmAfuGfmYG3uFWJq7+VU2eufSKWtE0cl+2ubg8PhvJwS0yrOPEv0PO0LkPLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2vvt0AdNOJWv0b20u6UI5yMExLcwHwYDVR0j BBgwFoAUxvc27769GgFD2wpXoUNUWRWhizMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDU0YjRlMi0yZTU4LTQ2NWItYWZhYS0xYzk0NjVjODgyZTYvMC9DNkY3MzZFRkJF QkQxQTAxNDNEQjBBNTdBMTQzNTQ1OTE1QTE4QjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkxNUEx OEIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0 NTkxNUExOEIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUoOKIdyjazSlEvlU3uRn+GiqaMct85cmHW SMeQEY+79sRwof6+iX5Wm9RnmPMUqOiSmssucReRl6FIPHbTsNzbols5JsYNcRV+ eMXq7FK3aQct9IjSyi7Cj9Lv3Dnl9osPTcusoNl2WJdJNFvJK9RWCh33NCUj4k9Y KPsMhEfoatBWmIrhtKpa4NKk5mK8uTyIckCS//UPqZUZia8NY+zbn0T8j4p6vGBr 5JXK6NE0qwqjpcSBwq0dxvNI3RfKYJqQTyQcX/SSvP8JQrp2yKrWloBEUdgulpSY SRcudUd7EsfNQtbXJJzNRp3vNXMROtKkfcSDbM26TFT2zXE6dgA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:40 2025 by rpki-client