This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: /wOnyBzSPIV9SiAhKO8JKnNYUWKM4LeNz4Ant7JQmic= Subject key identifier: 6F:7F:86:AD:17:26:7C:1B:87:63:45:CA:A7:AF:A3:E7:C7:6D:E6:13 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 33AEA084F16B1E80CDFAF35967DB865C35A10DCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 0536 Signing time: Tue 23 Dec 2025 21:02:07 +0000 Manifest this update: Tue 23 Dec 2025 20:57:07 +0000 Manifest next update: Fri 26 Dec 2025 22:15:07 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 2: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: QGehukrzcFfq+YUWgs3abrDPICx5ywxEeL1/9CDDdeI=) 3: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 22:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ae:a0:84:f1:6b:1e:80:cd:fa:f3:59:67:db:86:5c:35:a1:0d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Dec 23 20:57:07 2025 GMT Not After : Dec 26 22:15:07 2025 GMT Subject: CN=6F7F86AD17267C1B876345CAA7AFA3E7C76DE613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:54:07:b9:d7:a9:a6:49:00:bb:33:e8:be: 0f:ca:4e:98:c9:70:3b:c4:a6:02:0b:1e:ef:00:0a: de:d9:66:89:2a:32:e0:9c:da:4c:e4:63:dd:0a:df: 17:48:21:4b:b2:c6:92:b8:2f:1c:01:7e:35:5c:3b: 15:e4:45:5f:c2:06:ce:9e:1f:bc:47:e3:19:33:c8: 82:77:f4:c0:eb:eb:75:a6:f5:54:19:b7:4c:da:d2: b4:4f:90:61:68:04:61:19:82:e7:56:11:e9:9b:c4: d6:e6:07:cf:04:01:67:e2:e0:5e:4f:cc:78:50:aa: 58:64:24:57:a4:96:5e:64:42:49:f8:6c:65:7c:1a: 56:9c:a2:cd:3e:56:99:ae:2f:0c:5c:f1:ba:c9:cc: da:8e:be:28:b2:b9:5f:08:fb:ac:c2:e7:ce:2b:ed: b9:71:da:d5:65:d2:46:22:e7:7a:fe:58:64:6f:e0: c8:43:a5:31:b8:b9:33:3e:00:e9:4a:9c:22:41:54: dc:01:66:1a:51:6a:e4:53:f1:86:b0:37:e2:b7:b4: e2:2c:31:27:7a:49:9b:8d:7b:c5:d3:84:77:fa:f9: 1f:98:da:71:52:f0:c5:4a:27:3b:28:37:64:7d:17: 8e:ae:9e:a0:69:aa:8b:05:2a:86:57:27:39:73:e5: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7F:86:AD:17:26:7C:1B:87:63:45:CA:A7:AF:A3:E7:C7:6D:E6:13 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:66:cf:58:09:d2:1f:4f:4b:28:3b:5f:a1:40:fd:11:fb:83: a8:98:4e:29:67:f9:a3:04:37:13:2d:00:3b:96:da:89:0a:9e: e2:be:23:a1:b4:f0:7b:b9:42:41:de:17:dd:0b:3d:9c:21:29: b7:d3:0b:7f:92:e0:02:00:70:2b:51:ca:85:76:6e:75:db:09: 3e:7d:62:37:a7:8d:23:da:f0:6f:5a:99:1b:f8:50:70:e8:59: fa:34:85:c7:28:4d:3b:86:2c:6e:80:36:9f:c3:f2:aa:47:c1: ba:cc:23:4c:5a:5d:e2:2e:a7:b4:7b:bd:1b:9a:d5:5d:09:74: 6d:af:89:65:1c:fe:ee:ec:be:21:7c:e3:c0:09:60:17:c5:1f: 82:a4:b9:0e:4b:33:9e:c3:30:3b:40:7f:cf:08:52:98:7a:e6: 22:2c:d4:0a:27:fa:8a:bb:59:30:48:d2:21:4b:aa:7a:29:d5: 26:2b:6e:80:f8:98:01:8e:69:da:14:11:fc:23:54:0a:a7:c1: 3a:a3:4a:fb:77:19:eb:72:3e:91:36:72:a5:c0:87:ee:76:4f: bc:e4:a4:2e:85:b9:24:80:45:71:44:15:92:5f:64:09:cb:8f: 97:86:f7:24:63:1f:24:9e:33:b3:54:f2:73:f0:93:30:15:80: 63:22:82:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM66ghPFrHoDN+vNZZ9uGXDWhDc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTEyMjMyMDU3MDdaFw0yNTEyMjYyMjE1MDdaMDMxMTAvBgNV BAMTKDZGN0Y4NkFEMTcyNjdDMUI4NzYzNDVDQUE3QUZBM0U3Qzc2REU2MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wFQHudeppkkAuzPovg/KTpjJ cDvEpgILHu8ACt7ZZokqMuCc2kzkY90K3xdIIUuyxpK4LxwBfjVcOxXkRV/CBs6e H7xH4xkzyIJ39MDr63Wm9VQZt0za0rRPkGFoBGEZgudWEembxNbmB88EAWfi4F5P zHhQqlhkJFekll5kQkn4bGV8Glacos0+VpmuLwxc8brJzNqOviiyuV8I+6zC584r 7blx2tVl0kYi53r+WGRv4MhDpTG4uTM+AOlKnCJBVNwBZhpRauRT8YawN+K3tOIs MSd6SZuNe8XThHf6+R+Y2nFS8MVKJzsoN2R9F46unqBpqosFKoZXJzlz5frhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3+GrRcmfBuHY0XKp6+j58dt5hMwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpmz1gJ0h9PSyg7X6FA/RH7g6iYTiln+aME NxMtADuW2okKnuK+I6G08Hu5QkHeF90LPZwhKbfTC3+S4AIAcCtRyoV2bnXbCT59 YjenjSPa8G9amRv4UHDoWfo0hccoTTuGLG6ANp/D8qpHwbrMI0xaXeIup7R7vRua 1V0JdG2viWUc/u7sviF848AJYBfFH4KkuQ5LM57DMDtAf88IUph65iIs1Aon+oq7 WTBI0iFLqnop1SYrboD4mAGOadoUEfwjVAqnwTqjSvt3GetyPpE2cqXAh+52T7zk pC6FuSSARXFEFZJfZAnLj5eG9yRjHySeM7NU8nPwkzAVgGMighM= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:49 2025 by rpki-client