This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft File: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft (raw, json) Hash identifier: nL7lB236w9MG2ho3+X9MbX7yw6g1ULpGFPvE2i1s2qI= Subject key identifier: 63:08:FF:49:A2:F9:1A:05:BF:0C:28:06:84:23:DE:BE:B9:37:DD:F0 Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 1A5569F8D74BA24B2B00AEE09F459FD84AAFF80B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft Manifest number: 03D4 Signing time: Fri 19 Dec 2025 08:52:33 +0000 Manifest this update: Fri 19 Dec 2025 08:47:33 +0000 Manifest next update: Mon 22 Dec 2025 12:12:33 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: HBCSlYe9SztvZ5iSEatkCght6QFzU9643YFr0LJkHe0=) 2: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl (hash: 55SPN3aAy2Fn47vynC4TqHokhuLppnrJBj3qgdd9wxQ=) 3: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: nbSzLxkTgg1Fhd955VZ38kl51XuK78f19xIlXEphedE=) 4: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 12:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:55:69:f8:d7:4b:a2:4b:2b:00:ae:e0:9f:45:9f:d8:4a:af:f8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Dec 19 08:47:33 2025 GMT Not After : Dec 22 12:12:33 2025 GMT Subject: CN=6308FF49A2F91A05BF0C28068423DEBEB937DDF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:10:c9:5d:07:34:2c:3b:29:13:af:ec:d6:f3: 46:c8:62:85:de:81:dd:3f:ef:c9:9f:2a:6c:5a:fe: 66:5e:a4:8d:47:25:58:2a:71:ee:b2:b7:42:39:ee: ca:bb:d8:42:bf:46:4f:41:20:19:f0:43:49:48:da: 17:41:d4:e3:30:f0:6e:0d:7b:a1:49:1e:df:6d:03: 67:8e:04:e7:a1:70:70:35:95:40:62:87:3d:be:77: 14:0c:10:06:f2:b0:20:f8:ec:1e:f6:6d:d1:ca:cf: f0:77:b3:f1:c3:7f:76:38:82:37:9b:e7:32:a7:fc: 75:4f:c8:ad:ba:d6:5d:62:39:8e:d4:c9:7e:bb:8c: 7b:29:86:e9:45:34:68:80:ca:63:5a:af:67:ba:da: 03:d7:fa:0c:e5:69:8f:7a:3f:7b:3a:7a:6e:22:c3: f8:47:4c:d6:c3:b1:d8:c6:72:5f:4c:5e:27:e1:bd: 79:2f:2c:21:db:6f:13:b3:f8:d1:84:30:d6:c5:c9: f1:46:02:47:d0:79:7c:3f:8a:3f:60:00:5e:e8:1d: 3c:10:0a:f6:30:8d:f8:e6:66:4a:d2:00:cb:74:df: a6:3b:9f:46:1c:19:58:b3:03:a6:73:40:18:20:93: 4d:16:db:27:35:e2:30:d4:7a:23:a9:ba:a6:34:ab: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:08:FF:49:A2:F9:1A:05:BF:0C:28:06:84:23:DE:BE:B9:37:DD:F0 X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:14:d4:76:8c:64:a1:5c:e8:c3:f9:60:49:99:17:a7:a6:7d: 19:64:ec:57:ee:e6:f2:d5:4a:8b:61:57:0b:3b:e0:c3:77:ff: 43:85:72:ca:3e:87:6c:87:7b:46:bd:3c:53:ba:e9:35:a5:ae: 1e:5c:ad:e0:ee:35:c8:df:a3:4c:f1:a2:6b:de:71:e7:b4:eb: 78:91:65:d1:b7:1a:02:37:45:e6:44:1f:8c:27:5c:dc:c5:e0: 49:a1:96:3e:c3:ab:79:d3:76:2f:db:af:29:b0:f5:dc:18:7a: ec:60:07:e2:25:7a:75:b2:28:01:db:53:60:05:72:95:72:e4: 7b:ea:39:e2:28:09:db:e7:c8:52:d5:04:72:50:7d:6b:31:74: ec:fd:44:59:f3:44:78:a5:7f:08:45:69:81:24:f8:5d:4b:58: f6:42:a7:df:21:2b:04:9d:0d:a2:fb:d8:e5:22:a1:cd:a3:ac: e9:bb:19:29:e6:b1:21:23:0e:a4:53:c5:03:0d:5b:57:66:c0: 76:c4:ff:33:cd:78:27:9c:b5:ee:6c:40:24:96:8b:1e:d5:3a: c7:14:9a:39:d6:45:91:68:9c:d8:17:68:5d:d8:b4:33:8e:64: a8:88:67:cc:6e:a9:a3:76:71:81:6b:00:71:a2:5d:e3:22:33: 2e:b0:24:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGlVp+NdLoksrAK7gn0Wf2Eqv+AswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNTEyMTkwODQ3MzNaFw0yNTEyMjIxMjEyMzNaMDMxMTAvBgNV BAMTKDYzMDhGRjQ5QTJGOTFBMDVCRjBDMjgwNjg0MjNERUJFQjkzN0RERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgEMldBzQsOykTr+zW80bIYoXe gd0/78mfKmxa/mZepI1HJVgqce6yt0I57sq72EK/Rk9BIBnwQ0lI2hdB1OMw8G4N e6FJHt9tA2eOBOehcHA1lUBihz2+dxQMEAbysCD47B72bdHKz/B3s/HDf3Y4gjeb 5zKn/HVPyK261l1iOY7UyX67jHsphulFNGiAymNar2e62gPX+gzlaY96P3s6em4i w/hHTNbDsdjGcl9MXifhvXkvLCHbbxOz+NGEMNbFyfFGAkfQeXw/ij9gAF7oHTwQ CvYwjfjmZkrSAMt036Y7n0YcGVizA6ZzQBggk00W2yc14jDUeiOpuqY0qwIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwj/SaL5GgW/DCgGhCPevrk33fAwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4 NjMxRUY0MTJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEU1HaMZKFc6MP5YEmZF6emfRlk7Ffu5vLV SothVws74MN3/0OFcso+h2yHe0a9PFO66TWlrh5creDuNcjfo0zxomvecee063iR ZdG3GgI3ReZEH4wnXNzF4Emhlj7Dq3nTdi/brymw9dwYeuxgB+IlenWyKAHbU2AF cpVy5HvqOeIoCdvnyFLVBHJQfWsxdOz9RFnzRHilfwhFaYEk+F1LWPZCp98hKwSd DaL72OUioc2jrOm7GSnmsSEjDqRTxQMNW1dmwHbE/zPNeCecte5sQCSWix7VOscU mjnWRZFonNgXaF3YtDOOZKiIZ8xuqaN2cYFrAHGiXeMiMy6wJP0= -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:35 2025 by rpki-client