This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: 6RLa7Ku6QynOV7V+Njz4n5riiz7WAwRZjDTUrqownT4= Subject key identifier: C6:52:4B:4F:6C:8F:33:8B:03:45:D5:21:72:6D:8D:4B:08:4F:BD:6C Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 01276924401698A370CD9406CE70BA77B6483941 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 0236 Signing time: Fri 19 Dec 2025 15:10:03 +0000 Manifest this update: Fri 19 Dec 2025 15:05:02 +0000 Manifest next update: Mon 22 Dec 2025 19:01:02 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 3: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: 37ttd/gGfhSvVi3RYcpK2LMPX7uv1OwzWCPcSC6rB4o=) 4: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:27:69:24:40:16:98:a3:70:cd:94:06:ce:70:ba:77:b6:48:39:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Dec 19 15:05:02 2025 GMT Not After : Dec 22 19:01:02 2025 GMT Subject: CN=C6524B4F6C8F338B0345D521726D8D4B084FBD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1b:12:f4:c6:d0:33:2c:f4:08:15:34:06:cf: 67:5f:ff:6c:7c:c5:4c:78:8e:32:2f:82:e3:cd:da: 9d:16:1e:43:37:0f:9b:24:b6:a2:34:2b:fd:85:b9: 21:5f:70:24:00:56:c7:d5:15:a9:6f:13:e2:df:8d: 8f:06:d2:99:27:af:ad:45:1f:a5:95:ec:f2:95:cf: b0:c5:42:40:8b:44:11:26:92:ff:8c:71:e6:fe:85: c4:a7:7f:46:ce:26:35:8b:0e:bb:fa:f7:b1:2d:ab: 9a:9e:27:b9:de:39:35:33:88:ac:85:28:55:a3:b0: 16:d1:e1:05:0b:b7:06:fe:8c:91:a6:07:66:ba:11: e0:b9:0c:ff:5b:42:55:92:87:39:41:62:cb:8b:b9: 3b:c8:e4:b4:0c:c6:92:97:1b:98:5b:7c:30:0e:1d: 22:e9:80:06:86:e8:11:69:a0:cc:57:a9:71:d3:3e: f8:e9:90:a0:90:de:2e:a1:97:d4:bf:35:ee:b5:a5: 0b:42:1c:84:69:75:ee:2a:b7:cc:7a:6e:31:e4:15: bf:41:62:f0:62:19:55:8e:36:5e:1a:47:33:9f:50: f6:6f:f4:cc:74:7b:e6:e3:56:a6:3c:4e:40:f2:d6: 09:40:47:52:2b:fd:da:39:7f:99:90:ec:23:d3:00: e9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:52:4B:4F:6C:8F:33:8B:03:45:D5:21:72:6D:8D:4B:08:4F:BD:6C X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ac:ce:22:75:e4:e8:31:5d:02:cb:ea:8a:d1:8c:ea:ad:e9: 69:a0:66:c6:e9:0c:ab:6c:ba:d1:b2:19:e9:85:8f:cc:7b:b6: 50:76:60:d7:d9:63:ff:01:f1:72:2e:1e:8b:75:ce:78:d3:cc: a9:fd:e1:26:41:ef:7f:b8:47:1b:bc:51:2f:d3:90:b0:c9:06: 43:89:70:9a:e1:85:96:3a:6e:49:fd:b4:62:d2:f5:41:1c:13: 51:ef:4b:05:0a:2f:38:73:12:dc:49:c6:dd:1a:96:d0:14:f8: 52:6b:93:da:56:55:19:50:3e:d3:94:b9:3d:cc:bd:b0:8a:44: 18:c7:20:6d:11:d2:08:cb:e9:0d:61:64:70:c3:f4:c0:de:c9: ee:88:ec:8f:28:34:18:57:35:12:08:2e:82:bf:67:7f:c7:78: ab:74:c4:e3:1a:b4:69:52:d8:63:89:f8:e5:63:92:74:fb:43: bf:02:ea:5b:0d:d2:72:08:2d:08:d1:34:67:0b:1f:52:df:78: 3b:6f:e1:6c:bb:a1:ba:a8:84:5f:21:34:6c:7f:0d:55:25:10: 3c:d3:ba:ce:5d:dd:60:e5:2a:ce:3b:9e:df:f1:46:a4:2b:2b: f4:38:a4:29:a1:36:07:fa:76:00:98:e9:77:e8:b5:e5:ee:4e: 47:ed:3c:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASdpJEAWmKNwzZQGznC6d7ZIOUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTEyMTkxNTA1MDJaFw0yNTEyMjIxOTAxMDJaMDMxMTAvBgNV BAMTKEM2NTI0QjRGNkM4RjMzOEIwMzQ1RDUyMTcyNkQ4RDRCMDg0RkJENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGxL0xtAzLPQIFTQGz2df/2x8 xUx4jjIvguPN2p0WHkM3D5sktqI0K/2FuSFfcCQAVsfVFalvE+LfjY8G0pknr61F H6WV7PKVz7DFQkCLRBEmkv+Mceb+hcSnf0bOJjWLDrv697Etq5qeJ7neOTUziKyF KFWjsBbR4QULtwb+jJGmB2a6EeC5DP9bQlWShzlBYsuLuTvI5LQMxpKXG5hbfDAO HSLpgAaG6BFpoMxXqXHTPvjpkKCQ3i6hl9S/Ne61pQtCHIRpde4qt8x6bjHkFb9B YvBiGVWONl4aRzOfUPZv9Mx0e+bjVqY8TkDy1glAR1Ir/do5f5mQ7CPTAOnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxlJLT2yPM4sDRdUhcm2NSwhPvWwwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGsziJ15OgxXQLL6orRjOqt6WmgZsbpDKts utGyGemFj8x7tlB2YNfZY/8B8XIuHot1znjTzKn94SZB73+4Rxu8US/TkLDJBkOJ cJrhhZY6bkn9tGLS9UEcE1HvSwUKLzhzEtxJxt0altAU+FJrk9pWVRlQPtOUuT3M vbCKRBjHIG0R0gjL6Q1hZHDD9MDeye6I7I8oNBhXNRIILoK/Z3/HeKt0xOMatGlS 2GOJ+OVjknT7Q78C6lsN0nIILQjRNGcLH1LfeDtv4Wy7obqohF8hNGx/DVUlEDzT us5d3WDlKs47nt/xRqQrK/Q4pCmhNgf6dgCY6XfoteXuTkftPNM= -----END CERTIFICATE-----Generated at Sat Dec 20 20:24:47 2025 by rpki-client