This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: G2uP7a7elVN9GPVDriflsDyVzgmUgF+dnTKIuC4PRhk= Subject key identifier: 8F:DD:01:2D:DE:30:F8:D2:F0:AA:55:9A:4E:48:19:E6:15:FB:7F:6F Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 4DA066B8A9582458BCD07E0889F5560F296FB74A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: D5 Signing time: Sat 20 Dec 2025 19:01:23 +0000 Manifest this update: Sat 20 Dec 2025 18:56:23 +0000 Manifest next update: Wed 24 Dec 2025 00:03:23 +0000 Files and hashes: 1: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: mQhFlxXBLIj4yI5WyOL7Jo0W6iiw0TFtB+dWqNuM6mA=) 2: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: Ub40BPe4KMOTxitaoAUpxbpNc0bfpI5fDNOKKNlDeX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a0:66:b8:a9:58:24:58:bc:d0:7e:08:89:f5:56:0f:29:6f:b7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Dec 20 18:56:23 2025 GMT Not After : Dec 24 00:03:23 2025 GMT Subject: CN=8FDD012DDE30F8D2F0AA559A4E4819E615FB7F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:c1:e0:3c:cd:ab:1c:b4:71:8b:ab:7b:37: 1f:ab:a9:ad:81:cf:d7:fd:cb:c7:cb:2a:3c:48:c4: 84:64:25:a0:ff:d7:ee:cb:96:8c:60:0a:d2:fc:b1: 7d:db:e0:38:9a:1e:7c:9a:ce:11:5e:58:9d:86:2c: 3f:41:c6:30:92:f6:4a:cc:f3:50:23:ee:eb:f9:f1: ae:7f:a9:17:60:28:62:dd:df:57:61:fc:5b:a1:03: 87:84:0b:d0:ee:32:86:3e:10:be:fd:88:09:ff:2c: 34:9c:50:3f:4b:e6:4e:f3:70:78:6a:f3:47:0e:08: 71:f6:6c:47:24:27:08:f0:96:ba:e6:52:f4:da:8f: a4:61:cf:f2:6f:cf:22:87:64:7f:2a:8e:07:40:d7: c7:df:a8:ad:2c:63:90:c7:b9:8c:05:d4:7d:16:e2: 23:c6:b6:f6:f9:1a:0b:17:b8:aa:ec:ca:e5:c1:6f: 61:f6:1d:76:f6:1f:db:3a:68:c8:c1:64:e2:d2:da: fb:7b:aa:38:d4:b1:5f:16:70:eb:03:32:3f:6d:1f: 25:7a:98:f4:77:f9:cf:e5:40:b6:94:58:18:b7:ff: 9e:79:d2:fe:04:79:99:cf:ff:58:f1:e8:06:52:f5: a2:7d:f9:bf:7d:ef:73:aa:3c:c7:ab:9a:ef:cd:3c: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DD:01:2D:DE:30:F8:D2:F0:AA:55:9A:4E:48:19:E6:15:FB:7F:6F X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e0:2b:e9:aa:8f:96:9f:e4:6e:a0:42:9f:5a:88:f9:51:ae: b9:5a:a6:0d:04:2c:0f:b6:0f:2f:53:29:56:2a:f7:f9:f7:81: cd:79:62:d7:2f:a8:3f:00:de:5d:a1:cc:62:cb:e1:18:d3:04: fe:5b:2a:5e:c9:bf:a3:a4:42:74:cf:12:97:76:b2:f6:ae:6a: 0a:18:a3:88:6c:16:1a:32:79:a3:79:b8:cd:ce:7a:70:1b:dd: 94:3f:24:cd:28:c6:f6:7d:4a:03:2c:c1:10:72:ac:85:aa:04: 28:d2:04:4a:bd:72:f2:cd:cb:16:f4:68:67:8b:e3:25:57:79: e7:ff:ac:99:21:9b:a4:c8:e1:b6:22:ed:14:06:79:97:09:39: e2:1e:56:83:71:b4:9d:be:44:85:36:bb:5a:31:88:6d:ee:12: c5:19:3c:1d:47:72:19:8b:7b:7e:8f:2f:77:73:c8:1c:3c:20: ca:88:c1:22:87:95:38:53:7e:22:74:15:64:0f:a4:df:26:d3: 17:3f:9e:fb:90:f5:5a:25:b2:d0:29:16:a1:3b:fe:50:1d:c2: f2:cf:9c:7f:70:aa:f1:47:06:27:18:8d:73:c8:76:42:04:f0: 68:41:d7:75:18:4a:4b:cb:70:77:51:23:70:23:1a:82:10:a0: 7f:26:54:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTaBmuKlYJFi80H4IifVWDylvt0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTEyMjAxODU2MjNaFw0yNTEyMjQwMDAzMjNaMDMxMTAvBgNV BAMTKDhGREQwMTJEREUzMEY4RDJGMEFBNTU5QTRFNDgxOUU2MTVGQjdGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVn8HgPM2rHLRxi6t7Nx+rqa2B z9f9y8fLKjxIxIRkJaD/1+7LloxgCtL8sX3b4DiaHnyazhFeWJ2GLD9BxjCS9krM 81Aj7uv58a5/qRdgKGLd31dh/FuhA4eEC9DuMoY+EL79iAn/LDScUD9L5k7zcHhq 80cOCHH2bEckJwjwlrrmUvTaj6Rhz/JvzyKHZH8qjgdA18ffqK0sY5DHuYwF1H0W 4iPGtvb5GgsXuKrsyuXBb2H2HXb2H9s6aMjBZOLS2vt7qjjUsV8WcOsDMj9tHyV6 mPR3+c/lQLaUWBi3/5550v4EeZnP/1jx6AZS9aJ9+b9973OqPMermu/NPBG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj90BLd4w+NLwqlWaTkgZ5hX7f28wHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjgK+mqj5af5G6gQp9aiPlRrrlapg0ELA+2 Dy9TKVYq9/n3gc15YtcvqD8A3l2hzGLL4RjTBP5bKl7Jv6OkQnTPEpd2svauagoY o4hsFhoyeaN5uM3OenAb3ZQ/JM0oxvZ9SgMswRByrIWqBCjSBEq9cvLNyxb0aGeL 4yVXeef/rJkhm6TI4bYi7RQGeZcJOeIeVoNxtJ2+RIU2u1oxiG3uEsUZPB1HchmL e36PL3dzyBw8IMqIwSKHlThTfiJ0FWQPpN8m0xc/nvuQ9VolstApFqE7/lAdwvLP nH9wqvFHBicYjXPIdkIE8GhB13UYSkvLcHdRI3AjGoIQoH8mVFU= -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:56 2025 by rpki-client