This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft File: 6C11FF5474BE690E545132237E53030296585D32.mft (raw, json) Hash identifier: 14/ZPxdjtgmU+n5mdzuIlgwADKMWKqj4R0tJ8I4lCjs= Subject key identifier: 51:6F:97:E3:05:41:3E:86:F2:88:78:E9:90:17:3E:7F:4D:41:B0:0F Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32 Certificate issuer: /CN=6C11FF5474BE690E545132237E53030296585D32 Certificate serial: 5D9DA1769C98CD18E3FD6169C63B241C2DC52C7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft Manifest number: 0492 Signing time: Fri 19 Dec 2025 20:50:50 +0000 Manifest this update: Fri 19 Dec 2025 20:45:50 +0000 Manifest next update: Tue 23 Dec 2025 02:20:50 +0000 Files and hashes: 1: 3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (hash: bRNZ8nUlgm5rj4Lv4Xn5qKIuBE6nw8cnVSc6VxHCPew=) 2: 6C11FF5474BE690E545132237E53030296585D32.crl (hash: 6FXQ2+SQtxajMgh4OoxcQ6YvMbttaigoz33i6hEkaUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9d:a1:76:9c:98:cd:18:e3:fd:61:69:c6:3b:24:1c:2d:c5:2c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C11FF5474BE690E545132237E53030296585D32 Validity Not Before: Dec 19 20:45:50 2025 GMT Not After : Dec 23 02:20:50 2025 GMT Subject: CN=516F97E305413E86F28878E990173E7F4D41B00F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:c3:10:53:f1:9a:db:e4:35:e3:96:2a:17: ef:cf:7e:66:c8:50:04:e3:80:b5:61:4a:cb:de:1f: a6:ca:00:e4:d3:22:6b:05:19:e9:d8:8d:aa:19:34: e3:fc:c0:c7:3f:1f:ed:a1:f6:1d:01:6c:d4:87:55: 8e:42:e7:59:11:0b:b5:3e:cc:dd:8e:cd:49:fd:98: 65:91:78:f5:28:6c:b5:b7:24:ae:63:f9:3f:f2:43: d4:0f:89:47:6f:e6:af:19:a4:5c:e3:5e:d1:96:46: 26:d7:c3:3e:d1:3a:4d:3a:2c:c2:95:f7:20:ba:7a: 7c:37:8f:2a:3b:bf:97:5e:d6:94:e5:ce:c0:a4:09: c3:3b:36:17:c7:08:e9:9e:64:fc:53:ac:b2:fe:a1: 81:5d:ee:e1:ff:bf:90:b5:11:84:e4:41:2c:29:a7: c0:91:f3:8a:33:78:fd:bb:3d:ae:2a:24:9d:03:0e: 8d:76:9e:d7:f1:6e:c4:7d:4b:4e:48:23:0f:be:f7: 21:a3:6d:b0:13:c0:0a:9e:29:55:95:28:ce:ba:15: 02:c7:38:50:fc:61:71:87:02:84:1b:55:2e:92:57: fc:b7:f1:f6:f8:51:b9:af:93:35:66:f3:8b:d1:a8: e4:b6:b0:0a:a8:d2:a1:27:2a:a1:e7:e4:01:96:4b: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6F:97:E3:05:41:3E:86:F2:88:78:E9:90:17:3E:7F:4D:41:B0:0F X509v3 Authority Key Identifier: keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:46:e2:25:05:81:65:7d:8e:da:9b:ad:53:e6:8a:f9:dc:9c: 1f:f9:00:a9:ef:46:b4:13:35:d8:53:36:47:2e:aa:12:a5:f3: ee:85:9f:e0:20:3a:10:63:20:19:13:c2:7f:ba:eb:62:3f:4a: fc:31:b6:35:55:c6:9a:07:e3:59:aa:e2:61:52:57:9b:4d:75: 76:0c:8a:bc:66:15:ef:a2:27:71:8d:d3:08:f1:74:2f:27:90: 5f:47:1f:3c:6b:c1:ce:76:fc:d4:21:e1:7a:5c:05:2f:38:69: 27:de:2b:35:aa:aa:f3:ad:f7:49:40:00:aa:2c:46:2d:56:35: d1:b1:a2:be:bc:4c:74:f7:8c:dc:c7:08:ec:a7:c1:1b:20:83: 01:2b:4f:31:43:fd:2c:4c:0c:4e:33:b9:98:6d:c2:29:0f:c5: 2b:e8:9f:b2:84:2a:fc:07:b7:c8:44:07:22:b0:70:ab:df:34: 00:9f:55:dc:91:34:6e:40:a6:c1:43:e3:81:e8:67:8f:40:1b: 0f:dd:90:40:f0:61:14:9f:03:07:36:35:38:ba:cb:7c:8b:e6: ed:9d:c4:37:30:e2:15:c6:ff:d4:46:56:aa:cc:00:b5:ad:82: f8:87:6b:18:ae:6b:50:57:1b:04:38:46:f2:08:4d:c1:d3:1b: 93:4e:bc:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZ2hdpyYzRjj/WFpxjskHC3FLH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAzMDI5 NjU4NUQzMjAeFw0yNTEyMTkyMDQ1NTBaFw0yNTEyMjMwMjIwNTBaMDMxMTAvBgNV BAMTKDUxNkY5N0UzMDU0MTNFODZGMjg4NzhFOTkwMTczRTdGNEQ0MUIwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2MMQU/Ga2+Q145YqF+/PfmbI UATjgLVhSsveH6bKAOTTImsFGenYjaoZNOP8wMc/H+2h9h0BbNSHVY5C51kRC7U+ zN2OzUn9mGWRePUobLW3JK5j+T/yQ9QPiUdv5q8ZpFzjXtGWRibXwz7ROk06LMKV 9yC6enw3jyo7v5de1pTlzsCkCcM7NhfHCOmeZPxTrLL+oYFd7uH/v5C1EYTkQSwp p8CR84ozeP27Pa4qJJ0DDo12ntfxbsR9S05IIw++9yGjbbATwAqeKVWVKM66FQLH OFD8YXGHAoQbVS6SV/y38fb4UbmvkzVm84vRqOS2sAqo0qEnKqHn5AGWSwrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUW+X4wVBPobyiHjpkBc+f01BsA8wHwYDVR0j BBgwFoAUbBH/VHS+aQ5UUTIjflMDApZYXTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTMzYTllZi01YjVmLTQ0MjktODM0Yi05NWIyYjczNjgwZTYvMC82QzExRkY1NDc0 QkU2OTBFNTQ1MTMyMjM3RTUzMDMwMjk2NTg1RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAzMDI5NjU4 NUQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzM2E5ZWYtNWI1Zi00NDI5LTgz NGItOTViMmI3MzY4MGU2LzAvNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAz MDI5NjU4NUQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZG4iUFgWV9jtqbrVPmivncnB/5AKnvRrQT NdhTNkcuqhKl8+6Fn+AgOhBjIBkTwn+662I/SvwxtjVVxpoH41mq4mFSV5tNdXYM irxmFe+iJ3GN0wjxdC8nkF9HHzxrwc52/NQh4XpcBS84aSfeKzWqqvOt90lAAKos Ri1WNdGxor68THT3jNzHCOynwRsggwErTzFD/SxMDE4zuZhtwikPxSvon7KEKvwH t8hEByKwcKvfNACfVdyRNG5ApsFD44HoZ49AGw/dkEDwYRSfAwc2NTi6y3yL5u2d xDcw4hXG/9RGVqrMALWtgviHaxiua1BXGwQ4RvIITcHTG5NOvNI= -----END CERTIFICATE-----Generated at Sun Dec 21 00:24:43 2025 by rpki-client