This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json)
Hash identifier: qSlsuvhxgtIGWBfhXaM+eHsuiRi9pdtBgeYoqEYeiVg=
Subject key identifier: 33:4C:99:43:10:E1:30:C9:10:48:FB:89:75:F8:7C:63:6C:73:C3:F0
Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95
Certificate issuer: /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95
Certificate serial: 26089DA0D6E3BB6DDD5A99DA64465CEDC47BCF6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
Manifest number: 0539
Signing time: Tue 30 Dec 2025 04:52:14 +0000
Manifest this update: Tue 30 Dec 2025 04:47:14 +0000
Manifest next update: Fri 02 Jan 2026 07:53:14 +0000
Files and hashes: 1: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=)
2: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: SKxw8usPJvjVBgjYM0Ku9c01YozilJHi09lpw6k9Wic=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl
rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 07:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:08:9d:a0:d6:e3:bb:6d:dd:5a:99:da:64:46:5c:ed:c4:7b:cf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95
Validity
Not Before: Dec 30 04:47:14 2025 GMT
Not After : Jan 2 07:53:14 2026 GMT
Subject: CN=334C994310E130C91048FB8975F87C636C73C3F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:5a:a4:d4:6c:22:47:d4:ae:d1:45:08:06:
09:5e:0d:5d:5a:82:dd:6a:ed:27:ae:50:c3:85:fa:
2e:50:88:3f:5c:e7:91:f0:4b:de:5a:1e:1e:2c:c9:
3e:b2:d7:5e:20:73:ac:de:0a:9b:c1:b5:92:99:5d:
98:23:38:03:0e:63:66:77:25:e1:a3:6e:a8:ac:4e:
c7:c5:36:8c:ce:63:df:60:b0:49:38:e6:1d:f3:5d:
38:62:9d:35:8f:cb:10:5c:65:93:88:89:5e:16:0c:
9d:be:e7:ab:b3:bd:47:62:54:49:8d:3b:0a:12:ba:
ea:78:f3:f7:71:93:63:b6:c3:67:6c:5e:17:ae:bd:
f0:7b:b4:9c:a3:38:d1:e7:71:35:92:5d:91:9c:62:
86:f2:14:80:04:64:c7:b3:48:74:49:f3:c5:b1:16:
86:78:52:7c:e8:77:1d:d9:b4:1e:89:4b:32:7c:3c:
e7:06:dd:02:11:13:ac:f0:b1:b6:96:9b:61:64:ac:
03:c2:01:f2:ff:4f:fd:31:79:83:b7:19:89:41:c4:
ce:03:47:f9:32:12:09:62:65:61:9d:e0:1d:d3:ca:
06:12:09:a4:7b:8f:09:12:cb:94:65:f0:35:41:3f:
d4:5d:6d:c1:74:55:ba:40:2d:d1:42:9d:a0:2d:28:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4C:99:43:10:E1:30:C9:10:48:FB:89:75:F8:7C:63:6C:73:C3:F0
X509v3 Authority Key Identifier:
keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:46:c1:6a:78:64:03:09:17:02:49:27:8d:50:7e:eb:ca:b4:
b8:9b:4a:75:b6:a0:7a:dc:ba:0a:90:35:7a:e3:66:41:5a:58:
08:46:66:ce:49:67:ba:ae:e5:0f:f5:0f:3e:aa:6b:2e:d8:d3:
5b:3b:02:4a:41:4e:38:bb:cd:ec:e5:b9:0e:0d:a8:74:24:0e:
68:10:6c:97:fc:47:2c:c5:bd:b4:b4:71:30:ea:25:12:f5:31:
95:88:d9:6d:4b:73:46:f5:5d:d3:c8:48:5b:cd:e5:6b:01:f9:
28:ea:6d:a0:70:35:38:86:be:1c:6d:cf:86:95:7c:96:4d:c6:
6f:5c:ef:7d:c2:d0:5a:88:2a:48:a8:34:9d:83:b5:80:9b:99:
8a:e6:5e:37:09:f1:dd:5d:5f:71:59:f4:8c:52:7d:73:23:dd:
95:dd:3b:98:bc:53:5d:31:13:20:9d:56:c8:a6:20:4c:f4:52:
bb:e1:a3:a9:cb:b3:65:8a:b9:22:1f:17:48:00:65:13:38:6b:
0d:47:b7:8c:88:e6:0d:62:1b:cb:05:6f:53:01:79:ac:9f:cc:
af:fe:79:bc:19:5f:a5:f8:cc:9c:d4:66:4c:e5:52:cb:0a:f4:
97:26:f8:c7:14:87:4e:a7:26:9b:e1:3c:8c:a8:18:61:e3:da:
46:01:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:04:09 2025 by rpki-client