This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: yscL3jopRcWY8k/wJRtHuyYalA3blcpPEMAkr7CE6OE= Subject key identifier: F7:72:A2:60:1D:C1:EB:00:98:A0:E4:26:EF:DA:D2:B1:BA:B6:C0:CA Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 61AECAB5EC05A520DBC552544FFA0EF8EDEFE1FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 01AA Signing time: Thu 18 Dec 2025 10:20:40 +0000 Manifest this update: Thu 18 Dec 2025 10:15:40 +0000 Manifest next update: Sun 21 Dec 2025 18:52:40 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) 2: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: kYTqGexY4B05L41vWQgu6hxM4H4kCL4ut+XvQBT2Mhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ae:ca:b5:ec:05:a5:20:db:c5:52:54:4f:fa:0e:f8:ed:ef:e1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Dec 18 10:15:40 2025 GMT Not After : Dec 21 18:52:40 2025 GMT Subject: CN=F772A2601DC1EB0098A0E426EFDAD2B1BAB6C0CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:16:ae:a7:a0:29:1a:93:78:54:8c:a0:5c: 35:c9:98:6b:49:33:2c:3b:25:62:86:d6:c2:42:eb: 24:bb:68:d4:00:07:b2:24:88:b1:1d:c1:75:7b:d7: f0:62:c3:3f:05:59:ee:53:21:4f:c6:e7:9b:7a:f5: 43:95:79:48:a9:b3:a9:45:8c:cf:8e:a3:6a:11:db: e0:51:4b:44:6b:e1:67:be:ba:62:66:60:e1:a9:3d: f9:6e:75:bc:5d:f2:2b:97:c2:e3:7a:a1:93:be:60: 59:70:ce:3d:39:7b:32:fc:5e:d4:dc:b4:a6:46:7a: 4f:91:2e:31:b1:61:01:94:60:c9:82:fb:c8:5f:88: 88:cd:4a:80:be:48:9d:fc:78:cc:f3:8f:c3:77:ef: cf:35:45:c1:2a:f5:78:47:56:17:2c:3f:ee:d6:22: 98:d0:ed:56:46:73:d9:07:06:de:63:c6:ba:3f:aa: 37:2e:99:60:41:ea:cb:63:e6:d3:60:f4:94:1b:86: 35:a5:bf:77:65:5e:eb:d8:90:09:d9:38:b0:f1:c7: 82:c9:d8:af:cb:84:df:ee:f0:95:08:27:10:44:32: c9:49:db:a3:06:91:62:35:f8:4f:bc:4a:02:67:49: c8:da:2e:dc:d0:87:e2:49:f8:e8:15:a0:89:b8:96: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:72:A2:60:1D:C1:EB:00:98:A0:E4:26:EF:DA:D2:B1:BA:B6:C0:CA X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9e:65:d1:68:96:f9:cc:06:bc:75:6c:97:2e:dc:7d:78:26: 59:24:43:5e:19:26:b5:41:9d:97:b0:23:3f:34:8d:60:e2:b6: b7:14:67:64:29:32:d1:c2:4e:39:38:d9:5d:66:bc:98:30:35: 87:f6:8d:a3:81:c3:a9:dc:fb:cf:4d:6d:48:0f:38:2a:4d:ae: 2c:4b:c4:6c:f0:7c:7d:4f:66:65:47:c6:43:96:4d:db:c6:65: 91:06:50:8a:d7:7e:09:a3:25:89:ff:99:a4:47:12:b2:0a:53: 58:80:57:ab:f6:5c:63:ff:81:4f:a4:20:ee:ed:a1:ff:aa:e7: a5:7a:a3:d9:78:9d:6f:be:e2:fd:02:80:a3:d9:70:d6:6a:18: 4a:2e:85:c3:53:e8:3b:9d:84:ab:eb:d2:e4:39:7f:ee:f2:e5: fc:f1:27:e0:a3:93:8f:4e:91:1a:f4:e4:29:06:f0:89:6d:0d: 6c:ff:b9:c7:75:13:70:94:1d:6b:d6:52:cb:ad:cb:59:5d:f2: 72:2e:9b:fe:b7:f3:48:ea:6c:2e:bc:80:a0:e6:12:2a:df:e8: 03:0e:7f:d4:c7:53:00:86:2f:f5:9f:e0:5c:eb:e9:8d:a3:ea: 66:16:11:24:b5:3e:61:72:25:2e:7b:9a:dd:0b:5b:9d:13:77: ed:94:57:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYa7KtewFpSDbxVJUT/oO+O3v4f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNTEyMTgxMDE1NDBaFw0yNTEyMjExODUyNDBaMDMxMTAvBgNV BAMTKEY3NzJBMjYwMURDMUVCMDA5OEEwRTQyNkVGREFEMkIxQkFCNkMwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSxaup6ApGpN4VIygXDXJmGtJ Myw7JWKG1sJC6yS7aNQAB7IkiLEdwXV71/Biwz8FWe5TIU/G55t69UOVeUips6lF jM+Oo2oR2+BRS0Rr4We+umJmYOGpPfludbxd8iuXwuN6oZO+YFlwzj05ezL8XtTc tKZGek+RLjGxYQGUYMmC+8hfiIjNSoC+SJ38eMzzj8N37881RcEq9XhHVhcsP+7W IpjQ7VZGc9kHBt5jxro/qjcumWBB6stj5tNg9JQbhjWlv3dlXuvYkAnZOLDxx4LJ 2K/LhN/u8JUIJxBEMslJ26MGkWI1+E+8SgJnScjaLtzQh+JJ+OgVoIm4llpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93KiYB3B6wCYoOQm79rSsbq2wMowHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqeZdFolvnMBrx1bJcu3H14JlkkQ14ZJrVB nZewIz80jWDitrcUZ2QpMtHCTjk42V1mvJgwNYf2jaOBw6nc+89NbUgPOCpNrixL xGzwfH1PZmVHxkOWTdvGZZEGUIrXfgmjJYn/maRHErIKU1iAV6v2XGP/gU+kIO7t of+q56V6o9l4nW++4v0CgKPZcNZqGEouhcNT6DudhKvr0uQ5f+7y5fzxJ+Cjk49O kRr05CkG8IltDWz/ucd1E3CUHWvWUsuty1ld8nIum/6380jqbC68gKDmEirf6AMO f9THUwCGL/Wf4Fzr6Y2j6mYWESS1PmFyJS57mt0LW50Td+2UVxw= -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:11 2025 by rpki-client