This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: wVnwq1YphEhTphq8RtjJ69/II1tCF8SjiRi8qysRVHo= Subject key identifier: 1F:15:DE:38:9E:C3:D9:D0:76:73:8C:D2:47:FA:C4:97:DB:91:B0:1B Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 15F0C4EAFBBD7C52CCD6FBB041A221AAA8343A98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 01EE Signing time: Thu 25 Dec 2025 01:11:33 +0000 Manifest this update: Thu 25 Dec 2025 01:06:33 +0000 Manifest next update: Sun 28 Dec 2025 06:15:33 +0000 Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=) 2: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: eUUJUWeseDDtwRK6N78/foIrD/MadhMj5HFvjD1cp0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f0:c4:ea:fb:bd:7c:52:cc:d6:fb:b0:41:a2:21:aa:a8:34:3a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Dec 25 01:06:33 2025 GMT Not After : Dec 28 06:15:33 2025 GMT Subject: CN=1F15DE389EC3D9D076738CD247FAC497DB91B01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:af:27:af:03:fc:b4:cd:68:c7:d3:2e:c3: bb:71:7d:f0:95:16:22:7f:78:5e:3f:f6:e2:44:19: 82:a8:d0:af:66:5c:56:73:7f:dd:c8:50:a1:82:46: c1:d5:ac:6c:ba:db:a0:84:ec:60:d3:48:0f:bd:ac: 4e:90:80:95:42:2a:d7:7a:d2:1c:25:2f:80:c5:72: 3a:1a:12:9e:6f:99:81:ce:79:70:1d:49:1d:50:b5: b7:47:d9:82:0f:19:47:f7:3f:7e:42:fa:7d:06:47: 64:ee:dd:7d:43:b1:fe:56:9a:7f:34:92:a6:ca:79: 60:7e:9b:60:6a:dd:cb:68:36:fa:60:d2:0e:ee:15: b1:d5:bf:9c:b2:1b:53:69:b5:4f:e3:1e:1c:8b:08: 74:45:81:9b:85:60:68:8b:6b:74:d0:29:49:68:fc: e1:9f:21:16:d9:13:d3:da:ad:4d:93:44:e7:e6:de: f6:3a:53:78:5f:75:e4:40:ff:c9:82:d4:2d:05:2a: 88:52:c2:11:0f:45:71:dd:1d:f5:2f:2d:25:29:6d: 53:4c:8a:87:37:4d:e4:2f:f1:42:07:d0:c3:76:1e: ee:1a:45:7a:c2:3d:0b:03:09:6f:d4:f9:7e:a9:33: 40:9e:d2:fc:8e:fd:b1:e0:27:11:6d:b8:f0:ac:8f: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:15:DE:38:9E:C3:D9:D0:76:73:8C:D2:47:FA:C4:97:DB:91:B0:1B X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:10:a7:6f:38:54:99:56:ad:30:e8:60:22:b7:d5:a8:88:54: 5c:82:39:2e:8d:34:18:5a:e7:81:e9:7f:06:52:2d:57:77:38: 8d:cb:e8:fb:dd:6b:0e:61:3e:66:d5:f2:de:b0:46:8a:cb:bf: 9e:47:4d:af:77:79:59:99:35:0b:53:24:c0:67:c5:c7:0e:b2: 70:82:eb:e0:d5:4b:cb:f9:de:51:97:11:9e:c0:11:8a:a9:12: 7b:50:a0:5a:df:5d:36:2f:66:9e:21:2c:6a:61:6c:99:76:a3: a1:ee:cc:bf:ea:ff:5f:02:97:3b:5d:71:37:02:5d:74:be:9a: 6f:83:5b:f7:5a:05:98:71:ea:e1:43:b9:c5:f3:05:b8:b3:c3: 71:51:32:aa:ed:f5:b7:cd:b7:b8:76:fa:bf:28:02:38:15:ae: b2:d5:7b:c2:b3:48:14:75:c8:de:82:d7:49:55:d4:e8:64:5d: e6:5e:7f:64:ca:31:fc:d0:9f:a6:b1:a8:0e:d2:f5:a2:0c:09: f0:04:63:d5:ae:3f:40:9f:5e:44:91:0a:70:22:e0:97:e6:4a: 7c:90:39:30:de:75:10:09:c7:78:2c:af:a3:26:a3:b6:10:c9: 2c:05:8a:1d:77:93:ce:2d:33:42:ae:21:3f:48:5c:7a:e2:d8: cf:f7:5d:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfDE6vu9fFLM1vuwQaIhqqg0OpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNTEyMjUwMTA2MzNaFw0yNTEyMjgwNjE1MzNaMDMxMTAvBgNV BAMTKDFGMTVERTM4OUVDM0Q5RDA3NjczOENEMjQ3RkFDNDk3REI5MUIwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM168nrwP8tM1ox9Muw7txffCV FiJ/eF4/9uJEGYKo0K9mXFZzf93IUKGCRsHVrGy626CE7GDTSA+9rE6QgJVCKtd6 0hwlL4DFcjoaEp5vmYHOeXAdSR1QtbdH2YIPGUf3P35C+n0GR2Tu3X1Dsf5Wmn80 kqbKeWB+m2Bq3ctoNvpg0g7uFbHVv5yyG1NptU/jHhyLCHRFgZuFYGiLa3TQKUlo /OGfIRbZE9ParU2TROfm3vY6U3hfdeRA/8mC1C0FKohSwhEPRXHdHfUvLSUpbVNM ioc3TeQv8UIH0MN2Hu4aRXrCPQsDCW/U+X6pM0Ce0vyO/bHgJxFtuPCsj1avAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHxXeOJ7D2dB2c4zSR/rEl9uRsBswHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEQp284VJlWrTDoYCK31aiIVFyCOS6NNBha 54HpfwZSLVd3OI3L6Pvdaw5hPmbV8t6wRorLv55HTa93eVmZNQtTJMBnxccOsnCC 6+DVS8v53lGXEZ7AEYqpEntQoFrfXTYvZp4hLGphbJl2o6HuzL/q/18ClztdcTcC XXS+mm+DW/daBZhx6uFDucXzBbizw3FRMqrt9bfNt7h2+r8oAjgVrrLVe8KzSBR1 yN6C10lV1OhkXeZef2TKMfzQn6axqA7S9aIMCfAEY9WuP0CfXkSRCnAi4JfmSnyQ OTDedRAJx3gsr6Mmo7YQySwFih13k84tM0KuIT9IXHri2M/3XZw= -----END CERTIFICATE-----Generated at Fri Dec 26 07:50:31 2025 by rpki-client