This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json)
Hash identifier: 7xm5tE8n68gm4XSXoVvAaVux3S8bzf9hy8DCCFMnHB8=
Subject key identifier: A4:BF:50:06:AB:D7:44:43:17:08:20:8C:7F:79:F0:F3:03:C4:24:CF
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial: 6D4E1DA2F1AFA36D2A93912CC3EF082874BBF51A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
Manifest number: A6
Signing time: Tue 16 Dec 2025 17:02:25 +0000
Manifest this update: Tue 16 Dec 2025 16:57:25 +0000
Manifest next update: Sat 20 Dec 2025 03:00:25 +0000
Files and hashes: 1: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: H33ymI9ju2NfQ2pOTJN+8hPqJ6LyJFP7aCyIqWIccfg=)
2: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: 2bo14asIeMFuulQFAuyOMWvwruZszgFyWNm1gWivGps=)
3: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: qHrXMqQTucTeofIinh+6AXijbtXSBcDb8eithAS0vbA=)
4: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: qZQ4FJYs46n/+hOc10zmPRfwJHK6+NPt/Sqykb6up2s=)
5: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: jZM60p+ihsOsnG/o5i9hHgFmzFPD3WS1aTcQqe2yPLg=)
6: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: +hUiKGjNBdX0t5XyVoEGWfbtJN2Ytj7Rbwxf8+Ephlk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:4e:1d:a2:f1:af:a3:6d:2a:93:91:2c:c3:ef:08:28:74:bb:f5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Validity
Not Before: Dec 16 16:57:25 2025 GMT
Not After : Dec 20 03:00:25 2025 GMT
Subject: CN=A4BF5006ABD744431708208C7F79F0F303C424CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:a6:54:57:73:82:2a:23:09:3a:33:48:2e:
af:74:01:6a:fa:d2:6f:9d:91:ff:71:41:35:61:92:
bd:fd:b5:ff:19:ee:85:e8:29:e0:3e:1e:eb:c1:f9:
32:fb:50:2d:c8:75:91:fd:43:f0:dc:b8:47:7e:bc:
cf:80:b4:64:0f:f6:47:96:c5:c9:46:61:4a:7e:e1:
9d:63:e1:2d:64:c5:1e:28:80:e0:c3:47:bf:3d:02:
0a:f7:56:6f:fd:ef:2b:7b:16:d6:c0:ce:b9:28:a7:
37:91:c1:d1:cf:94:f9:9d:18:21:82:8c:23:1d:3d:
5c:43:af:f2:9b:6c:42:2d:11:0d:c0:07:4c:32:54:
80:0a:79:2e:60:3d:9a:ee:87:fa:75:94:f8:32:34:
b2:38:68:7e:36:1f:e6:42:2a:18:ba:aa:ee:b8:28:
1d:85:51:30:7d:e9:4d:0f:80:fe:bf:c0:b9:29:0b:
8e:58:79:c5:88:3a:a8:fa:58:d9:ab:b8:66:31:c4:
f6:c0:ab:af:20:6e:57:47:18:b7:c8:7d:6d:4b:bc:
85:e2:e6:32:89:35:af:2e:b4:d7:10:88:0e:da:fc:
c4:f7:b8:9f:90:d6:d5:c1:a9:8b:4d:39:1e:db:0a:
f7:5c:fe:58:f4:40:8f:94:27:17:49:a0:60:f2:3d:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BF:50:06:AB:D7:44:43:17:08:20:8C:7F:79:F0:F3:03:C4:24:CF
X509v3 Authority Key Identifier:
keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9e:23:14:50:2c:d0:f4:60:9a:81:83:68:78:85:50:58:51:
04:71:75:3c:d8:8f:d3:01:7c:cf:b6:1b:7b:75:c6:bf:f9:c4:
f5:49:b5:ce:49:47:bb:d5:a4:74:63:67:4a:8b:64:04:4a:ad:
b8:42:42:32:09:96:77:6f:20:ce:01:18:52:13:56:d0:ef:c8:
90:97:8a:a0:5e:21:bd:57:46:f4:b8:74:83:d2:44:e1:6e:d0:
3a:c1:47:eb:a6:27:5d:89:e5:26:10:19:a3:af:dd:b9:ff:d9:
43:cc:26:dc:fa:ef:8c:ff:21:bb:92:9c:78:4e:25:d7:6e:42:
14:0a:18:34:9e:8c:0e:44:0b:c3:b5:60:d8:88:f7:63:6f:bc:
f7:f5:f3:1f:86:0c:fc:28:c2:e1:55:b6:6b:8f:a6:c6:9b:d3:
fb:b9:f2:61:f4:d4:bf:14:40:dd:df:b0:ff:05:73:89:c7:88:
b8:fc:fd:5e:0b:04:d3:3c:54:48:c6:7f:cb:d8:8d:08:b4:36:
30:b5:5a:2a:50:f7:3c:ed:af:77:88:ae:2a:34:5e:76:8d:fc:
a9:fb:14:41:89:b0:12:39:9f:28:91:36:6e:a6:2d:c5:4e:bd:
3d:43:23:20:b2:e4:e0:df:9b:fb:e4:ea:e6:8d:40:62:b1:16:
91:cb:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:33:12 2025 by rpki-client