This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft File: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json) Hash identifier: IgUcjILVJx7/a3qDgegXvi0Q4xldQzcx1hJvGGXopUg= Subject key identifier: 87:9A:7F:9E:2D:A9:90:35:9B:AD:B1:91:F0:C6:C8:52:F9:3E:49:99 Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Certificate serial: 44CE6C3670F35D0E79C7E0967C3EE4ED2F30D38C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft Manifest number: 01D5 Signing time: Tue 23 Dec 2025 20:21:53 +0000 Manifest this update: Tue 23 Dec 2025 20:16:53 +0000 Manifest next update: Sat 27 Dec 2025 03:55:53 +0000 Files and hashes: 1: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 2T9anWJYGXV0eFwi77jhWK8yssFnyZlgHKcoPcMUt7I=) 2: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: xIS6sNK0UqeUJFxq14NuNTlsbhpsETkb9gDhOu1ONl8=) 3: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: fqgPEiZyAb0hynbzck5IXEWLrXIgp6VsY2Pj0WiOvP0=) 4: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: GWXv/Jcvhsgx5xupvgCdstajkZkqV0dY8SAdabOvJ9g=) 5: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: oiVxgky/RUYwFnNkCPMUw22KRaw+1emaQcVcVJCQwvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ce:6c:36:70:f3:5d:0e:79:c7:e0:96:7c:3e:e4:ed:2f:30:d3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Validity Not Before: Dec 23 20:16:53 2025 GMT Not After : Dec 27 03:55:53 2025 GMT Subject: CN=879A7F9E2DA990359BADB191F0C6C852F93E4999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:ea:07:23:3c:cb:72:82:3c:87:4c:b3:48: b6:44:38:a8:20:37:cd:38:0a:3d:5c:99:4b:3a:f9: e3:f8:db:87:5a:cb:74:08:eb:65:e4:b4:1d:73:55: e2:0c:7a:c6:90:3e:1e:46:7c:38:1a:4b:03:26:18: ce:23:16:12:8d:da:ff:22:ef:90:47:70:c6:25:a1: ab:36:8b:c1:8b:ea:32:f7:76:ee:45:20:0e:11:f5: 27:85:e5:29:d9:77:cc:f8:79:c9:e0:a6:4e:22:a7: 03:a6:ea:59:c9:69:25:68:60:f9:3a:d8:75:ad:9a: 4a:cd:4b:5b:56:84:35:06:bf:ae:c1:d7:76:e0:76: 41:98:e0:b9:b3:b4:99:62:db:7e:4e:01:5a:76:39: b2:77:d5:cf:70:62:79:8e:80:c4:90:0d:0c:df:bc: 21:4a:2c:fc:37:b8:3c:09:08:61:d6:bc:d3:cf:9d: 56:a2:9b:9f:ce:98:b0:59:6a:3c:e6:6b:90:87:58: b4:5c:fe:98:16:a6:c3:10:da:b3:4e:85:d7:0e:0c: a2:26:39:d3:9b:f2:45:10:66:25:32:4b:05:da:59: ad:5a:44:29:09:63:df:64:6f:05:9a:05:cc:6d:8a: fd:8d:f2:6a:46:b0:16:ad:92:ae:8a:e0:32:90:50: 0a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9A:7F:9E:2D:A9:90:35:9B:AD:B1:91:F0:C6:C8:52:F9:3E:49:99 X509v3 Authority Key Identifier: keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f4:75:4b:26:e6:eb:18:5d:e2:65:5d:17:38:c5:0a:55:e7: ce:f5:76:d2:12:66:4e:c2:fa:8d:44:7f:ed:02:89:83:ac:8e: 1f:7e:1a:54:e5:6c:be:e0:7b:89:83:b1:1c:45:e4:25:9c:c6: aa:8d:5a:d8:9f:fd:5c:13:a9:3a:0b:bb:09:3b:f6:88:57:e0: e9:f7:cd:c9:d4:51:a3:4d:95:f2:03:6f:4e:24:86:4e:2c:4e: 22:7c:83:2d:88:19:92:ed:40:01:f3:6d:62:9b:00:0a:7a:8d: ea:2a:d6:aa:6b:79:63:b1:1e:65:db:98:7b:4d:b5:fc:8f:5f: 97:e7:eb:87:d6:c3:62:ea:bb:3c:76:fd:97:25:ea:3f:b2:7e: 7c:4c:f6:af:ca:db:35:4d:16:d7:f9:dd:9f:dc:85:c4:4f:22: b8:c9:83:72:a7:5c:cd:d2:71:62:44:60:60:c9:5d:2a:fd:d5: 42:57:f3:87:8e:57:52:bb:b0:2c:d7:09:28:c3:73:61:23:05: f2:84:a6:c7:e0:2c:26:17:8b:1c:ba:9a:a7:6b:d4:65:30:43: b7:4f:12:86:13:fd:e8:97:7e:77:5b:8d:45:08:07:47:9a:37: 7e:21:bd:69:ce:5d:90:5a:e0:0e:c6:7c:86:8c:fd:e9:a8:33: 1e:25:e8:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURM5sNnDzXQ55x+CWfD7k7S8w04wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD RjY2QjgwMTAeFw0yNTEyMjMyMDE2NTNaFw0yNTEyMjcwMzU1NTNaMDMxMTAvBgNV BAMTKDg3OUE3RjlFMkRBOTkwMzU5QkFEQjE5MUYwQzZDODUyRjkzRTQ5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxweoHIzzLcoI8h0yzSLZEOKgg N804Cj1cmUs6+eP424day3QI62XktB1zVeIMesaQPh5GfDgaSwMmGM4jFhKN2v8i 75BHcMYloas2i8GL6jL3du5FIA4R9SeF5SnZd8z4ecngpk4ipwOm6lnJaSVoYPk6 2HWtmkrNS1tWhDUGv67B13bgdkGY4LmztJli235OAVp2ObJ31c9wYnmOgMSQDQzf vCFKLPw3uDwJCGHWvNPPnVaim5/OmLBZajzma5CHWLRc/pgWpsMQ2rNOhdcODKIm OdOb8kUQZiUySwXaWa1aRCkJY99kbwWaBcxtiv2N8mpGsBatkq6K4DKQUApPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh5p/ni2pkDWbrbGR8MbIUvk+SZkwHwYDVR0j BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2 QjgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5 M0JDRjY2QjgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJP0dUsm5usYXeJlXRc4xQpV5871dtISZk7C +o1Ef+0CiYOsjh9+GlTlbL7ge4mDsRxF5CWcxqqNWtif/VwTqToLuwk79ohX4On3 zcnUUaNNlfIDb04khk4sTiJ8gy2IGZLtQAHzbWKbAAp6jeoq1qpreWOxHmXbmHtN tfyPX5fn64fWw2Lquzx2/Zcl6j+yfnxM9q/K2zVNFtf53Z/chcRPIrjJg3KnXM3S cWJEYGDJXSr91UJX84eOV1K7sCzXCSjDc2EjBfKEpsfgLCYXixy6mqdr1GUwQ7dP EoYT/eiXfndbjUUIB0eaN34hvWnOXZBa4A7GfIaM/emoMx4l6Hw= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:19 2025 by rpki-client