This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: eSL9SU8tliaCQ1aXNoX4HD29xbgjuqv2j7mMsZHGgEM= Subject key identifier: 25:7C:20:EF:B8:F3:E3:48:7E:24:A7:A8:69:AA:0F:DC:4E:80:BB:E5 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 45E7CDFD557432166EF7C045FE8653F7F79C7401 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: A9 Signing time: Tue 16 Dec 2025 03:01:29 +0000 Manifest this update: Tue 16 Dec 2025 02:56:29 +0000 Manifest next update: Fri 19 Dec 2025 06:10:29 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: i70g+GwD21YDsMW+4LKOIJvPDqgsobV0afp0wj+r5HM=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: 9vj7DxNotTv3HDzH1VeyBvLPc3Sjc9l8eAoTE9C3NlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 06:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e7:cd:fd:55:74:32:16:6e:f7:c0:45:fe:86:53:f7:f7:9c:74:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Dec 16 02:56:29 2025 GMT Not After : Dec 19 06:10:29 2025 GMT Subject: CN=257C20EFB8F3E3487E24A7A869AA0FDC4E80BBE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:62:b0:59:45:f5:f3:8b:e9:f0:95:40:d2: 93:62:55:33:f3:f1:68:90:1f:78:00:93:f1:1b:2f: 21:0f:35:16:e4:5e:93:20:39:52:bc:f3:8d:80:e9: 90:65:ca:e9:cf:04:28:3f:92:e0:3e:97:1c:0d:36: ef:e1:fa:f3:b2:ec:12:e0:cf:e2:91:2b:c2:00:bf: df:d6:65:fa:27:8f:bd:67:86:36:a9:a3:09:08:fe: 6c:94:aa:96:fc:e7:71:ae:d9:d9:74:4e:ef:02:1c: 52:69:b6:c2:55:e0:07:68:a5:7c:f8:25:47:e4:2f: 10:19:ec:de:23:52:9c:ae:5c:8d:b7:42:08:76:7a: 53:bc:40:35:3a:cd:de:88:23:d0:7e:41:3d:16:d7: 1c:89:e5:e7:29:f3:26:a5:22:7c:4b:a2:28:01:42: ec:f2:b1:e9:7a:f5:9e:07:0d:6c:c6:0c:b9:3f:2f: ed:f9:d0:17:80:52:86:82:c7:ef:da:9f:03:00:48: e6:42:2e:f7:e6:fd:96:9c:59:f9:60:4c:0f:7a:bc: 00:9a:9f:a4:64:1e:e2:4f:6b:f6:bc:e2:78:4a:40: 77:4a:85:fe:c9:2f:f6:d2:e3:13:8f:b3:73:b6:bc: 9b:37:14:e4:6c:82:b5:88:44:70:21:66:98:d8:3d: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7C:20:EF:B8:F3:E3:48:7E:24:A7:A8:69:AA:0F:DC:4E:80:BB:E5 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:26:98:00:70:62:65:6b:e5:4d:fe:72:1f:26:58:23:f4:91: 80:f5:c3:fb:ed:02:fd:c0:56:92:df:06:95:42:e6:f6:65:a4: 61:80:c1:f4:a3:c5:35:9f:0a:0d:6e:88:a2:eb:ed:09:1f:ff: 85:a6:c9:f0:37:68:b7:63:00:4d:06:09:13:bb:84:b4:29:ce: 72:8d:12:5f:54:5c:b9:7c:a0:28:44:ab:df:20:23:44:ed:bf: 4b:9b:58:5a:fe:80:d0:71:d1:a5:49:9e:f4:fe:a3:35:d2:6b: 27:c5:48:22:31:0a:20:e6:33:19:25:20:ff:1d:de:44:5d:5f: 40:10:cf:77:23:7b:39:72:b0:06:3a:bc:c2:1e:3c:43:e5:10: 9a:b9:d6:11:76:5b:4e:b8:92:26:3d:00:c0:51:5e:5f:bb:3f: 87:72:e3:9b:84:a1:75:ef:e5:34:de:f3:7d:4d:04:3d:5b:da: 79:2a:76:82:ac:62:97:90:dd:b8:98:a4:38:e2:c7:cf:3d:4f: b0:f6:29:a0:f1:6d:ac:e2:b7:d9:f3:ed:c6:4d:37:7f:26:c5: 5e:80:2d:a1:ad:06:84:c9:c0:1f:0e:f5:61:9d:0e:d8:4c:9e: 2e:76:48:69:5c:d2:00:2f:42:f1:90:75:45:a2:bb:db:9b:80: e1:7b:dc:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURefN/VV0MhZu98BF/oZT9/ecdAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNTEyMTYwMjU2MjlaFw0yNTEyMTkwNjEwMjlaMDMxMTAvBgNV BAMTKDI1N0MyMEVGQjhGM0UzNDg3RTI0QTdBODY5QUEwRkRDNEU4MEJCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLamKwWUX184vp8JVA0pNiVTPz 8WiQH3gAk/EbLyEPNRbkXpMgOVK8842A6ZBlyunPBCg/kuA+lxwNNu/h+vOy7BLg z+KRK8IAv9/WZfonj71nhjapowkI/myUqpb853Gu2dl0Tu8CHFJptsJV4AdopXz4 JUfkLxAZ7N4jUpyuXI23Qgh2elO8QDU6zd6II9B+QT0W1xyJ5ecp8yalInxLoigB Quzysel69Z4HDWzGDLk/L+350BeAUoaCx+/anwMASOZCLvfm/ZacWflgTA96vACa n6RkHuJPa/a84nhKQHdKhf7JL/bS4xOPs3O2vJs3FORsgrWIRHAhZpjYPcP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJXwg77jz40h+JKeoaaoP3E6Au+UwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsmmABwYmVr5U3+ch8mWCP0kYD1w/vtAv3A VpLfBpVC5vZlpGGAwfSjxTWfCg1uiKLr7Qkf/4WmyfA3aLdjAE0GCRO7hLQpznKN El9UXLl8oChEq98gI0Ttv0ubWFr+gNBx0aVJnvT+ozXSayfFSCIxCiDmMxklIP8d 3kRdX0AQz3cjezlysAY6vMIePEPlEJq51hF2W064kiY9AMBRXl+7P4dy45uEoXXv 5TTe831NBD1b2nkqdoKsYpeQ3biYpDjix889T7D2KaDxbazit9nz7cZNN38mxV6A LaGtBoTJwB8O9WGdDthMni52SGlc0gAvQvGQdUWiu9ubgOF73F8= -----END CERTIFICATE-----Generated at Wed Dec 17 00:16:56 2025 by rpki-client