This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft
File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json)
Hash identifier: jmiO2otlXonnuwnvUb+ObMTjBprhXRPFcuAKMOExWJE=
Subject key identifier: 30:17:80:1D:B6:2F:46:77:0A:18:E4:E6:42:17:76:16:CB:D1:9F:11
Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40
Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640
Certificate serial: 4CAE63A5B64F53F96F47506B0456C207B1563CD6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft
Manifest number: 052E
Signing time: Tue 16 Dec 2025 23:01:12 +0000
Manifest this update: Tue 16 Dec 2025 22:56:12 +0000
Manifest next update: Sat 20 Dec 2025 09:34:12 +0000
Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=)
2: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: 9nuzeO99tgE3Lv5UvtZij5w/In47/VTRAMZ+jTjZeyk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl
rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 09:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ae:63:a5:b6:4f:53:f9:6f:47:50:6b:04:56:c2:07:b1:56:3c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640
Validity
Not Before: Dec 16 22:56:12 2025 GMT
Not After : Dec 20 09:34:12 2025 GMT
Subject: CN=3017801DB62F46770A18E4E642177616CBD19F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:46:0a:32:cc:36:ff:df:ba:b4:7e:17:7a:
f4:fa:5d:4e:51:93:41:f8:f2:bb:3a:7e:6e:12:a7:
bd:11:f1:0b:fe:3b:9b:3b:77:d0:64:7d:60:a7:74:
aa:b0:0d:c0:58:d0:c5:c4:f5:b3:63:c2:19:69:15:
ab:71:6e:27:06:e7:f3:29:7e:7f:be:be:9c:9d:78:
aa:9e:c1:76:a0:cf:ee:dc:a6:1e:5d:82:f1:fb:86:
04:cd:11:32:9d:fc:da:7c:44:e7:2f:7e:ac:bb:01:
b3:29:c6:b2:71:cd:59:10:29:a7:99:73:59:3b:38:
c5:5d:fe:f0:99:c9:2b:40:12:2f:19:d5:8c:35:d4:
03:0d:65:d4:4a:37:dc:db:8b:23:cf:ff:75:ef:f5:
a4:ad:77:2c:dd:a0:e3:27:69:af:af:bf:8a:64:a1:
f2:ab:f2:cc:58:e5:6c:73:77:b4:b8:8f:d4:13:ad:
ac:5c:6e:bf:32:95:57:c0:59:c2:fe:24:1b:dc:74:
4f:7a:33:c5:6b:7e:54:59:67:5d:1c:fc:9e:16:fc:
9d:95:64:22:bb:f6:e7:02:5e:26:7f:f2:b3:71:ab:
79:48:3e:63:b6:20:2b:7e:b1:01:5d:5c:e4:c0:6d:
f3:0c:62:d7:41:6f:d7:ef:6e:42:43:f9:72:0d:3a:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:80:1D:B6:2F:46:77:0A:18:E4:E6:42:17:76:16:CB:D1:9F:11
X509v3 Authority Key Identifier:
keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:77:92:4c:be:28:dd:07:e8:1a:bb:a3:10:fe:8e:93:be:17:
26:af:4d:89:9e:fd:f4:eb:f9:7a:ed:43:ee:5e:ac:d2:00:8f:
1e:d3:5b:a8:76:d5:f2:cd:cf:2b:93:46:fd:ed:18:76:2c:aa:
d5:4a:d2:d6:9b:a1:08:47:33:f5:04:ef:ea:2a:82:a4:01:81:
ac:02:bc:93:3b:b3:82:00:77:ce:88:cd:77:0b:50:27:32:ea:
37:56:2d:2c:fd:f6:e6:22:10:70:d3:07:fc:f2:5f:18:cb:1c:
57:92:53:a8:2b:b9:77:79:87:8e:d2:fe:37:ad:00:e2:56:8b:
09:c3:2c:08:a4:59:ce:a3:28:06:8e:e8:be:4d:1b:e3:c5:83:
71:84:ac:3b:ac:e7:d1:5e:05:d7:c7:86:8f:11:69:34:66:48:
d6:d8:48:3a:54:6d:3c:d5:ce:e3:88:66:11:f6:c8:46:44:29:
a0:16:21:53:b1:23:e7:b0:6e:3e:97:d2:32:19:81:7f:fa:c4:
9b:db:05:85:06:8c:02:9d:0b:9d:73:c1:19:d5:26:b4:b3:1e:
08:fd:13:e7:9a:83:57:79:e5:cb:fb:d9:18:02:fa:1e:b8:36:
ee:de:3b:83:57:a4:aa:d2:d9:6d:98:40:bb:0d:bf:8d:61:a8:
6d:37:f9:d3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTK5jpbZPU/lvR1BrBFbCB7FWPNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw
OEJBRTY0MDAeFw0yNTEyMTYyMjU2MTJaFw0yNTEyMjAwOTM0MTJaMDMxMTAvBgNV
BAMTKDMwMTc4MDFEQjYyRjQ2NzcwQTE4RTRFNjQyMTc3NjE2Q0JEMTlGMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlEYKMsw2/9+6tH4XevT6XU5R
k0H48rs6fm4Sp70R8Qv+O5s7d9BkfWCndKqwDcBY0MXE9bNjwhlpFatxbicG5/Mp
fn++vpydeKqewXagz+7cph5dgvH7hgTNETKd/Np8ROcvfqy7AbMpxrJxzVkQKaeZ
c1k7OMVd/vCZyStAEi8Z1Yw11AMNZdRKN9zbiyPP/3Xv9aStdyzdoOMnaa+vv4pk
ofKr8sxY5Wxzd7S4j9QTraxcbr8ylVfAWcL+JBvcdE96M8VrflRZZ10c/J4W/J2V
ZCK79ucCXiZ/8rNxq3lIPmO2ICt+sQFdXOTAbfMMYtdBb9fvbkJD+XINOtozAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMBeAHbYvRncKGOTmQhd2FsvRnxEwHwYDVR0j
BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy
RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB
RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1
YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB
QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFt3kky+KN0H6Bq7oxD+jpO+FyavTYme/fTr
+XrtQ+5erNIAjx7TW6h21fLNzyuTRv3tGHYsqtVK0taboQhHM/UE7+oqgqQBgawC
vJM7s4IAd86IzXcLUCcy6jdWLSz99uYiEHDTB/zyXxjLHFeSU6gruXd5h47S/jet
AOJWiwnDLAikWc6jKAaO6L5NG+PFg3GErDus59FeBdfHho8RaTRmSNbYSDpUbTzV
zuOIZhH2yEZEKaAWIVOxI+ewbj6X0jIZgX/6xJvbBYUGjAKdC51zwRnVJrSzHgj9
E+eag1d55cv72RgC+h64Nu7eO4NXpKrS2W2YQLsNv41hqG03+dM=
-----END CERTIFICATE-----
Generated at Fri Dec 19 03:05:40 2025 by rpki-client