This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: HAkuic/tRysABnH/Ldm7advpjGtiELVElRxyLZEHt0U= Subject key identifier: D8:BE:23:C0:F3:9C:97:F9:C6:91:13:C2:17:4A:60:2F:38:8E:9E:C8 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 0FA9ECE99A55BF083A174ED81A4F70909ED857AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: BA Signing time: Sun 21 Dec 2025 05:11:46 +0000 Manifest this update: Sun 21 Dec 2025 05:06:46 +0000 Manifest next update: Wed 24 Dec 2025 15:04:46 +0000 Files and hashes: 1: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: wPxSuYf2yHUfithp5L6QXGgRABh8h0L/KrB8jWGeZgk=) 2: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: MByiWqioSG0bs5FrR2S5ZWO/VS/KpKaL9p/BlUB5wIY=) 3: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: SznPKhQPKlumNSdukCt0jZbfcUX8DE7OHpbeCdn75DM=) 4: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=) 5: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: BohmVCdqXlKZG+sKe25j9jAyDRmpT+hYiOTt1ls3vLA=) 6: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=) 7: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: td0OSINBGBuv5HEsFIZ58nSKSttNzeWBzHe87KLyw90=) 8: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a9:ec:e9:9a:55:bf:08:3a:17:4e:d8:1a:4f:70:90:9e:d8:57:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Dec 21 05:06:46 2025 GMT Not After : Dec 24 15:04:46 2025 GMT Subject: CN=D8BE23C0F39C97F9C69113C2174A602F388E9EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:ca:52:46:96:69:ec:bb:3d:2b:39:b8:d3: 1b:17:f8:0c:7b:78:2f:44:34:92:70:1d:cc:e1:5e: b6:06:95:88:c1:7f:1d:aa:91:d9:d9:8b:32:24:ed: ad:77:b5:43:f1:73:e6:3f:0b:0c:25:e9:e5:c5:73: 93:5d:08:e3:3d:f9:fd:46:08:ea:d3:2b:3e:2b:ea: 27:fc:1f:18:bd:b6:9c:aa:9b:d7:2c:3d:2f:96:c2: d3:0a:4d:e3:63:02:da:06:80:fd:42:5c:af:72:30: 14:28:54:64:0e:ec:de:2a:50:a8:60:62:4c:17:8a: cf:30:72:f0:6f:34:de:f4:1d:5f:46:27:66:ee:91: a7:9f:0a:ce:32:fd:5c:c2:d5:33:f7:d5:e2:1b:19: 30:83:7a:57:17:4a:ea:f0:b9:f7:f6:7e:15:e8:b1: 3e:6f:d7:0e:d6:8c:e0:c5:50:10:c7:69:8c:e5:a6: 99:ca:d0:5d:c4:96:56:78:4b:0b:2d:5b:7a:21:c5: 15:67:3b:0d:af:b1:ab:5d:be:a0:9b:61:4d:12:7f: 48:47:fe:69:05:26:ac:99:07:34:ba:8e:cd:35:4c: a3:f9:9d:29:8b:f7:0a:e3:84:46:45:0f:5e:d6:8e: 7f:e1:0f:62:2c:b0:0f:a6:61:19:3c:69:44:fe:35: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:23:C0:F3:9C:97:F9:C6:91:13:C2:17:4A:60:2F:38:8E:9E:C8 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1d:fd:b1:ce:29:8e:0e:1f:40:dd:ed:78:7c:07:a5:1e:18: 2e:3f:03:d3:aa:1b:8c:20:f6:9c:c3:c8:56:a1:0b:b2:bd:64: 93:a7:cb:b9:79:84:8e:29:40:b3:d5:a3:6d:9d:7f:7d:24:54: bd:84:4f:c6:f5:5f:c3:b0:9d:f8:d7:66:f2:05:45:63:36:b1: 96:5f:2d:a7:cd:c8:97:27:8b:62:11:ea:d6:1c:ec:27:11:fa: b3:b1:06:5d:6f:9a:f7:93:3b:82:d0:46:dc:40:42:91:ca:d8: b7:49:13:7b:6e:62:f1:df:5d:31:66:c0:8e:83:d5:6c:6a:e3: 3d:d7:0d:8f:f0:04:56:92:40:d4:a2:dd:98:c7:da:40:d5:31: 2d:a8:4e:11:7e:8b:97:4b:fc:53:8c:46:0d:5f:62:6a:d0:14: 6a:66:d4:04:b6:87:bb:b6:7f:6c:15:d3:e8:a3:b5:7a:af:1d: 58:1c:ed:b4:e5:5e:0e:42:10:85:bd:bb:70:f5:05:3a:af:d0: 4f:b3:cc:1c:63:d7:44:b1:e5:7b:eb:0d:7c:72:0c:95:56:f7: fb:01:4d:a7:8e:e8:19:72:2a:b9:3b:7d:07:be:73:c4:a0:16: 20:23:ee:84:92:3e:1d:ed:0f:eb:c0:6b:3c:1a:12:62:d3:5a: 84:f9:be:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6ns6ZpVvwg6F07YGk9wkJ7YV68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTEyMjEwNTA2NDZaFw0yNTEyMjQxNTA0NDZaMDMxMTAvBgNV BAMTKEQ4QkUyM0MwRjM5Qzk3RjlDNjkxMTNDMjE3NEE2MDJGMzg4RTlFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuE8pSRpZp7Ls9Kzm40xsX+Ax7 eC9ENJJwHczhXrYGlYjBfx2qkdnZizIk7a13tUPxc+Y/Cwwl6eXFc5NdCOM9+f1G COrTKz4r6if8Hxi9tpyqm9csPS+WwtMKTeNjAtoGgP1CXK9yMBQoVGQO7N4qUKhg YkwXis8wcvBvNN70HV9GJ2bukaefCs4y/VzC1TP31eIbGTCDelcXSurwuff2fhXo sT5v1w7WjODFUBDHaYzlppnK0F3EllZ4SwstW3ohxRVnOw2vsatdvqCbYU0Sf0hH /mkFJqyZBzS6js01TKP5nSmL9wrjhEZFD17Wjn/hD2IssA+mYRk8aUT+NbVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2L4jwPOcl/nGkRPCF0pgLziOnsgwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgd/bHOKY4OH0Dd7Xh8B6UeGC4/A9OqG4wg 9pzDyFahC7K9ZJOny7l5hI4pQLPVo22df30kVL2ET8b1X8OwnfjXZvIFRWM2sZZf LafNyJcni2IR6tYc7CcR+rOxBl1vmveTO4LQRtxAQpHK2LdJE3tuYvHfXTFmwI6D 1Wxq4z3XDY/wBFaSQNSi3ZjH2kDVMS2oThF+i5dL/FOMRg1fYmrQFGpm1AS2h7u2 f2wV0+ijtXqvHVgc7bTlXg5CEIW9u3D1BTqv0E+zzBxj10Sx5XvrDXxyDJVW9/sB TaeO6BlyKrk7fQe+c8SgFiAj7oSSPh3tD+vAazwaEmLTWoT5vtM= -----END CERTIFICATE-----Generated at Mon Dec 22 06:32:01 2025 by rpki-client