This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft File: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft (raw, json) Hash identifier: QCid7n64b+xM6x7tHc60C5tWsH4SWYgVuJAXXnKqIlY= Subject key identifier: 3A:B0:B3:68:6E:3E:C0:E0:89:BC:53:36:75:CB:F6:AB:B7:0E:41:E7 Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 Certificate issuer: /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Certificate serial: 2B0AE9AEE54E6765CA3CFFB5E04758AD945B0B9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft Manifest number: AA Signing time: Wed 17 Dec 2025 12:40:54 +0000 Manifest this update: Wed 17 Dec 2025 12:35:54 +0000 Manifest next update: Sat 20 Dec 2025 15:40:54 +0000 Files and hashes: 1: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: wnaZXzJu/9XYkLWvstgZSpRMBHg1zffk2A9AEFHpANM=) 2: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: q0yJUvBcjd2NEtr8e4z3fwmDmV4NBgtGO2qntKq/f+g=) 3: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NDeOIbsC2Gb17cgUpeSYzxHEHiZeh+ueNQnGf7HfQng=) 4: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: Ngb3LnXQ11YHQrKg5E3aodFpuV+UGL7buohqyUmiTrA=) 5: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: 3ZpfdTtxXj52cP2nsv6kg1TUa5J+9S8J6u9CtjkNgCU=) 6: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: zMpVgEWzPdDK17NtW9oxpCMK4fkWK+NftKAxjrfh35o=) 7: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: NPtGQfnjNiCvn81mxs4KeV6zEFVnWZPCAxC6gItEmqo=) 8: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: /GwhlBmTeqRQ0qTqfr/7dYrst12Hg3GNSY71ebWYL0A=) 9: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: LWSN+OOVgP5g9xcwwR15CS7HhslaezIfEbjBNEwvwaI=) 10: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl (hash: 0uCmAeIeM05KjA/yRla1GmRlei6YqszQoshcdTG1q20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:0a:e9:ae:e5:4e:67:65:ca:3c:ff:b5:e0:47:58:ad:94:5b:0b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Validity Not Before: Dec 17 12:35:54 2025 GMT Not After : Dec 20 15:40:54 2025 GMT Subject: CN=3AB0B3686E3EC0E089BC533675CBF6ABB70E41E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:22:cf:76:64:8f:ea:6d:fd:e9:78:49:39:00: be:39:24:8c:cf:eb:c0:c8:d9:bf:17:82:9d:31:07: 22:e4:40:ef:38:d7:50:17:01:5d:2c:f0:ad:0f:11: 43:1a:bd:1c:92:c7:62:e2:7e:49:41:59:23:e6:59: 3d:a5:7b:a7:e8:49:d0:28:be:61:ff:ce:23:83:de: b4:bc:95:cc:64:d2:dd:e2:da:ee:df:55:d5:d7:3a: 8a:91:b7:e1:0e:7b:73:25:27:9e:2d:b3:3c:fa:8b: 97:0f:a3:70:2f:0c:9a:6a:76:05:81:6a:34:7d:a7: 87:90:1e:89:34:dc:03:65:45:b1:e9:ec:fb:96:26: 22:9a:8f:97:c7:b1:03:e9:b3:c5:01:9f:26:a8:de: cf:cd:77:4a:1a:dc:eb:e8:14:7a:bf:e2:0b:f1:c7: 16:86:7a:03:6c:9c:d6:e9:96:f2:ac:12:a0:8b:4e: 2f:c8:86:b2:4c:74:f6:ac:fb:d8:8d:da:7d:fc:40: bd:5a:54:cb:77:18:65:11:10:00:63:af:ee:d6:49: 17:fd:39:22:32:b2:a0:07:f1:3d:21:9c:a2:34:ee: 8b:ca:3e:5f:38:04:4e:1c:e4:42:e3:f3:ac:28:c9: b4:0f:d2:07:e6:6c:86:1d:bc:99:8b:28:3d:1c:86: e3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B0:B3:68:6E:3E:C0:E0:89:BC:53:36:75:CB:F6:AB:B7:0E:41:E7 X509v3 Authority Key Identifier: keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:70:0a:66:08:ce:6f:63:8a:9e:ea:9f:62:99:d0:06:75:38: be:03:36:d9:ec:b9:2f:6b:f4:dc:d3:62:6b:ed:4a:1c:36:45: 2d:19:40:53:fb:7a:73:71:37:69:37:70:b9:3a:45:ae:09:c8: 08:87:45:d1:84:2a:7a:8b:e0:0f:f6:14:3b:d5:90:dc:52:95: 79:5f:22:fa:0c:32:fd:5c:fc:f4:eb:42:7d:75:c3:57:b9:3f: bb:93:da:24:df:95:c6:87:56:48:6d:a9:09:36:bc:54:82:1c: 31:13:cb:4f:53:e6:3a:69:3d:ca:66:a2:e0:94:96:80:f6:2a: 20:0a:28:b1:31:33:61:71:83:dd:25:fb:b6:81:27:fc:8a:5c: da:e0:2f:2d:14:a4:5e:b3:56:a7:b8:bb:45:76:25:1c:56:96: 52:ec:d2:7e:5e:33:66:68:06:99:b8:44:9b:61:0d:3d:c4:d7: 6f:b9:36:96:3b:9e:39:12:e9:54:ad:54:66:0e:57:3e:3c:0e: 4c:1c:d7:23:d5:38:b6:40:36:39:fc:08:34:d2:1d:25:a2:a5: 47:f0:1e:2c:14:44:19:22:b1:ce:a9:2d:1b:03:d8:40:f2:3e: bf:32:95:6d:d6:ed:a3:1f:95:70:44:30:4f:3c:49:ee:35:d5: 27:f6:db:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwrpruVOZ2XKPP+14EdYrZRbC5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4 QkE3QkU0MDAeFw0yNTEyMTcxMjM1NTRaFw0yNTEyMjAxNTQwNTRaMDMxMTAvBgNV BAMTKDNBQjBCMzY4NkUzRUMwRTA4OUJDNTMzNjc1Q0JGNkFCQjcwRTQxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Is92ZI/qbf3peEk5AL45JIzP 68DI2b8Xgp0xByLkQO8411AXAV0s8K0PEUMavRySx2LifklBWSPmWT2le6foSdAo vmH/ziOD3rS8lcxk0t3i2u7fVdXXOoqRt+EOe3MlJ54tszz6i5cPo3AvDJpqdgWB ajR9p4eQHok03ANlRbHp7PuWJiKaj5fHsQPps8UBnyao3s/Nd0oa3OvoFHq/4gvx xxaGegNsnNbplvKsEqCLTi/IhrJMdPas+9iN2n38QL1aVMt3GGUREABjr+7WSRf9 OSIysqAH8T0hnKI07ovKPl84BE4c5ELj86woybQP0gfmbIYdvJmLKD0chuOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOrCzaG4+wOCJvFM2dcv2q7cOQecwHwYDVR0j BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3 QkU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVG QUI4QkE3QkU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNwCmYIzm9jip7qn2KZ0AZ1OL4DNtnsuS9r 9NzTYmvtShw2RS0ZQFP7enNxN2k3cLk6Ra4JyAiHRdGEKnqL4A/2FDvVkNxSlXlf IvoMMv1c/PTrQn11w1e5P7uT2iTflcaHVkhtqQk2vFSCHDETy09T5jppPcpmouCU loD2KiAKKLExM2Fxg90l+7aBJ/yKXNrgLy0UpF6zVqe4u0V2JRxWllLs0n5eM2Zo Bpm4RJthDT3E12+5NpY7njkS6VStVGYOVz48Dkwc1yPVOLZANjn8CDTSHSWipUfw HiwURBkisc6pLRsD2EDyPr8ylW3W7aMflXBEME88Se411Sf22yA= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:33 2025 by rpki-client