This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft
File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json)
Hash identifier: 7pCOBIpHPZrjSWR/GNmNZqiqzYvhqrx9Se9sctQZtS0=
Subject key identifier: B5:08:AC:81:CB:A0:9A:32:0B:06:66:7E:C7:B3:14:EB:13:AF:C4:8A
Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E
Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E
Certificate serial: 3A753C54B86C508670EAA104B4733472BF2969A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft
Manifest number: 0107
Signing time: Tue 16 Dec 2025 17:52:20 +0000
Manifest this update: Tue 16 Dec 2025 17:47:20 +0000
Manifest next update: Sat 20 Dec 2025 02:39:20 +0000
Files and hashes: 1: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: te2XD8QtE8dOtKaSxeh5Rxhvto0lzXpFBWrz4O7q+BQ=)
2: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=)
3: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=)
4: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl
rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 02:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:75:3c:54:b8:6c:50:86:70:ea:a1:04:b4:73:34:72:bf:29:69:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E
Validity
Not Before: Dec 16 17:47:20 2025 GMT
Not After : Dec 20 02:39:20 2025 GMT
Subject: CN=B508AC81CBA09A320B06667EC7B314EB13AFC48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:79:da:df:95:e3:e6:ff:6e:cd:4e:cd:c7:
d6:3a:a7:f4:02:27:e1:e6:f7:8d:70:38:f9:8b:3c:
ec:58:21:ed:f5:58:ef:b0:13:4b:3d:77:ac:64:06:
c1:72:9d:86:fc:dd:15:b2:0a:e2:40:bb:90:e5:ea:
95:f0:da:8b:2e:a2:f4:a3:88:57:cb:f4:30:a5:1e:
02:0d:4a:93:5e:a4:72:41:37:39:4d:d3:c2:cd:ca:
78:79:bb:a2:43:50:ed:a5:21:93:00:2a:16:35:f1:
35:e6:7d:a8:0c:0f:e0:29:79:d9:41:ec:5f:00:8e:
bd:c3:79:38:d6:08:d4:ad:86:9c:bb:b5:5e:cb:47:
04:79:c1:60:bd:91:cb:51:9b:4e:c7:b2:37:b0:71:
2e:63:33:eb:98:4d:37:15:5e:2f:37:3b:e2:43:06:
8d:e4:3a:86:43:9f:21:c3:e5:52:72:c7:fc:69:0a:
18:4a:8b:21:98:a0:db:50:5b:20:10:d7:5a:77:90:
34:01:06:7c:6b:25:5e:29:bc:31:02:d1:4b:e3:a4:
de:6d:62:ff:2d:b8:0e:b4:d7:e6:a2:2a:e4:ed:2f:
fd:a7:ad:c2:d7:58:94:d8:0b:45:d1:e2:9b:2e:bf:
8d:82:7c:50:70:96:8f:2b:ca:81:a1:73:66:99:ab:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:08:AC:81:CB:A0:9A:32:0B:06:66:7E:C7:B3:14:EB:13:AF:C4:8A
X509v3 Authority Key Identifier:
keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5f:86:42:6f:2f:85:47:69:78:b6:9f:34:7f:cd:cc:53:a5:
33:64:fe:99:e5:6c:b7:cc:d8:f4:97:59:eb:59:f0:2f:2c:21:
74:40:8a:7e:cf:81:30:93:9d:0b:c2:c8:47:1e:2a:f0:88:a1:
49:14:bf:26:fb:f7:86:51:1b:a3:45:20:bd:04:e4:a0:2e:7e:
7c:fc:15:98:3c:15:39:13:e4:f3:83:9d:70:31:18:8e:40:2b:
13:77:53:2a:c0:15:f4:33:ab:93:eb:04:59:32:02:27:1b:5d:
16:3e:2b:c2:2a:95:df:34:8e:08:ac:8a:c7:b0:81:b0:ce:2d:
d1:6e:7a:45:a7:1e:d8:26:51:a4:92:57:fc:f8:8e:60:7f:cf:
c0:69:bd:a3:6d:08:ea:20:ae:5e:dd:24:68:ea:48:7b:ee:65:
36:11:3a:7e:7f:f3:77:a0:b4:55:f5:fb:5c:f3:54:ee:fa:ac:
67:a9:4a:dc:64:7c:82:c9:c8:ad:78:d0:bb:e3:ab:15:23:e1:
a8:6b:bf:10:80:fd:cd:8e:73:2b:44:f0:c6:d4:81:b6:18:4f:
fa:f8:6f:fe:f0:d8:c6:53:2f:44:53:53:18:22:7d:4a:d2:0e:
e6:0a:73:ce:03:fd:de:ab:eb:0e:0f:8b:e4:0a:b3:63:b8:6f:
a2:08:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:17:29 2025 by rpki-client