This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft (raw, json)
Hash identifier: XwTPViU4GezL+qjgyK9uSWrbn0dfd6jC6MhNph5zOjU=
Subject key identifier: 5F:A4:47:78:4F:41:B5:24:CD:AC:03:63:BE:34:A7:E4:ED:A9:C2:2B
Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
Certificate issuer: /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Certificate serial: 072BA36B8AB94605208F8B0498385600B4826138
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
Manifest number: 04C1
Signing time: Thu 18 Dec 2025 06:31:02 +0000
Manifest this update: Thu 18 Dec 2025 06:26:02 +0000
Manifest next update: Sun 21 Dec 2025 10:01:02 +0000
Files and hashes: 1: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: b/xbORHT+fQcjRsUPACV/EddNJE5h6xg8w5gIZewjWA=)
2: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl (hash: JTEQBIwN1t5AQHkPb5CuCHj84z1S5L4A2IAu9/Ya9lM=)
3: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: sD1D71HTJcX0Tgc5u0wKCnB+drLmqPRrwWzHCdL5tpk=)
4: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: u5WfQAzN1c26Bk/yoWUZSKe+Zg3RVzlzDJ1SjGA5ptQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2b:a3:6b:8a:b9:46:05:20:8f:8b:04:98:38:56:00:b4:82:61:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Validity
Not Before: Dec 18 06:26:02 2025 GMT
Not After : Dec 21 10:01:02 2025 GMT
Subject: CN=5FA447784F41B524CDAC0363BE34A7E4EDA9C22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:17:8f:4a:d1:a3:ab:9e:8f:dc:7e:76:8c:
bd:16:d1:f6:39:3e:91:b2:be:70:a9:80:25:12:8c:
f5:5e:2e:03:08:28:4e:62:19:02:6d:c3:49:20:7a:
b3:22:8c:3d:2f:59:b9:cb:0b:d8:66:d8:80:f5:c7:
81:e3:2f:1e:91:65:5c:ae:6e:4d:a3:82:f9:2f:4a:
9c:b9:67:de:be:e9:32:15:28:17:83:fc:25:3e:09:
1f:22:c2:f7:65:fc:c0:00:12:43:a4:63:43:98:d7:
ff:d0:af:16:5d:78:20:4a:54:8f:28:ef:41:75:56:
94:5c:b7:0b:85:0c:68:1a:ff:27:ac:33:e2:76:7b:
de:e6:43:7f:db:99:f9:14:67:48:0a:23:66:fe:d0:
da:87:e1:2c:bd:5b:75:83:ac:ae:56:f0:e6:d2:91:
ac:39:36:aa:e0:57:60:55:f6:c6:36:b4:49:20:5d:
18:e6:c0:6d:02:1b:91:f0:a3:4a:69:ab:c4:03:91:
5e:f6:f5:7b:f2:c1:a4:93:02:74:ec:e0:88:d7:9e:
3b:b4:f1:7c:d3:a1:9a:11:61:2d:ee:37:e7:62:73:
d3:a9:e9:d7:c9:11:39:e1:98:9f:ad:92:05:d4:6d:
ca:56:d6:50:6b:ae:3f:54:17:fb:77:ca:16:e3:86:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:47:78:4F:41:B5:24:CD:AC:03:63:BE:34:A7:E4:ED:A9:C2:2B
X509v3 Authority Key Identifier:
keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a9:28:71:fe:f2:4b:c6:cf:f2:58:55:1b:ca:1d:ab:e2:84:
50:8a:2c:a6:55:cd:8f:d7:cd:2e:8d:18:8c:f0:9f:9f:4f:94:
8c:24:21:cc:be:33:98:28:82:1a:ed:9a:8d:4b:ce:a0:9a:81:
cd:8e:59:2d:f5:89:02:1f:fb:d7:f3:96:3a:83:bf:6a:dd:16:
1a:4f:f1:7e:cc:f2:c6:1b:36:cb:93:73:cb:80:59:6f:3a:05:
36:24:21:30:a2:99:3a:e4:e0:f7:49:17:03:9c:be:dd:e2:3d:
93:ac:e2:10:2a:2d:56:4a:0d:35:15:c9:d4:d8:8d:2e:3c:cf:
72:e6:97:02:c7:9e:c2:6c:dd:2f:b2:60:9e:18:96:e6:aa:9b:
e2:57:cf:4d:98:e9:af:87:59:ae:19:2a:41:7d:d4:d2:7d:10:
c3:52:e8:54:24:f4:36:51:44:ee:8d:fc:49:97:a3:81:4a:d1:
39:bc:75:4d:59:2d:01:2d:f1:d7:88:0d:f7:73:0d:67:1b:1b:
d8:a1:2d:4d:59:6e:eb:ea:76:e1:e5:da:88:83:b6:db:06:bc:
7c:a6:5e:a3:9d:f4:67:2f:39:1a:80:0d:0c:6e:59:68:5d:51:
fb:a9:1a:ff:d0:92:53:05:a4:5d:15:80:21:10:e6:fb:49:ee:
d0:b8:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:20:34 2025 by rpki-client