This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft File: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft (raw, json) Hash identifier: lYaqI8Og2xOUEcup29Dw7RjCigBJHqSkeHuPjPOk+YU= Subject key identifier: 3E:B0:F7:5E:45:A2:0A:B1:93:04:7E:7F:96:D8:72:4E:4F:BA:46:57 Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Certificate serial: 1F498285C8AF8303664CBFA068D0DF066726A1EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft Manifest number: 0332 Signing time: Sun 21 Dec 2025 06:02:08 +0000 Manifest this update: Sun 21 Dec 2025 05:57:08 +0000 Manifest next update: Wed 24 Dec 2025 16:39:08 +0000 Files and hashes: 1: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl (hash: dXaaxT9oZOMACNdey9OA73hObY/Pz+HenAbzBeLY+Gw=) 2: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: g0qXlise9HaMFGbsno6S9nxOreCjvNtFTp/h65NgFw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 16:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:49:82:85:c8:af:83:03:66:4c:bf:a0:68:d0:df:06:67:26:a1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Validity Not Before: Dec 21 05:57:08 2025 GMT Not After : Dec 24 16:39:08 2025 GMT Subject: CN=3EB0F75E45A20AB193047E7F96D8724E4FBA4657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:ec:e7:58:dc:05:1d:1a:0f:0a:93:87:9a: 8c:c7:08:4e:42:37:b8:72:d4:94:f0:5b:8d:66:7e: ae:94:38:e9:de:78:0e:08:74:19:b4:07:d8:34:95: 87:c1:92:cd:78:62:ab:ac:16:30:3b:a2:d2:82:48: 5a:21:4a:f7:a6:1d:83:d4:1c:ac:e1:79:e0:2d:97: 47:76:5f:63:b5:44:46:e8:c6:30:f7:b5:24:e9:1d: 7a:35:6b:6a:2d:78:45:0c:4f:6a:3b:a6:aa:62:ae: 13:f3:82:d2:71:6e:f4:87:0e:f6:2b:b0:c5:7f:6d: cc:fd:20:12:31:e4:6a:76:0b:7c:01:6d:2c:ee:6a: 72:1f:ee:a3:cb:26:e6:1d:dd:4c:0a:cd:40:1f:4e: 25:d2:57:3b:f7:cf:d6:55:63:22:a5:49:a8:70:63: 7d:52:4f:4f:71:e7:09:15:f4:32:b0:de:e8:ab:93: 5d:8e:43:95:9e:e8:ce:db:82:5f:5c:4e:5a:ae:84: f4:ef:18:48:eb:74:42:1a:75:59:64:23:05:76:d1: 82:84:d7:9f:65:56:b5:68:2e:36:2f:5d:1d:9e:06: 9d:fe:97:38:aa:f4:ed:d0:9c:f0:4d:1f:d6:cd:f8: 56:7b:12:a2:69:43:f5:f8:e8:29:97:44:3e:94:e5: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B0:F7:5E:45:A2:0A:B1:93:04:7E:7F:96:D8:72:4E:4F:BA:46:57 X509v3 Authority Key Identifier: keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ec:5e:9d:8a:1f:19:95:32:ef:59:73:e8:bd:f4:e2:a4:e0: d8:48:7e:3f:16:b0:1c:54:ae:e3:2c:31:ce:21:35:4a:0a:43: b6:cc:59:18:d8:14:06:ad:62:3b:70:49:5a:a0:a5:c4:b3:6c: be:e3:e9:e5:91:f8:2c:63:05:73:c6:17:15:f9:bf:fa:ae:8b: 74:51:98:71:b8:d0:c9:e8:74:d5:45:b7:f9:8d:0d:c7:da:9b: 1b:54:b9:db:15:49:4c:e1:b6:91:a8:93:32:94:5f:3a:75:38: 30:cc:07:1c:ca:4b:33:50:cc:13:b0:8e:ad:a3:b2:40:42:6b: 78:17:cc:52:ed:12:15:da:93:61:52:51:b2:28:83:cb:b1:e2: f9:b8:d9:32:a3:a3:97:65:e3:59:be:97:ee:b4:c7:d7:e8:4b: 7a:08:90:70:10:68:de:37:d3:b9:4a:46:5a:57:4c:97:79:33: 59:e8:87:9f:71:a7:67:f3:8f:c8:f4:6e:81:70:7c:e5:6a:05: 4f:1b:a3:50:67:bc:e0:9d:8a:e7:a8:70:f8:fb:8b:a1:08:d2: 6d:53:98:0c:0a:62:5a:e1:46:6b:ca:68:5f:5b:25:4f:cb:aa: dd:09:2c:4e:8f:ec:b8:e5:51:9b:a0:31:77:07:a7:30:e3:9b: 77:cd:f9:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0mChcivgwNmTL+gaNDfBmcmoe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0 NDQ5QUM2RTAeFw0yNTEyMjEwNTU3MDhaFw0yNTEyMjQxNjM5MDhaMDMxMTAvBgNV BAMTKDNFQjBGNzVFNDVBMjBBQjE5MzA0N0U3Rjk2RDg3MjRFNEZCQTQ2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/+znWNwFHRoPCpOHmozHCE5C N7hy1JTwW41mfq6UOOneeA4IdBm0B9g0lYfBks14YqusFjA7otKCSFohSvemHYPU HKzheeAtl0d2X2O1REboxjD3tSTpHXo1a2oteEUMT2o7pqpirhPzgtJxbvSHDvYr sMV/bcz9IBIx5Gp2C3wBbSzuanIf7qPLJuYd3UwKzUAfTiXSVzv3z9ZVYyKlSahw Y31ST09x5wkV9DKw3uirk12OQ5We6M7bgl9cTlquhPTvGEjrdEIadVlkIwV20YKE 159lVrVoLjYvXR2eBp3+lziq9O3QnPBNH9bN+FZ7EqJpQ/X46CmXRD6U5YvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPrD3XkWiCrGTBH5/lthyTk+6RlcwHwYDVR0j BBgwFoAUtoKfXn73td8zl80yIhYL6URJrG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTA5MDU3My02YWQzLTRlNjMtOGFmNC04YTJkNTgyYWEwY2QvMC9CNjgyOUY1RTdF RjdCNURGMzM5N0NEMzIyMjE2MEJFOTQ0NDlBQzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0NDQ5 QUM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh ZjQtOGEyZDU4MmFhMGNkLzAvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBC RTk0NDQ5QUM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/sXp2KHxmVMu9Zc+i99OKk4NhIfj8WsBxU ruMsMc4hNUoKQ7bMWRjYFAatYjtwSVqgpcSzbL7j6eWR+CxjBXPGFxX5v/qui3RR mHG40MnodNVFt/mNDcfamxtUudsVSUzhtpGokzKUXzp1ODDMBxzKSzNQzBOwjq2j skBCa3gXzFLtEhXak2FSUbIog8ux4vm42TKjo5dl41m+l+60x9foS3oIkHAQaN43 07lKRlpXTJd5M1noh59xp2fzj8j0boFwfOVqBU8bo1BnvOCdiueocPj7i6EI0m1T mAwKYlrhRmvKaF9bJU/Lqt0JLE6P7LjlUZugMXcHpzDjm3fN+eg= -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:55 2025 by rpki-client