This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: 5JT3cgGzSpqGKNMgmYA4UJZ2EGo/nkBiqc645jf1hF0= Subject key identifier: 57:88:F3:CF:2C:F6:1A:6A:6E:CF:00:D1:0E:05:C5:0D:1E:FB:C9:30 Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 33FC0B9099388CBCBF6366FA13BBC0540BBDE04A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 01B5 Signing time: Wed 17 Dec 2025 13:41:12 +0000 Manifest this update: Wed 17 Dec 2025 13:36:12 +0000 Manifest next update: Sat 20 Dec 2025 20:10:12 +0000 Files and hashes: 1: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: zJ+sW91R2vtAognhEs+mM8jj52TrqGJET/EG0ItzSJ0=) 2: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fc:0b:90:99:38:8c:bc:bf:63:66:fa:13:bb:c0:54:0b:bd:e0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Dec 17 13:36:12 2025 GMT Not After : Dec 20 20:10:12 2025 GMT Subject: CN=5788F3CF2CF61A6A6ECF00D10E05C50D1EFBC930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0b:46:ec:4b:29:d5:c8:ed:1f:71:77:c4:e0: af:5e:72:6c:09:5c:94:22:c2:da:d9:2c:e6:55:cd: 10:5e:53:09:f6:bc:db:6c:3f:40:de:50:17:59:c0: f7:b3:2f:3c:db:ce:41:0b:d7:27:10:31:8c:92:74: c7:86:19:7b:f5:24:4a:e9:c9:f2:97:d8:69:9e:c2: d9:56:14:44:63:71:b0:4b:4b:ad:7b:26:d5:4a:48: b1:cf:1e:ec:56:68:eb:ed:bb:14:91:c3:17:8d:80: e3:db:05:a4:9f:96:36:1a:e2:bc:ad:ea:55:97:37: 9c:19:df:ad:84:f5:69:a5:35:c6:b8:f4:db:2f:9c: 97:9b:52:ed:35:46:28:e6:cc:55:65:2e:f4:da:a4: 14:df:93:b9:0a:9c:c7:9d:d4:7d:4f:8f:61:12:7d: 2b:76:18:f5:03:15:8e:bd:f2:56:69:53:31:52:81: b4:a5:c8:b4:6b:a8:a5:17:92:67:b7:9a:5a:a3:45: 1c:cb:b6:35:48:dd:7d:90:9b:0d:39:d4:19:ce:96: f0:c1:3d:24:ba:17:07:70:43:49:2a:89:fd:f7:d6: b1:bc:ff:c7:67:f5:59:9a:40:1f:d0:90:c1:b0:2d: d1:6b:2a:07:eb:47:9d:58:c1:d8:c0:ea:ab:23:86: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:88:F3:CF:2C:F6:1A:6A:6E:CF:00:D1:0E:05:C5:0D:1E:FB:C9:30 X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d4:df:b6:a0:a4:be:c9:08:98:4e:32:ec:87:01:05:75:59: 7a:6d:f8:07:15:93:dd:6a:f3:0c:5a:4c:6d:57:49:b2:f5:2f: b2:a9:67:5b:c6:87:bc:2e:eb:63:43:a3:c8:cc:28:19:f4:3f: 71:fe:8d:a1:04:d8:78:fb:bc:ad:1f:d2:c1:19:fd:ea:e6:86: cd:b9:f1:38:c5:be:c8:24:6e:20:fb:a4:82:07:33:4a:ea:88: 8d:2a:79:1f:17:56:26:f9:ba:cf:ca:6f:57:ee:2b:6d:83:94: 48:05:cf:1d:a5:c7:32:83:0d:4c:71:fc:04:9a:45:61:6c:10: 3b:a6:fc:51:1d:7c:ff:ff:e4:f4:68:0a:73:47:74:ca:74:48: b8:b3:2a:12:88:bc:bd:cb:43:77:9d:48:dd:74:53:02:02:a6: 1e:73:5b:dd:d5:80:3d:3c:04:74:02:d9:4e:63:e7:7f:d9:23: 26:48:48:22:d8:bf:bc:05:4d:a0:c2:ae:cb:39:40:87:36:92: 78:50:d4:31:c2:ab:46:c2:e3:3e:f6:93:da:78:58:45:70:e3: c5:c6:df:e1:f0:a5:f8:a6:aa:90:9b:e9:5f:89:82:8e:dc:d2: 71:4c:31:9a:56:95:a8:a2:9d:a8:02:5a:2e:db:c7:d0:9f:ad: 71:b0:2b:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/wLkJk4jLy/Y2b6E7vAVAu94EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTEyMTcxMzM2MTJaFw0yNTEyMjAyMDEwMTJaMDMxMTAvBgNV BAMTKDU3ODhGM0NGMkNGNjFBNkE2RUNGMDBEMTBFMDVDNTBEMUVGQkM5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwC0bsSynVyO0fcXfE4K9ecmwJ XJQiwtrZLOZVzRBeUwn2vNtsP0DeUBdZwPezLzzbzkEL1ycQMYySdMeGGXv1JErp yfKX2GmewtlWFERjcbBLS617JtVKSLHPHuxWaOvtuxSRwxeNgOPbBaSfljYa4ryt 6lWXN5wZ362E9WmlNca49NsvnJebUu01RijmzFVlLvTapBTfk7kKnMed1H1Pj2ES fSt2GPUDFY698lZpUzFSgbSlyLRrqKUXkme3mlqjRRzLtjVI3X2Qmw051BnOlvDB PSS6FwdwQ0kqif331rG8/8dn9VmaQB/QkMGwLdFrKgfrR51YwdjA6qsjhr1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV4jzzyz2GmpuzwDRDgXFDR77yTAwHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPU37agpL7JCJhOMuyHAQV1WXpt+AcVk91q 8wxaTG1XSbL1L7KpZ1vGh7wu62NDo8jMKBn0P3H+jaEE2Hj7vK0f0sEZ/ermhs25 8TjFvsgkbiD7pIIHM0rqiI0qeR8XVib5us/Kb1fuK22DlEgFzx2lxzKDDUxx/ASa RWFsEDum/FEdfP//5PRoCnNHdMp0SLizKhKIvL3LQ3edSN10UwICph5zW93VgD08 BHQC2U5j53/ZIyZISCLYv7wFTaDCrss5QIc2knhQ1DHCq0bC4z72k9p4WEVw48XG 3+HwpfimqpCb6V+Jgo7c0nFMMZpWlaiinagCWi7bx9CfrXGwK6I= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:30 2025 by rpki-client