This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: OsVsDPs7s/sq6qjTrkgOuKSKfgTLM0w3qF3brT7ouX4= Subject key identifier: E7:A3:80:D9:1B:CB:7C:AB:DE:07:F0:C7:95:16:93:56:61:6A:50:71 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 30D0F2DD5FEDBB2872CFF0D5454B65081E0BAA40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 027B Signing time: Sun 21 Dec 2025 21:21:02 +0000 Manifest this update: Sun 21 Dec 2025 21:16:02 +0000 Manifest next update: Thu 25 Dec 2025 08:47:02 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: XhAJmRm6ZcTMjlVm4d1YrSxmeNRfzEm7fPRW8yuZLvM=) 2: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: pFmd2Evf1JfCwSJUq1zKZ7DKdZUK7KTT5wZCiV9Wfcs=) 3: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=) 4: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: Gtq4zn6fbpWZLOIoyW58FgxVB5xH/XexZKLUM3ncdiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d0:f2:dd:5f:ed:bb:28:72:cf:f0:d5:45:4b:65:08:1e:0b:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Dec 21 21:16:02 2025 GMT Not After : Dec 25 08:47:02 2025 GMT Subject: CN=E7A380D91BCB7CABDE07F0C795169356616A5071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:e1:e2:6c:c5:43:42:89:f7:0b:15:f1:22: 34:b8:85:cb:f8:b4:42:1a:45:4e:65:de:d0:d9:85: ec:f8:98:00:60:37:8b:c0:91:c9:67:94:07:57:1f: fa:35:e2:9b:35:a0:e6:39:80:34:d8:4b:3c:a6:12: 28:08:bb:1d:3f:06:fb:65:46:7b:51:e5:ea:c3:21: f5:ec:2a:48:a2:5c:0e:4b:f3:dc:bf:a9:6a:7a:65: 8b:ab:84:14:9d:be:ae:7a:47:84:30:38:4a:c2:16: db:e5:05:c1:2d:a7:64:16:33:28:38:a9:b5:2c:9e: 72:43:b5:35:ad:87:06:19:8b:0f:8d:44:87:c3:ba: be:3c:15:a1:3c:98:55:38:49:11:10:cc:e0:1c:eb: 95:e3:65:8a:e7:1e:3f:45:a4:7b:49:a9:70:83:8e: 5d:e9:d4:c4:6f:b4:75:b4:0a:f3:e0:3d:09:cc:2c: c9:23:05:d9:6b:74:c7:84:ce:97:0d:9b:e4:19:6f: 57:9f:56:85:73:d1:d5:b3:c9:0c:85:69:d8:52:7f: 56:b9:f4:af:aa:e5:ec:39:a2:cf:64:bf:c9:22:33: 03:52:81:d4:21:df:28:f8:bf:1e:18:ea:b6:ca:31: 8e:9c:e1:d7:e8:09:18:07:85:18:cd:6c:09:22:d6: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A3:80:D9:1B:CB:7C:AB:DE:07:F0:C7:95:16:93:56:61:6A:50:71 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:d7:0e:a8:e9:8d:41:18:48:95:2a:38:a4:25:ab:80:00: 64:62:c6:41:c9:43:cd:fb:de:3c:9e:8e:c5:01:b1:61:02:34: 2f:41:f1:17:f2:02:58:92:91:f3:b9:22:4b:56:87:2c:36:9d: 76:14:a5:f4:6a:99:a3:e8:5d:81:b1:ef:c7:92:b9:46:e4:92: 25:47:9a:e3:46:de:0a:6f:b0:10:29:e2:9e:70:00:55:d1:40: a8:ce:6d:91:8c:ad:45:3f:62:08:b6:25:bb:6e:20:5a:b4:7f: e5:3a:e9:71:a6:db:6a:e8:fb:8c:57:bb:99:28:65:88:7d:a6: cf:78:2c:46:e6:6f:21:a9:98:88:02:77:9d:1a:c8:9d:5f:1e: d4:17:45:e2:14:80:aa:72:4e:79:41:1d:a6:d1:1a:54:1a:fb: b0:02:98:82:cc:45:ad:c6:d2:dd:f8:cb:4f:47:84:8c:1e:a4: 77:16:ac:07:2b:6c:8e:c0:06:0e:17:05:2b:86:c1:63:d0:c1: f8:2b:90:86:43:d4:c6:a2:fb:78:e5:81:ae:26:b8:c5:21:3d: ec:e7:88:4c:3d:03:29:06:41:91:83:7c:11:52:94:8c:59:74: 25:b0:c4:34:d5:06:86:da:80:83:c2:2c:2e:6f:5b:34:c5:22: 5a:8f:76:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNDy3V/tuyhyz/DVRUtlCB4LqkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTEyMjEyMTE2MDJaFw0yNTEyMjUwODQ3MDJaMDMxMTAvBgNV BAMTKEU3QTM4MEQ5MUJDQjdDQUJERTA3RjBDNzk1MTY5MzU2NjE2QTUwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZu+HibMVDQon3CxXxIjS4hcv4 tEIaRU5l3tDZhez4mABgN4vAkclnlAdXH/o14ps1oOY5gDTYSzymEigIux0/Bvtl RntR5erDIfXsKkiiXA5L89y/qWp6ZYurhBSdvq56R4QwOErCFtvlBcEtp2QWMyg4 qbUsnnJDtTWthwYZiw+NRIfDur48FaE8mFU4SREQzOAc65XjZYrnHj9FpHtJqXCD jl3p1MRvtHW0CvPgPQnMLMkjBdlrdMeEzpcNm+QZb1efVoVz0dWzyQyFadhSf1a5 9K+q5ew5os9kv8kiMwNSgdQh3yj4vx4Y6rbKMY6c4dfoCRgHhRjNbAki1iQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU56OA2RvLfKveB/DHlRaTVmFqUHEwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdP1w6o6Y1BGEiVKjikJauAAGRixkHJQ837 3jyejsUBsWECNC9B8RfyAliSkfO5IktWhyw2nXYUpfRqmaPoXYGx78eSuUbkkiVH muNG3gpvsBAp4p5wAFXRQKjObZGMrUU/Ygi2JbtuIFq0f+U66XGm22ro+4xXu5ko ZYh9ps94LEbmbyGpmIgCd50ayJ1fHtQXReIUgKpyTnlBHabRGlQa+7ACmILMRa3G 0t34y09HhIwepHcWrAcrbI7ABg4XBSuGwWPQwfgrkIZD1Mai+3jlga4muMUhPezn iEw9AykGQZGDfBFSlIxZdCWwxDTVBobagIPCLC5vWzTFIlqPduk= -----END CERTIFICATE-----Generated at Mon Dec 22 14:58:01 2025 by rpki-client