This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft File: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json) Hash identifier: qe762d/q5k+dWvtDpEeQpFAtYipkrRZsQzMNqYhl8oQ= Subject key identifier: 9C:4E:5A:18:A3:F6:1C:60:BF:20:A7:06:78:B6:94:F9:56:8C:0E:04 Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 2D1599ABB11345963B891756144736014A5F666F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft Manifest number: 0153 Signing time: Wed 17 Dec 2025 02:12:25 +0000 Manifest this update: Wed 17 Dec 2025 02:07:25 +0000 Manifest next update: Sat 20 Dec 2025 05:52:25 +0000 Files and hashes: 1: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: uH1ImKnvZ4/+icalKW+2+MW6fp/q9JNQMRFYCo7CkEs=) 2: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc=) 3: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:15:99:ab:b1:13:45:96:3b:89:17:56:14:47:36:01:4a:5f:66:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: Dec 17 02:07:25 2025 GMT Not After : Dec 20 05:52:25 2025 GMT Subject: CN=9C4E5A18A3F61C60BF20A70678B694F9568C0E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:ee:1f:3e:83:e2:44:61:b0:4b:a2:bd:36: 8e:42:b4:ce:bd:35:25:30:19:75:8a:41:82:b8:d0: ba:b6:ff:7d:4a:80:ce:8a:7c:10:19:d0:c7:ee:7f: cb:30:4a:db:aa:dc:92:38:b8:d9:f6:6c:bd:44:2c: 0b:49:43:1a:c6:0e:3c:81:0e:74:57:f3:af:cd:5f: e9:d6:71:ea:e5:d7:c1:b0:99:07:45:54:4d:f6:94: 6f:16:03:f3:31:e5:fd:64:40:07:31:a7:8c:26:a7: 11:7e:da:5c:a3:20:50:88:d5:50:1f:4d:af:9e:cb: 33:6a:06:0a:fc:00:f3:c4:f4:e8:72:7f:a8:34:5f: 30:e1:9d:d6:34:68:a2:7e:06:31:8a:13:cd:5e:db: bb:e1:15:c1:24:bc:f5:15:a3:d4:28:e6:4b:41:a3: 45:f2:b2:da:38:98:50:3d:4e:2e:6f:ad:b5:4b:9a: 07:3c:ff:49:b3:cd:6b:f5:30:f2:6a:72:96:6f:07: 4a:b9:46:f3:0a:01:54:c8:e8:d6:f0:89:6d:62:b1: 2b:e8:9a:2c:6a:fc:a5:4d:54:c7:3c:1f:83:c7:99: a2:4f:3d:20:0e:b9:47:1d:2d:94:a9:60:96:a8:6f: 4c:35:4e:84:87:6d:4d:d1:fb:b9:a2:5e:95:21:7b: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4E:5A:18:A3:F6:1C:60:BF:20:A7:06:78:B6:94:F9:56:8C:0E:04 X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8f:b9:83:df:95:9e:da:7d:27:f0:18:8e:ba:9b:93:d9:ed: 3b:69:a4:ed:54:dc:99:a3:44:9e:5e:f9:e8:81:24:67:0a:04: 5e:d6:71:9b:ae:9a:21:07:c9:41:4f:94:52:b6:af:46:62:f3: c9:ed:1f:d7:aa:9c:f5:5f:5d:1d:ed:05:4a:c4:b8:3e:bd:4c: 7d:4a:4b:ab:6d:7c:1e:6f:a6:be:7b:9c:65:05:17:99:06:fd: cf:db:62:97:92:ac:40:3d:0b:c4:3c:7b:b5:87:54:bf:e2:94: 07:26:af:56:b9:a7:15:05:22:9d:79:7f:15:32:d1:ba:3a:e9: 91:2c:f4:1e:cf:a7:12:68:1b:bb:6d:47:52:50:c9:d5:0f:d7: c0:39:c0:f4:83:20:5a:37:bf:0e:71:b4:ab:c8:6f:22:f4:21: 39:1f:7c:f1:6c:0d:36:58:5a:25:e4:db:71:67:01:79:c3:e5: f2:6b:1f:66:ee:ed:16:2b:51:b0:6b:e9:dd:55:3d:e0:d8:b1: ca:b7:f9:47:c0:8d:2b:c2:ee:d9:2c:22:6a:14:6a:ce:27:36: a4:97:fd:5c:49:9f:e7:bb:e9:96:e1:40:ff:8e:ea:df:fb:61: 86:d4:25:13:79:a3:d9:43:cb:45:2b:5e:40:70:ce:0c:e5:29: aa:02:82:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRWZq7ETRZY7iRdWFEc2AUpfZm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNTEyMTcwMjA3MjVaFw0yNTEyMjAwNTUyMjVaMDMxMTAvBgNV BAMTKDlDNEU1QTE4QTNGNjFDNjBCRjIwQTcwNjc4QjY5NEY5NTY4QzBFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZ+4fPoPiRGGwS6K9No5CtM69 NSUwGXWKQYK40Lq2/31KgM6KfBAZ0Mfuf8swStuq3JI4uNn2bL1ELAtJQxrGDjyB DnRX86/NX+nWcerl18GwmQdFVE32lG8WA/Mx5f1kQAcxp4wmpxF+2lyjIFCI1VAf Ta+eyzNqBgr8APPE9Ohyf6g0XzDhndY0aKJ+BjGKE81e27vhFcEkvPUVo9Qo5ktB o0Xysto4mFA9Ti5vrbVLmgc8/0mzzWv1MPJqcpZvB0q5RvMKAVTI6NbwiW1isSvo mixq/KVNVMc8H4PHmaJPPSAOuUcdLZSpYJaob0w1ToSHbU3R+7miXpUhe0U7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnE5aGKP2HGC/IKcGeLaU+VaMDgQwHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0 NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqPuYPflZ7afSfwGI66m5PZ7TtppO1U3Jmj RJ5e+eiBJGcKBF7WcZuumiEHyUFPlFK2r0Zi88ntH9eqnPVfXR3tBUrEuD69TH1K S6ttfB5vpr57nGUFF5kG/c/bYpeSrEA9C8Q8e7WHVL/ilAcmr1a5pxUFIp15fxUy 0bo66ZEs9B7PpxJoG7ttR1JQydUP18A5wPSDIFo3vw5xtKvIbyL0ITkffPFsDTZY WiXk23FnAXnD5fJrH2bu7RYrUbBr6d1VPeDYscq3+UfAjSvC7tksImoUas4nNqSX /VxJn+e76ZbhQP+O6t/7YYbUJRN5o9lDy0UrXkBwzgzlKaoCgpI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:29 2025 by rpki-client