This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: b31aCxPflWBciWXFft56dR5YmY415SmVGJSk+LbTgt4= Subject key identifier: 05:BF:C9:27:C1:3A:DF:D9:8D:4C:B1:11:7D:8A:A2:19:96:BA:BA:CD Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 2AB6A68333A97A520EFD72DE637F0449CC03637F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 026B Signing time: Fri 19 Dec 2025 06:10:04 +0000 Manifest this update: Fri 19 Dec 2025 06:05:04 +0000 Manifest next update: Mon 22 Dec 2025 16:29:04 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: DEctQrPR1f7clMzlCgnnGDnZx+kgndKVvSG1Ex3+0zM=) 2: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: QrPOj62YnpVvnKWbhXmsWfTlE+QpgwY06Wo/lh3zliI=) 3: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: uqlkKEi+3Kuiwspe5lJAQSY00flw6eNdCf3ryMXqCGs=) 4: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: G6q+ji3yFL/G+ROfvGqGZ4h9avpUHfcEbpzAoAOSho8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 16:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b6:a6:83:33:a9:7a:52:0e:fd:72:de:63:7f:04:49:cc:03:63:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Dec 19 06:05:04 2025 GMT Not After : Dec 22 16:29:04 2025 GMT Subject: CN=05BFC927C13ADFD98D4CB1117D8AA21996BABACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:3c:08:0f:a4:db:bb:c6:9a:db:f4:df:bd: 1d:37:b1:e1:a7:5f:4a:37:c4:a3:47:21:c6:ec:0d: 4a:a5:81:13:33:78:b1:35:52:f0:a0:24:36:49:34: a0:58:ae:f3:ef:79:18:39:56:1d:01:77:42:0b:18: 99:42:1d:39:7e:f4:15:6b:59:c6:13:7e:62:6b:7e: 9f:21:a1:d4:62:62:42:5e:06:5a:4d:ff:8e:07:b7: 6f:6d:42:8b:c4:db:56:94:72:02:e6:a5:e3:a3:3c: 14:7e:1a:b8:f3:25:74:f9:45:61:11:bb:4e:e0:7c: 33:e8:50:83:f7:1d:dc:73:89:59:3b:6f:a9:d0:10: d4:55:e3:8b:92:69:45:4e:af:df:de:ea:4a:0f:55: eb:cc:ce:01:25:49:d0:4f:e6:75:bb:d6:91:d6:25: ed:15:65:03:cb:09:3c:2f:bc:02:a9:cd:26:ce:50: a6:c0:4a:7f:c0:6f:9c:4a:f1:7b:80:29:02:09:f8: 3d:45:be:a4:af:be:d6:37:e6:96:39:53:e4:7a:d4: d9:0c:b1:fb:73:df:54:5d:91:dd:14:25:f8:36:f1: 8d:1e:dd:d2:8d:9f:36:af:ec:18:16:22:cb:7b:d3: e2:93:75:dc:2a:50:2a:05:bf:96:ef:61:78:d7:d5: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BF:C9:27:C1:3A:DF:D9:8D:4C:B1:11:7D:8A:A2:19:96:BA:BA:CD X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:19:91:87:e4:c7:3b:43:be:d3:61:03:50:1b:4d:a7:d1:2a: 20:e6:5e:f3:40:73:df:88:a2:47:db:78:c0:69:38:58:26:e2: 84:0c:ad:b3:19:8e:77:cf:42:e7:66:ce:a4:55:e1:9c:e2:75: 28:da:c5:ef:a1:41:b9:e3:33:30:bd:87:a9:86:ec:08:f5:74: 01:d0:a8:5f:69:6f:56:f4:68:d9:16:0c:71:3f:3f:1d:bd:8f: 41:5e:c8:41:d6:c9:9c:e4:f1:0c:1d:a5:87:27:37:be:a4:ad: cd:b1:fe:f2:7e:ea:5c:ad:ea:18:69:b6:15:1b:48:01:bc:1c: c7:bd:d8:14:98:0b:f0:b2:74:2c:66:ab:24:9c:f5:8f:15:f8: 6c:77:44:0d:aa:4b:dd:07:40:1a:18:68:90:fb:2f:8a:eb:4c: 67:04:6b:8e:e8:62:ea:08:90:ae:50:86:de:5a:34:18:6c:2e: e6:17:84:b9:46:0b:cb:fb:46:a4:a6:4f:3b:09:85:51:54:74: 24:bc:24:f2:8e:c1:40:4a:d6:91:f6:a5:48:bb:24:99:79:76: 65:50:ff:48:5d:dc:97:64:16:d4:70:17:ac:47:98:02:80:14: 27:e0:5a:62:be:54:ce:1c:57:0c:ee:f9:c1:fb:45:fb:7d:a4: 62:50:27:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKramgzOpelIO/XLeY38EScwDY38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTEyMTkwNjA1MDRaFw0yNTEyMjIxNjI5MDRaMDMxMTAvBgNV BAMTKDA1QkZDOTI3QzEzQURGRDk4RDRDQjExMTdEOEFBMjE5OTZCQUJBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZDwID6Tbu8aa2/TfvR03seGn X0o3xKNHIcbsDUqlgRMzeLE1UvCgJDZJNKBYrvPveRg5Vh0Bd0ILGJlCHTl+9BVr WcYTfmJrfp8hodRiYkJeBlpN/44Ht29tQovE21aUcgLmpeOjPBR+GrjzJXT5RWER u07gfDPoUIP3HdxziVk7b6nQENRV44uSaUVOr9/e6koPVevMzgElSdBP5nW71pHW Je0VZQPLCTwvvAKpzSbOUKbASn/Ab5xK8XuAKQIJ+D1FvqSvvtY35pY5U+R61NkM sftz31Rdkd0UJfg28Y0e3dKNnzav7BgWIst70+KTddwqUCoFv5bvYXjX1a2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBb/JJ8E639mNTLERfYqiGZa6us0wHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAZkYfkxztDvtNhA1AbTafRKiDmXvNAc9+I okfbeMBpOFgm4oQMrbMZjnfPQudmzqRV4ZzidSjaxe+hQbnjMzC9h6mG7Aj1dAHQ qF9pb1b0aNkWDHE/Px29j0FeyEHWyZzk8QwdpYcnN76krc2x/vJ+6lyt6hhpthUb SAG8HMe92BSYC/CydCxmqySc9Y8V+Gx3RA2qS90HQBoYaJD7L4rrTGcEa47oYuoI kK5Qht5aNBhsLuYXhLlGC8v7RqSmTzsJhVFUdCS8JPKOwUBK1pH2pUi7JJl5dmVQ /0hd3JdkFtRwF6xHmAKAFCfgWmK+VM4cVwzu+cH7Rft9pGJQJ70= -----END CERTIFICATE-----Generated at Sun Dec 21 12:21:08 2025 by rpki-client