This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: ZGpp7o4Q5zm21bXNuMNZnEnhReFa17GUm1Bmo4CwBFg= Subject key identifier: 8E:DC:3C:DA:1B:E8:0B:BB:FB:2F:5D:06:4A:F0:F7:F6:7A:12:DF:CB Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 690AD843866DE46568A27BD44EBFDE0F68A77C2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: B0 Signing time: Wed 17 Dec 2025 07:31:24 +0000 Manifest this update: Wed 17 Dec 2025 07:26:24 +0000 Manifest next update: Sat 20 Dec 2025 12:44:24 +0000 Files and hashes: 1: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=) 2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k=) 3: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: b3z2ewES4GuZ0ytQ2YsLRP/aMrYGwA4i2RKqXs6+WHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0a:d8:43:86:6d:e4:65:68:a2:7b:d4:4e:bf:de:0f:68:a7:7c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Dec 17 07:26:24 2025 GMT Not After : Dec 20 12:44:24 2025 GMT Subject: CN=8EDC3CDA1BE80BBBFB2F5D064AF0F7F67A12DFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:93:b3:d6:c7:b8:b5:d5:6b:3f:db:11:a5: ee:7f:9d:eb:b4:d6:4a:69:ca:46:e2:84:64:d3:c1: e9:27:2f:5b:8b:f5:70:07:ba:33:32:45:29:95:b5: 4c:ef:95:5e:48:53:42:83:a5:50:35:9b:bd:b5:e9: dc:3a:c2:74:1d:af:f4:a9:62:16:09:7b:45:f3:26: 1a:66:ad:1f:5d:5a:7d:13:43:70:e6:e3:91:a7:0a: 51:9d:e6:4e:18:13:44:fc:39:75:dd:ce:78:cd:4c: 63:3d:4a:a8:be:32:6e:7a:4b:d7:35:8e:36:ef:9e: a1:ed:05:85:04:b7:74:6c:93:3d:a2:c5:a3:04:72: 33:80:3a:e1:32:0b:0e:cb:a9:71:6a:08:87:64:43: d4:42:59:e9:92:e0:94:c9:7b:88:6e:ca:2b:15:e3: df:10:0a:02:b7:11:90:2b:6b:0c:23:cd:c4:7a:9f: 20:67:58:dc:76:12:0c:99:88:39:5a:65:9f:aa:5b: 20:d9:dd:44:fd:f6:20:b8:85:58:40:4b:f0:a7:16: aa:b5:e3:ba:d5:92:f8:2d:66:22:0a:44:7f:8a:d1: 98:2d:45:c2:bb:0d:4e:f9:df:55:f9:2b:f7:07:fd: 1a:f1:5f:83:71:73:e9:c7:79:94:a4:1d:82:cb:ca: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DC:3C:DA:1B:E8:0B:BB:FB:2F:5D:06:4A:F0:F7:F6:7A:12:DF:CB X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6c:70:26:85:bc:62:92:28:fe:55:35:2d:ad:51:5f:57:5e: cd:d2:5b:26:35:42:15:f4:02:61:c7:af:7d:1f:13:76:6c:bb: 16:e2:8d:95:94:af:a1:26:0e:7d:1c:57:8b:10:95:58:85:63: e3:a1:d8:3b:ba:74:84:0d:ab:d7:ec:94:d3:ce:8d:9b:33:05: 2b:67:67:28:0e:80:de:93:ff:fc:36:39:e1:fb:45:5e:ec:e6: ff:65:7f:b9:ce:bb:d3:65:8d:7e:05:5d:5f:79:67:78:5b:ce: 2c:c5:61:21:13:a7:4b:1b:03:83:98:31:58:04:41:a4:15:84: c7:e6:fc:93:45:ef:a2:dc:e1:42:53:a8:f2:a7:5e:a1:47:36: d5:86:68:5f:eb:ce:50:45:72:d4:68:c1:78:1e:75:07:49:01: 9e:e1:33:bf:47:86:a5:b8:be:3d:7a:30:f8:89:24:9f:7f:f9: 9c:02:d1:c5:1b:0a:b7:2c:11:e4:68:4a:96:42:e2:79:02:ae: ca:cd:c7:bc:66:3a:f6:4c:6c:53:d8:11:9e:77:ae:b8:d7:45: 9c:11:c8:7f:93:a6:ce:32:1f:66:83:d7:39:0c:a2:08:61:24: df:e4:22:3d:e5:2f:d1:03:22:5c:be:9e:19:39:2c:41:e7:a2: 68:3e:c7:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQrYQ4Zt5GVoonvUTr/eD2infC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTEyMTcwNzI2MjRaFw0yNTEyMjAxMjQ0MjRaMDMxMTAvBgNV BAMTKDhFREMzQ0RBMUJFODBCQkJGQjJGNUQwNjRBRjBGN0Y2N0ExMkRGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/5Oz1se4tdVrP9sRpe5/neu0 1kppykbihGTTweknL1uL9XAHujMyRSmVtUzvlV5IU0KDpVA1m7216dw6wnQdr/Sp YhYJe0XzJhpmrR9dWn0TQ3Dm45GnClGd5k4YE0T8OXXdznjNTGM9Sqi+Mm56S9c1 jjbvnqHtBYUEt3Rskz2ixaMEcjOAOuEyCw7LqXFqCIdkQ9RCWemS4JTJe4huyisV 498QCgK3EZArawwjzcR6nyBnWNx2EgyZiDlaZZ+qWyDZ3UT99iC4hVhAS/CnFqq1 47rVkvgtZiIKRH+K0ZgtRcK7DU7531X5K/cH/RrxX4Nxc+nHeZSkHYLLynT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjtw82hvoC7v7L10GSvD39noS38swHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRscCaFvGKSKP5VNS2tUV9XXs3SWyY1QhX0 AmHHr30fE3ZsuxbijZWUr6EmDn0cV4sQlViFY+Oh2Du6dIQNq9fslNPOjZszBStn ZygOgN6T//w2OeH7RV7s5v9lf7nOu9NljX4FXV95Z3hbzizFYSETp0sbA4OYMVgE QaQVhMfm/JNF76Lc4UJTqPKnXqFHNtWGaF/rzlBFctRowXgedQdJAZ7hM79HhqW4 vj16MPiJJJ9/+ZwC0cUbCrcsEeRoSpZC4nkCrsrNx7xmOvZMbFPYEZ53rrjXRZwR yH+Tps4yH2aD1zkMoghhJN/kIj3lL9EDIly+nhk5LEHnomg+x3s= -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:00 2025 by rpki-client