This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: 8OPWBFroL6X5gYUOAHJ7jBo9K0sZGff9aUF4rDipBaM= Subject key identifier: B4:91:E8:54:AD:B7:DB:CB:0C:46:9A:9C:93:F7:A8:10:D3:16:BC:6D Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 79014C0C3670D74E0284007FF33EC72C3D76FCA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 0471 Signing time: Thu 18 Dec 2025 05:22:00 +0000 Manifest this update: Thu 18 Dec 2025 05:17:00 +0000 Manifest next update: Sun 21 Dec 2025 10:21:00 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: ighd2vqCAVcGqVFQZNqY5Z/2xwdAYPKU7htk0clfeZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:01:4c:0c:36:70:d7:4e:02:84:00:7f:f3:3e:c7:2c:3d:76:fc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Dec 18 05:17:00 2025 GMT Not After : Dec 21 10:21:00 2025 GMT Subject: CN=B491E854ADB7DBCB0C469A9C93F7A810D316BC6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:ad:d8:7a:fc:05:d9:d5:9c:08:41:e8:8b: 64:67:0b:ff:e7:db:ae:34:c7:8d:32:e9:61:cf:f2: aa:6c:c2:b4:28:da:da:ac:5e:dc:60:a9:6c:1b:db: 9c:89:b2:bf:53:2a:87:09:89:c2:d5:14:68:5a:21: b3:cb:62:19:4b:df:a6:17:66:1c:b4:f9:f9:41:8e: 35:fe:28:fe:3a:11:d5:2a:fb:00:18:ba:28:f8:b9: d9:5a:ff:c7:06:22:54:7a:fa:db:ea:af:96:06:8a: 1f:3f:54:a4:66:ec:b6:0d:6a:5e:20:02:c5:f0:b3: 36:f2:53:dc:d6:bc:23:66:d2:95:13:cf:ab:93:d9: 9a:cd:6b:84:c2:73:77:16:7d:31:62:5e:c1:2f:bb: a0:09:40:6e:ca:f8:4f:19:73:03:45:4f:37:0a:e3: 07:98:07:ca:d4:35:7c:8a:04:f3:00:73:3a:87:3d: df:ed:55:6f:ba:5a:2c:0d:da:4f:28:4d:f3:99:bf: d7:cd:88:44:f4:41:b7:5c:86:60:54:7b:85:a1:5b: bc:ce:86:fe:cf:47:db:8c:49:1e:93:ff:75:3f:d2: 88:84:a1:11:a9:56:85:0f:52:d6:c2:d9:80:ac:dd: 55:05:9b:ba:58:74:2b:4a:77:b8:da:15:f9:04:72: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:91:E8:54:AD:B7:DB:CB:0C:46:9A:9C:93:F7:A8:10:D3:16:BC:6D X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2e:70:21:d2:11:fe:c2:11:28:b4:db:5e:03:4f:5e:0b:0f: 09:0c:62:74:ce:c5:0e:c0:90:c7:17:8f:91:54:35:fe:be:a7: fa:b4:23:1c:28:9b:f8:d8:05:43:9b:ae:00:96:a9:69:af:37: 6e:e7:57:f4:5f:85:55:0b:d3:fd:b4:02:97:a7:af:a6:99:ed: 6a:6b:56:24:d6:a3:e2:08:24:8c:bf:5d:87:8c:cc:f1:20:82: 72:24:93:60:5e:76:74:5a:6d:70:53:45:8b:b1:2d:52:36:63: bd:65:4c:13:ee:aa:25:15:97:39:71:82:e1:80:f1:78:f9:e5: 8e:35:85:f7:d6:1c:bc:b3:66:23:0e:20:0a:08:55:86:97:e8: a5:cf:67:cf:87:42:e0:10:d2:1a:65:28:d6:bd:2d:ac:53:f3: 9f:f7:6a:0e:1e:0a:ef:2c:55:e5:85:e0:3f:a9:4c:6f:de:5d: 8b:b2:9a:7e:e6:7d:f4:07:87:20:43:5d:2d:92:96:fd:de:df: a9:b9:08:76:20:3a:e9:0e:6e:55:80:64:a9:68:f2:04:c7:8e: 4b:9a:8a:0e:9d:5a:83:52:98:bb:b2:20:1f:c4:2a:d9:bc:5a: cb:ae:a8:9a:7f:8a:aa:3f:c6:a9:14:db:16:55:85:c2:4f:49: 77:dc:40:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQFMDDZw104ChAB/8z7HLD12/KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTEyMTgwNTE3MDBaFw0yNTEyMjExMDIxMDBaMDMxMTAvBgNV BAMTKEI0OTFFODU0QURCN0RCQ0IwQzQ2OUE5QzkzRjdBODEwRDMxNkJDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFq3YevwF2dWcCEHoi2RnC//n 2640x40y6WHP8qpswrQo2tqsXtxgqWwb25yJsr9TKocJicLVFGhaIbPLYhlL36YX Zhy0+flBjjX+KP46EdUq+wAYuij4udla/8cGIlR6+tvqr5YGih8/VKRm7LYNal4g AsXwszbyU9zWvCNm0pUTz6uT2ZrNa4TCc3cWfTFiXsEvu6AJQG7K+E8ZcwNFTzcK 4weYB8rUNXyKBPMAczqHPd/tVW+6WiwN2k8oTfOZv9fNiET0QbdchmBUe4WhW7zO hv7PR9uMSR6T/3U/0oiEoRGpVoUPUtbC2YCs3VUFm7pYdCtKd7jaFfkEcsdnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJHoVK2328sMRpqck/eoENMWvG0wHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcucCHSEf7CESi0214DT14LDwkMYnTOxQ7A kMcXj5FUNf6+p/q0Ixwom/jYBUObrgCWqWmvN27nV/RfhVUL0/20Apenr6aZ7Wpr ViTWo+IIJIy/XYeMzPEggnIkk2BednRabXBTRYuxLVI2Y71lTBPuqiUVlzlxguGA 8Xj55Y41hffWHLyzZiMOIAoIVYaX6KXPZ8+HQuAQ0hplKNa9LaxT85/3ag4eCu8s VeWF4D+pTG/eXYuymn7mffQHhyBDXS2Slv3e36m5CHYgOukOblWAZKlo8gTHjkua ig6dWoNSmLuyIB/EKtm8WsuuqJp/iqo/xqkU2xZVhcJPSXfcQJA= -----END CERTIFICATE-----Generated at Fri Dec 19 18:17:08 2025 by rpki-client