This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: Bljt6XWf7yAr7Axj2nQfPaud58OHkeZ0OQ+gc72KCOw= Subject key identifier: 8F:4B:56:6E:7E:F5:1F:F6:D0:B0:CF:24:7F:55:68:5C:F1:B3:12:DD Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 1A2A32375B13332F381A36E442A72CFB7C170D25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: 0100 Signing time: Fri 19 Dec 2025 04:51:46 +0000 Manifest this update: Fri 19 Dec 2025 04:46:46 +0000 Manifest next update: Mon 22 Dec 2025 08:47:46 +0000 Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=) 2: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: 9FKxNcBkfhpD8f+3IDwQqj9H3oW3aiyu8HazABoUsas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 08:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2a:32:37:5b:13:33:2f:38:1a:36:e4:42:a7:2c:fb:7c:17:0d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Dec 19 04:46:46 2025 GMT Not After : Dec 22 08:47:46 2025 GMT Subject: CN=8F4B566E7EF51FF6D0B0CF247F55685CF1B312DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:be:f5:a0:32:f3:57:e0:c4:1c:78:59:69: 5d:7c:00:4c:23:1d:ac:f3:c0:87:bd:3f:08:3f:7f: 04:7f:93:6f:07:41:9c:dd:d1:cb:32:19:59:5a:85: 02:de:1a:4a:f3:c5:38:f1:b5:38:5c:bf:83:44:cc: db:27:7b:5d:62:0a:b6:6c:ea:8e:f9:c7:9c:14:63: b0:d9:b2:2e:f5:8a:6d:b1:ff:9f:fe:66:30:7f:62: d3:27:4f:24:6c:63:af:21:22:d7:00:26:09:48:87: df:f7:49:c2:1b:fb:dd:1a:4a:9e:27:1c:13:28:5a: 42:3e:57:6d:11:86:bb:71:b4:7a:57:74:49:a2:d1: b2:ba:14:a3:b9:a5:44:5b:b1:8e:67:33:04:5e:3e: 24:3b:89:84:7c:26:a5:db:07:12:72:69:14:7d:2c: 89:e2:64:0a:6a:9c:41:d3:f9:f5:12:00:4b:6c:48: 0c:31:fe:be:70:cd:5c:72:02:de:a8:cc:ba:54:1c: 7e:0b:6a:68:49:96:5f:59:7a:69:62:36:3e:67:ff: 0d:ad:f1:e4:01:68:50:ff:0a:7f:12:81:b4:a4:37: 18:d6:a5:ad:92:b3:30:80:dd:1e:25:7b:1f:43:ab: 57:80:96:6e:60:4e:f7:7d:2c:55:8c:65:1a:72:19: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4B:56:6E:7E:F5:1F:F6:D0:B0:CF:24:7F:55:68:5C:F1:B3:12:DD X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e8:11:dc:f8:22:a3:10:6e:01:9f:86:0f:be:ee:51:95:7e: ca:33:e9:b1:a0:83:2a:48:b4:5a:89:8f:68:f2:a7:82:3d:92: 9c:cd:a4:69:d1:06:f6:fa:e3:75:c8:a2:22:43:83:cf:e1:65: 1f:12:e7:95:aa:85:da:c9:18:eb:b3:03:68:bb:a4:c7:cb:1d: 13:22:4e:a4:ae:08:f2:da:9f:74:c9:76:09:b5:a7:2d:35:a9: 24:93:92:e4:63:9a:80:8a:60:28:7f:15:7b:8c:aa:6f:45:0b: a8:47:05:00:03:46:38:64:01:29:bc:40:ed:74:16:de:6b:74: f0:11:d7:66:70:fd:6c:79:13:2d:8a:65:1f:93:02:7e:12:ca: 11:f6:a9:c7:67:ec:47:09:dd:d8:94:ca:88:07:74:48:17:38: b4:4b:f0:7b:89:79:4d:0d:b9:98:28:0d:12:80:f2:5d:9a:11: c5:a7:29:a2:3c:88:43:06:31:c0:fe:08:5c:3b:2d:93:8c:e6: b8:b2:58:40:6b:8e:dc:4d:c7:d3:97:4d:6b:fd:4d:77:2a:8a: 01:ac:e1:78:14:94:a4:4a:c7:3f:81:79:32:b5:9e:1f:1d:a0: cb:27:f1:78:f6:1f:b0:03:59:5f:e6:ea:aa:0a:7d:fe:21:e4: 15:5e:14:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGioyN1sTMy84GjbkQqcs+3wXDSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNTEyMTkwNDQ2NDZaFw0yNTEyMjIwODQ3NDZaMDMxMTAvBgNV BAMTKDhGNEI1NjZFN0VGNTFGRjZEMEIwQ0YyNDdGNTU2ODVDRjFCMzEyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVvb71oDLzV+DEHHhZaV18AEwj HazzwIe9Pwg/fwR/k28HQZzd0csyGVlahQLeGkrzxTjxtThcv4NEzNsne11iCrZs 6o75x5wUY7DZsi71im2x/5/+ZjB/YtMnTyRsY68hItcAJglIh9/3ScIb+90aSp4n HBMoWkI+V20RhrtxtHpXdEmi0bK6FKO5pURbsY5nMwRePiQ7iYR8JqXbBxJyaRR9 LIniZApqnEHT+fUSAEtsSAwx/r5wzVxyAt6ozLpUHH4LamhJll9ZemliNj5n/w2t 8eQBaFD/Cn8SgbSkNxjWpa2SszCA3R4lex9Dq1eAlm5gTvd9LFWMZRpyGcNNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj0tWbn71H/bQsM8kf1VoXPGzEt0wHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDoEdz4IqMQbgGfhg++7lGVfsoz6bGggypI tFqJj2jyp4I9kpzNpGnRBvb643XIoiJDg8/hZR8S55WqhdrJGOuzA2i7pMfLHRMi TqSuCPLan3TJdgm1py01qSSTkuRjmoCKYCh/FXuMqm9FC6hHBQADRjhkASm8QO10 Ft5rdPAR12Zw/Wx5Ey2KZR+TAn4SyhH2qcdn7EcJ3diUyogHdEgXOLRL8HuJeU0N uZgoDRKA8l2aEcWnKaI8iEMGMcD+CFw7LZOM5riyWEBrjtxNx9OXTWv9TXcqigGs 4XgUlKRKxz+BeTK1nh8doMsn8Xj2H7ADWV/m6qoKff4h5BVeFGc= -----END CERTIFICATE-----Generated at Sat Dec 20 20:47:03 2025 by rpki-client