This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft File: 6DBEA32A7EE18535066521365EFB05C4148698C9.mft (raw, json) Hash identifier: TweS2mRSNQplxHQLWtGdWxTGdDDkHKGHQMMCTZuBlpM= Subject key identifier: C1:1C:48:CB:F0:93:D7:E5:0D:B0:0A:F4:EE:7D:51:4C:E9:6B:CA:9D Authority key identifier: 6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 Certificate issuer: /CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Certificate serial: 67469203065A9A3EFFDE92D218F578E0D491D07A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft Manifest number: 0531 Signing time: Fri 19 Dec 2025 23:33:02 +0000 Manifest this update: Fri 19 Dec 2025 23:28:02 +0000 Manifest next update: Tue 23 Dec 2025 06:21:02 +0000 Files and hashes: 1: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: ZX6Ox+wx5nbIu1GT16bLGXKsL0RQ4fgAjbd+X3UIku8=) 2: 6DBEA32A7EE18535066521365EFB05C4148698C9.crl (hash: iiJY9S6j6gKhHbHcxwGtwbEQfgr1Fb+TusmZGA9F5L8=) 3: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: Py1k6xmnp+wD3zAOREcnFDtaHJ01Rtyy2hDt3IzTRvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 06:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:46:92:03:06:5a:9a:3e:ff:de:92:d2:18:f5:78:e0:d4:91:d0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Validity Not Before: Dec 19 23:28:02 2025 GMT Not After : Dec 23 06:21:02 2025 GMT Subject: CN=C11C48CBF093D7E50DB00AF4EE7D514CE96BCA9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:67:de:25:65:f7:e5:5d:98:ef:d3:0b:ef: e6:dc:79:49:a7:42:f2:b5:87:4a:1e:c6:6b:88:18: f6:32:1a:9a:9b:06:fb:09:37:e7:d0:65:00:36:b4: c8:7f:db:70:1a:24:92:19:da:d3:1d:d2:91:ea:14: ce:71:7d:7b:95:26:26:ce:42:dd:06:98:73:7f:af: 13:4d:1f:a9:bd:ee:40:e5:9d:44:91:01:f7:5d:5b: 3a:45:5f:81:9d:33:c7:f9:b8:22:10:23:33:d8:7c: 3f:fc:fe:66:0a:98:b2:e9:fb:6c:f8:2d:2f:6b:7f: 66:33:6a:da:96:80:0a:69:13:7c:46:25:65:1c:af: f8:23:ee:85:a6:01:06:8b:78:f6:4d:76:a8:26:f6: 4b:cf:79:a6:26:9d:07:9c:13:78:a8:70:2c:42:e7: e7:da:a1:4f:77:24:c0:ea:78:94:ef:4b:e2:9c:82: 5d:78:51:72:a3:54:62:db:87:02:55:c1:c3:5b:4d: 1d:c3:64:35:a3:29:2c:f7:b1:fb:1d:6e:43:6b:a9: 60:cb:d8:f0:0d:db:8e:8c:37:79:a8:ba:3c:e6:d5: ab:38:11:0e:0a:a7:5c:0c:5c:a6:43:d0:ba:0a:14: df:a4:25:54:0f:a3:71:7f:e7:84:80:92:b0:7f:b1: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1C:48:CB:F0:93:D7:E5:0D:B0:0A:F4:EE:7D:51:4C:E9:6B:CA:9D X509v3 Authority Key Identifier: keyid:6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c7:9a:e8:f2:7b:30:d5:8b:42:65:bd:a6:dc:a0:72:02:4b: 46:7d:e8:9e:a4:b2:7c:b9:08:7e:d3:14:e2:a6:b2:fc:75:60: b2:4c:14:7e:b4:5b:5e:23:61:51:e6:d3:7c:ea:6a:92:b0:ba: d8:cd:37:d2:74:9c:c9:24:e3:82:8c:71:6a:7f:88:af:7a:51: 26:54:82:65:f5:b5:43:26:80:9e:e6:2d:01:52:5a:2e:b3:be: c5:6e:81:05:5e:46:57:dc:3a:dc:0b:47:b9:4a:ee:e2:f8:24: 84:eb:f1:27:a0:0c:5f:f3:75:a3:b9:e5:03:aa:30:03:2f:91: 80:d2:e7:e4:84:e2:a6:57:ae:42:80:d2:5e:a9:9a:21:8b:fd: fe:4e:ae:90:b6:c8:2f:39:69:f2:cd:b0:65:2d:c7:d5:a0:d4: 57:36:58:6a:f8:16:f1:4f:57:dd:1a:fe:f4:a5:eb:9e:cb:3e: 64:c4:b8:ca:00:17:58:81:d6:4b:c9:28:95:7a:73:1c:e6:5b: f1:64:ec:dc:de:42:da:b3:a4:f8:6a:8d:b1:d4:a8:dd:b6:06: ed:11:55:40:80:f3:77:74:24:3a:d8:e2:55:30:72:3b:1d:cd: a1:5c:7a:32:5a:d3:d7:a6:55:12:0a:fc:a8:53:eb:22:26:86: cc:42:14:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0aSAwZamj7/3pLSGPV44NSR0HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQx NDg2OThDOTAeFw0yNTEyMTkyMzI4MDJaFw0yNTEyMjMwNjIxMDJaMDMxMTAvBgNV BAMTKEMxMUM0OENCRjA5M0Q3RTUwREIwMEFGNEVFN0Q1MTRDRTk2QkNBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkK2feJWX35V2Y79ML7+bceUmn QvK1h0oexmuIGPYyGpqbBvsJN+fQZQA2tMh/23AaJJIZ2tMd0pHqFM5xfXuVJibO Qt0GmHN/rxNNH6m97kDlnUSRAfddWzpFX4GdM8f5uCIQIzPYfD/8/mYKmLLp+2z4 LS9rf2YzatqWgAppE3xGJWUcr/gj7oWmAQaLePZNdqgm9kvPeaYmnQecE3iocCxC 5+faoU93JMDqeJTvS+Kcgl14UXKjVGLbhwJVwcNbTR3DZDWjKSz3sfsdbkNrqWDL 2PAN246MN3moujzm1as4EQ4Kp1wMXKZD0LoKFN+kJVQPo3F/54SAkrB/sdMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwRxIy/CT1+UNsAr07n1RTOlryp0wHwYDVR0j BBgwFoAUbb6jKn7hhTUGZSE2XvsFxBSGmMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ4ODBkNC1jMzNlLTQwMWUtYjQ2OC1hNWE2YThhYWYzZDcvMC82REJFQTMyQTdF RTE4NTM1MDY2NTIxMzY1RUZCMDVDNDE0ODY5OEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQxNDg2 OThDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1 QzQxNDg2OThDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPHmujyezDVi0JlvabcoHICS0Z96J6ksny5 CH7TFOKmsvx1YLJMFH60W14jYVHm03zqapKwutjNN9J0nMkk44KMcWp/iK96USZU gmX1tUMmgJ7mLQFSWi6zvsVugQVeRlfcOtwLR7lK7uL4JITr8SegDF/zdaO55QOq MAMvkYDS5+SE4qZXrkKA0l6pmiGL/f5OrpC2yC85afLNsGUtx9Wg1Fc2WGr4FvFP V90a/vSl657LPmTEuMoAF1iB1kvJKJV6cxzmW/Fk7NzeQtqzpPhqjbHUqN22Bu0R VUCA83d0JDrY4lUwcjsdzaFcejJa09emVRIK/KhT6yImhsxCFPM= -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:29 2025 by rpki-client