This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: m7+tyc/nuzv3QN+XE+60F7vTeLKMQOH570bRI/BHAVU= Subject key identifier: 11:03:8F:8C:33:38:2B:26:7C:93:50:0F:CD:9B:91:67:1E:63:B1:54 Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 427D8E5A9F0BA2FEC83DA75927AEF200C34FE09E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 029A Signing time: Thu 18 Dec 2025 04:51:38 +0000 Manifest this update: Thu 18 Dec 2025 04:46:38 +0000 Manifest next update: Sun 21 Dec 2025 15:08:38 +0000 Files and hashes: 1: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=) 2: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: swVLyNiKZPcAcbtEtfE4Y/6ft4cAfq418eOWaDMMqdU=) 3: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=) 4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7d:8e:5a:9f:0b:a2:fe:c8:3d:a7:59:27:ae:f2:00:c3:4f:e0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Dec 18 04:46:38 2025 GMT Not After : Dec 21 15:08:38 2025 GMT Subject: CN=11038F8C33382B267C93500FCD9B91671E63B154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:e6:ed:51:00:0c:60:b0:74:6b:76:d2:f5: 7a:d1:4f:9a:52:20:e0:65:8c:b5:48:40:d9:a0:b5: e8:af:60:6b:50:8f:c5:33:f3:ef:be:cc:a1:36:09: 63:3d:7d:e1:d8:b2:d3:0b:d2:2a:0c:32:55:a1:e7: 68:3e:61:4a:18:fd:f5:33:f8:f4:97:9e:ff:82:78: e8:cf:01:5c:06:93:c5:f4:03:b6:f4:6a:c6:d2:02: d6:89:9a:62:53:55:d2:50:ae:a5:67:86:1c:5a:bd: 9e:e2:ce:c5:1a:7a:ce:b0:23:2a:bc:31:cb:bc:13: 95:a8:f0:22:cd:10:11:b2:35:ba:2a:f0:f2:d1:30: e6:36:41:95:85:e4:22:d1:e2:8f:b3:fa:b3:11:e9: b0:bf:8f:a7:da:d0:3e:7c:96:f4:ef:4a:e2:95:5c: 6b:d1:00:17:ee:60:1e:88:30:2c:cc:90:e8:91:23: a4:47:5e:69:dc:16:3b:bf:85:61:e9:63:d0:67:a6: db:58:47:1b:2e:96:a3:9a:b4:5e:19:1a:38:73:17: 0a:82:15:1e:16:df:12:ae:40:1c:aa:dd:2c:02:dd: 0f:a1:b3:49:91:66:dd:60:a5:1e:08:e0:7f:03:44: ee:13:6e:05:88:de:9c:02:f2:0b:36:e1:31:16:ab: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:03:8F:8C:33:38:2B:26:7C:93:50:0F:CD:9B:91:67:1E:63:B1:54 X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:01:31:16:39:90:f5:59:b2:a2:ad:db:83:4d:d1:07:76:50: e2:9f:75:7f:8f:63:12:46:9b:3b:7b:9b:3a:eb:e2:d2:3b:01: a6:9b:c4:e7:fa:2c:57:5e:8d:ea:ba:d8:69:f7:e9:6b:e5:4f: e8:a4:1b:13:9e:76:f2:d7:88:66:d4:ef:4f:1e:4b:49:af:2b: 82:4f:4c:86:d1:9c:1c:76:56:6f:af:21:69:fa:b4:aa:5a:2d: 68:67:69:05:51:82:2c:29:ca:15:18:a3:9b:77:da:07:b4:7a: a4:61:b6:fa:06:44:08:e9:93:05:88:11:98:22:2f:a1:12:c5: 88:4d:f3:c9:b1:62:31:91:57:ea:3a:a8:1a:c1:7d:e4:07:4b: 3f:0e:07:c6:4a:0c:3d:6f:fb:ce:0d:73:5b:19:ba:8f:5d:6c: 99:5c:f7:c8:04:0d:d5:e5:8c:a9:0a:dc:ad:2e:9b:5b:e1:25: fe:9e:de:0d:f4:b1:28:8c:f8:35:7b:fb:ee:d3:b3:7d:27:2a: 7d:33:eb:68:67:51:b9:e4:85:12:43:96:d4:cd:27:e9:69:ad: f7:0d:15:8c:8d:68:61:87:b5:6c:9f:5b:da:96:68:89:87:49: c0:43:8c:c5:95:88:c9:5d:2e:4b:ee:7e:da:78:30:61:75:61: cd:14:90:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn2OWp8Lov7IPadZJ67yAMNP4J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNTEyMTgwNDQ2MzhaFw0yNTEyMjExNTA4MzhaMDMxMTAvBgNV BAMTKDExMDM4RjhDMzMzODJCMjY3QzkzNTAwRkNEOUI5MTY3MUU2M0IxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yubtUQAMYLB0a3bS9XrRT5pS IOBljLVIQNmgteivYGtQj8Uz8+++zKE2CWM9feHYstML0ioMMlWh52g+YUoY/fUz +PSXnv+CeOjPAVwGk8X0A7b0asbSAtaJmmJTVdJQrqVnhhxavZ7izsUaes6wIyq8 Mcu8E5Wo8CLNEBGyNboq8PLRMOY2QZWF5CLR4o+z+rMR6bC/j6fa0D58lvTvSuKV XGvRABfuYB6IMCzMkOiRI6RHXmncFju/hWHpY9BnpttYRxsulqOatF4ZGjhzFwqC FR4W3xKuQByq3SwC3Q+hs0mRZt1gpR4I4H8DRO4TbgWI3pwC8gs24TEWq3Q/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEQOPjDM4KyZ8k1APzZuRZx5jsVQwHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0BMRY5kPVZsqKt24NN0Qd2UOKfdX+PYxJG mzt7mzrr4tI7AaabxOf6LFdejeq62Gn36WvlT+ikGxOedvLXiGbU708eS0mvK4JP TIbRnBx2Vm+vIWn6tKpaLWhnaQVRgiwpyhUYo5t32ge0eqRhtvoGRAjpkwWIEZgi L6ESxYhN88mxYjGRV+o6qBrBfeQHSz8OB8ZKDD1v+84Nc1sZuo9dbJlc98gEDdXl jKkK3K0um1vhJf6e3g30sSiM+DV7++7Ts30nKn0z62hnUbnkhRJDltTNJ+lprfcN FYyNaGGHtWyfW9qWaImHScBDjMWViMldLkvuftp4MGF1Yc0UkPQ= -----END CERTIFICATE-----Generated at Fri Dec 19 13:48:19 2025 by rpki-client