This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft (raw, json)
Hash identifier: T1VDQRO6nsJQ29hJ4sHbf6VsULOdboImX2xI+FsMMgk=
Subject key identifier: 5F:E1:B2:A6:D3:77:E6:3D:B6:5A:F7:48:88:47:12:8B:6E:F8:8E:78
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial: 11A120828EA4D770821E97A7BDDB62D42E01A7C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
Manifest number: 01C2
Signing time: Tue 23 Dec 2025 10:52:58 +0000
Manifest this update: Tue 23 Dec 2025 10:47:58 +0000
Manifest next update: Fri 26 Dec 2025 13:57:58 +0000
Files and hashes: 1: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl (hash: F+0IewtKKUcNLy237Y5iRrnZ0yl257O/+kK3S9tMreY=)
2: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: 3ivbK9KpjZVb/XVJskMLhHcZHY/PxWUUM4YeUyN+bNw=)
3: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: Meqto9gp7Tw3/wVHdB4HIOhRI0iUBfsDLYkbvujxqHk=)
4: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: Ysc9Qtc/MJl5dYJb0Qhr9xILFagM64+bvGrjMt7zT9k=)
5: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: 1514IP+F3fs/wWPY76J3M+VGkLwDN+TVOPCGmIn0YeI=)
6: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: kiwAboKBcY+KUfdKJ8QPyYYmhUR1O0Z8PHji6TPQSyQ=)
7: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: Gp+3hoUQHoSs7BqoZ98uo/JPIvevE7xLEnrTa4hmSmU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 13:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a1:20:82:8e:a4:d7:70:82:1e:97:a7:bd:db:62:d4:2e:01:a7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Validity
Not Before: Dec 23 10:47:58 2025 GMT
Not After : Dec 26 13:57:58 2025 GMT
Subject: CN=5FE1B2A6D377E63DB65AF7488847128B6EF88E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:3d:db:de:bc:bc:92:af:af:e5:92:ec:60:
f7:f6:ad:3e:ec:b8:85:9f:cf:f3:a6:6c:4f:15:21:
c7:66:43:ea:b8:0b:00:4c:98:83:84:c5:8b:2b:63:
2b:0c:74:6d:d1:13:02:e5:b0:e9:8a:37:91:22:18:
a7:29:76:0c:33:18:e0:4f:0c:2a:a9:4c:5d:5c:6a:
07:31:16:c6:ba:dd:5c:3a:c3:38:c6:e3:26:ed:8c:
8d:d1:65:2f:bc:ff:10:b5:e9:42:1c:c2:87:b8:9f:
1d:2f:4b:c7:32:1d:77:95:88:31:60:ea:f9:c9:18:
e2:94:dc:2d:32:a0:11:ec:9b:83:e4:22:31:66:8a:
e2:c2:a0:e7:ec:c3:00:02:18:46:70:8e:83:2a:9d:
a3:43:c4:1c:fd:f1:72:d9:8a:ec:1b:55:53:04:9f:
8d:15:9a:cf:50:4f:7a:01:5d:ed:7c:f1:68:c0:12:
af:7e:33:d2:af:34:a7:e9:b7:9f:20:36:80:0b:66:
1d:d7:cb:0c:fe:ee:5f:67:04:74:72:18:3d:15:96:
7c:9d:d7:35:09:91:cc:e5:9d:a3:ae:5e:8f:9e:f3:
cd:6e:64:13:3b:9c:fc:3e:45:64:2b:bf:bc:35:3a:
1a:e8:a8:58:17:a8:f1:d7:dd:f4:01:48:6f:55:5b:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:B2:A6:D3:77:E6:3D:B6:5A:F7:48:88:47:12:8B:6E:F8:8E:78
X509v3 Authority Key Identifier:
keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:65:8f:f5:d6:87:13:d7:a2:9c:0e:64:6e:b6:be:ba:2f:c9:
f4:b0:02:48:f3:ff:b6:4e:0d:fb:6e:f0:40:79:2d:56:2d:45:
fa:76:8b:6a:0b:b6:ea:6e:bd:5b:e3:97:fa:65:28:c2:18:f3:
cc:aa:11:c4:d7:92:af:79:1a:b8:42:f9:66:6c:0d:9c:f9:1d:
f8:87:e6:52:a5:ed:07:6b:23:dc:1e:4e:f8:85:03:36:74:d9:
78:16:2e:fb:28:2e:2f:c6:42:8b:dc:24:ce:76:a8:ae:75:f9:
3b:f1:7f:5c:4f:cd:b7:9c:da:3e:e4:63:9d:fd:b4:31:46:b9:
90:4b:99:cf:dc:ea:61:c1:c6:0e:de:13:e1:5f:b1:02:ea:b6:
cd:cf:ed:f0:a6:f9:47:66:4c:a1:c1:25:27:c8:ec:4f:80:87:
3c:2d:0f:bb:06:5b:95:6e:ba:e3:04:3b:30:5f:4b:51:47:f1:
a6:33:51:04:7d:48:06:a2:51:c9:2e:63:72:fc:f5:0f:f8:24:
03:ed:05:78:2f:46:13:2e:17:4d:18:f1:4d:85:6a:fe:ea:8d:
7d:43:43:5c:63:4b:91:ee:88:b4:4d:80:a4:6e:86:1c:7e:a9:
74:9f:be:96:fc:66:ce:fb:75:cd:15:ca:b5:2c:78:18:08:6c:
25:b1:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 08:21:45 2025 by rpki-client