This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: mOcZm4W1GHxKr+LzXGlTgXaLqX9anxM4PQ0Kkf0Kaf4= Subject key identifier: E4:A0:AC:F8:88:52:7D:8D:2A:10:B4:9A:AA:11:57:E3:0F:E4:67:08 Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 4B48CA2510A5D235E18425AC0EDFD6B80A52162C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: BD Signing time: Tue 23 Dec 2025 21:23:06 +0000 Manifest this update: Tue 23 Dec 2025 21:18:06 +0000 Manifest next update: Sat 27 Dec 2025 03:11:06 +0000 Files and hashes: 1: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: UytFq4YkDfF2gSWk+e61Cf65OgjjbirJ9pLUqGSnkmc=) 2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:48:ca:25:10:a5:d2:35:e1:84:25:ac:0e:df:d6:b8:0a:52:16:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Dec 23 21:18:06 2025 GMT Not After : Dec 27 03:11:06 2025 GMT Subject: CN=E4A0ACF888527D8D2A10B49AAA1157E30FE46708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:a2:5e:1d:4d:9f:be:a4:2c:31:6e:36:fe: a5:c0:22:dc:17:e1:ee:8e:53:4e:57:af:52:3a:28: dd:cc:fa:f8:85:0a:bc:4f:d1:66:a0:0f:b5:6e:44: 6f:b2:61:3d:2f:a5:fc:3c:ee:07:a6:0f:f0:c8:c1: bb:19:61:17:55:4a:e6:3d:94:30:cc:df:28:c0:ff: 42:d1:15:77:13:7a:60:18:13:44:c2:4a:51:f4:ee: 41:0f:87:ef:a8:fb:7d:49:6c:26:62:29:36:75:23: 50:f7:68:d4:07:b6:ba:d9:4b:89:94:85:e4:42:f8: df:d0:3d:81:29:23:82:27:5b:88:bc:06:11:9d:0a: 23:bd:f8:e5:ea:ee:74:b1:31:da:e6:bd:dd:76:de: 8c:3b:09:df:b3:fd:32:db:06:ad:31:68:b0:6b:5e: 71:ce:e7:0a:94:91:cc:43:ec:0a:91:c0:3e:98:5d: f6:a1:14:b9:78:ad:ef:24:21:3e:41:73:11:05:92: d8:16:45:8c:eb:d8:da:db:98:27:7b:ef:67:b8:ea: 33:a1:f5:cf:dd:c9:71:57:cb:a9:69:8c:5f:50:86: 7a:3b:1e:51:04:b1:32:05:31:53:f9:44:68:b7:1e: c8:56:da:d2:9a:63:95:f6:36:31:7b:6e:be:22:43: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A0:AC:F8:88:52:7D:8D:2A:10:B4:9A:AA:11:57:E3:0F:E4:67:08 X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cf:8d:ec:0a:13:97:38:bd:58:10:45:3e:15:e5:14:ad:0e: e0:78:4f:ca:a6:e6:1f:8b:62:4b:02:53:82:d9:b7:b8:67:b4: 65:59:9c:4b:d8:98:63:43:2f:71:16:da:c9:e7:62:ab:5a:bb: 56:df:13:2b:03:76:3e:d9:6a:d1:39:b8:94:19:8c:7d:2e:90: 39:12:08:75:3f:51:11:6f:39:85:64:ab:8b:c6:44:b2:70:14: 6e:89:f6:98:81:57:03:d6:45:3f:7f:8b:34:0c:74:b8:e3:ef: e9:74:56:aa:b1:92:aa:86:55:64:7d:89:30:76:c1:29:92:87: 8b:c1:4c:44:63:0c:f8:ca:52:0c:55:8c:47:37:ba:29:21:e7: bf:c0:22:ca:ec:93:27:e2:39:37:ec:a7:f1:2b:81:03:30:7a: cc:52:20:52:64:46:b9:13:05:1a:fd:80:1d:94:2f:aa:8e:68: e7:09:13:da:60:34:4e:84:f1:9d:c5:b3:9b:e4:24:8c:2f:9b: 8f:f6:4c:b3:7e:81:ff:69:41:0f:c2:ab:c1:eb:3d:ac:37:c9: db:5c:3a:80:eb:50:10:b2:34:91:29:24:f3:ea:23:0b:31:8a: 81:ec:47:be:9f:91:b8:58:14:ac:b5:9b:e8:48:08:56:3a:79: d2:b2:20:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0jKJRCl0jXhhCWsDt/WuApSFiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTEyMjMyMTE4MDZaFw0yNTEyMjcwMzExMDZaMDMxMTAvBgNV BAMTKEU0QTBBQ0Y4ODg1MjdEOEQyQTEwQjQ5QUFBMTE1N0UzMEZFNDY3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepKJeHU2fvqQsMW42/qXAItwX 4e6OU05Xr1I6KN3M+viFCrxP0WagD7VuRG+yYT0vpfw87gemD/DIwbsZYRdVSuY9 lDDM3yjA/0LRFXcTemAYE0TCSlH07kEPh++o+31JbCZiKTZ1I1D3aNQHtrrZS4mU heRC+N/QPYEpI4InW4i8BhGdCiO9+OXq7nSxMdrmvd123ow7Cd+z/TLbBq0xaLBr XnHO5wqUkcxD7AqRwD6YXfahFLl4re8kIT5BcxEFktgWRYzr2NrbmCd772e46jOh 9c/dyXFXy6lpjF9Qhno7HlEEsTIFMVP5RGi3HshW2tKaY5X2NjF7br4iQ/ZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5KCs+IhSfY0qELSaqhFX4w/kZwgwHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvPjewKE5c4vVgQRT4V5RStDuB4T8qm5h+L YksCU4LZt7hntGVZnEvYmGNDL3EW2snnYqtau1bfEysDdj7ZatE5uJQZjH0ukDkS CHU/URFvOYVkq4vGRLJwFG6J9piBVwPWRT9/izQMdLjj7+l0VqqxkqqGVWR9iTB2 wSmSh4vBTERjDPjKUgxVjEc3uikh57/AIsrskyfiOTfsp/ErgQMwesxSIFJkRrkT BRr9gB2UL6qOaOcJE9pgNE6E8Z3Fs5vkJIwvm4/2TLN+gf9pQQ/Cq8HrPaw3ydtc OoDrUBCyNJEpJPPqIwsxioHsR76fkbhYFKy1m+hICFY6edKyINI= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:13 2025 by rpki-client