This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: TIzqMBjfbEDF5UCKsUQqzlV+rfuZlp2BJKK3AkxBaTk= Subject key identifier: 1E:93:4C:B0:31:1B:D1:05:37:B1:E2:74:7C:70:83:E8:3C:14:5C:13 Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 4D73120C091AED5CDBC64646EB353736C174A14F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: 013D Signing time: Sun 21 Dec 2025 11:51:34 +0000 Manifest this update: Sun 21 Dec 2025 11:46:34 +0000 Manifest next update: Wed 24 Dec 2025 20:03:34 +0000 Files and hashes: 1: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: +I5heW9usC3g2V3ncP2BbzxquKjOSk/cY9LMtr15d84=) 2: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: 4JVraGWPdUpWp/SKR7BXexnecyn9nFr3bvbRzLt9TsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:73:12:0c:09:1a:ed:5c:db:c6:46:46:eb:35:37:36:c1:74:a1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Dec 21 11:46:34 2025 GMT Not After : Dec 24 20:03:34 2025 GMT Subject: CN=1E934CB0311BD10537B1E2747C7083E83C145C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:a2:d5:fc:fb:d7:3f:22:d7:e4:08:07:cf: 16:e0:b1:fd:db:73:9a:1a:94:b4:00:ba:8f:46:4a: 51:8c:02:32:7f:0e:62:21:61:53:81:1f:fa:0b:ce: 60:21:73:bb:ed:b9:b5:2a:9f:df:47:b0:db:df:78: 5b:e8:01:d1:dd:d8:18:36:14:8c:ff:33:82:0a:52: 0f:ee:e8:2f:0d:5b:be:83:aa:64:76:e2:78:d3:4f: 6d:4f:b5:87:1d:df:9e:9a:be:50:6d:cb:22:4e:9c: 79:07:6a:c8:7c:85:8a:4d:ae:7d:7a:14:81:0e:a7: 49:99:54:fb:98:27:04:70:3c:df:b3:34:59:eb:35: ff:fd:c8:15:86:8c:07:ab:48:82:ec:aa:a5:dc:71: d1:a9:8a:f1:b8:d0:f2:3c:77:e9:c5:b6:8f:38:0a: f4:f1:86:a8:1e:34:ed:80:16:9a:1c:4b:83:74:e3: ec:e0:b9:76:20:a8:2f:fb:9e:85:62:4c:94:f2:a6: b9:14:52:c5:7e:3e:97:7a:88:f7:c9:52:40:6c:6f: 64:a9:0e:0b:de:fc:ea:ce:4d:6c:34:f4:50:8f:dd: b1:91:6b:2d:21:2f:a5:ad:d9:d0:87:86:c1:77:89: 5b:2e:0d:71:cd:1b:22:04:ce:ce:d9:ef:bd:b8:46: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:93:4C:B0:31:1B:D1:05:37:B1:E2:74:7C:70:83:E8:3C:14:5C:13 X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f0:7d:65:73:ca:75:f5:cb:2c:e8:6a:93:a8:18:4f:e3:bb: c4:d5:64:2a:0d:24:5f:6f:cf:8f:43:c1:ea:c5:5d:b6:72:dc: 3c:ba:a4:de:90:45:67:9c:cb:2f:dd:22:b5:16:7b:24:c0:d9: b5:12:0c:e1:ff:52:b2:94:c5:79:fd:00:d9:e7:3b:62:b5:48: 37:88:76:32:af:87:fc:fa:2d:a9:13:c6:13:84:d7:1d:95:95: 42:0d:0c:8f:0e:4d:da:09:5a:3f:4e:03:5e:4e:67:f3:f6:2d: 61:25:ed:f2:5b:51:10:41:4a:4e:46:20:53:1f:33:14:cc:1d: 52:2d:34:80:ec:16:7e:d5:eb:a9:0c:73:e0:d1:e4:0d:31:3c: 83:be:dc:d2:d0:c9:47:c0:11:89:14:45:73:37:b7:f2:fd:f5: 2a:d1:99:b7:db:0c:e2:a6:74:ed:27:a5:be:09:92:0f:50:54: aa:1d:03:ee:3c:52:41:fe:45:ad:b8:6a:84:1f:3b:45:6c:f2: b7:fd:a6:c0:7a:6d:48:16:0c:f3:42:f7:28:76:1a:fe:83:1c: 44:b4:2f:c0:98:4d:d2:0d:f8:91:0c:b3:53:ea:16:be:ac:f1: 35:b2:db:fb:bd:41:08:13:cf:e2:30:c8:1a:1f:3a:54:df:39: d8:c0:e5:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXMSDAka7VzbxkZG6zU3NsF0oU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTEyMjExMTQ2MzRaFw0yNTEyMjQyMDAzMzRaMDMxMTAvBgNV BAMTKDFFOTM0Q0IwMzExQkQxMDUzN0IxRTI3NDdDNzA4M0U4M0MxNDVDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVaKLV/PvXPyLX5AgHzxbgsf3b c5oalLQAuo9GSlGMAjJ/DmIhYVOBH/oLzmAhc7vtubUqn99HsNvfeFvoAdHd2Bg2 FIz/M4IKUg/u6C8NW76DqmR24njTT21PtYcd356avlBtyyJOnHkHash8hYpNrn16 FIEOp0mZVPuYJwRwPN+zNFnrNf/9yBWGjAerSILsqqXccdGpivG40PI8d+nFto84 CvTxhqgeNO2AFpocS4N04+zguXYgqC/7noViTJTyprkUUsV+Ppd6iPfJUkBsb2Sp Dgve/OrOTWw09FCP3bGRay0hL6Wt2dCHhsF3iVsuDXHNGyIEzs7Z7724RvV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpNMsDEb0QU3seJ0fHCD6DwUXBMwHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPwfWVzynX1yyzoapOoGE/ju8TVZCoNJF9v z49DwerFXbZy3Dy6pN6QRWecyy/dIrUWeyTA2bUSDOH/UrKUxXn9ANnnO2K1SDeI djKvh/z6LakTxhOE1x2VlUINDI8OTdoJWj9OA15OZ/P2LWEl7fJbURBBSk5GIFMf MxTMHVItNIDsFn7V66kMc+DR5A0xPIO+3NLQyUfAEYkURXM3t/L99SrRmbfbDOKm dO0npb4Jkg9QVKodA+48UkH+Ra24aoQfO0Vs8rf9psB6bUgWDPNC9yh2Gv6DHES0 L8CYTdIN+JEMs1PqFr6s8TWy2/u9QQgTz+IwyBofOlTfOdjA5R8= -----END CERTIFICATE-----Generated at Tue Dec 23 22:06:23 2025 by rpki-client