This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: FCy8ViK4UymW/t/VwgomYl2V7FrCY7g2GwRNoacC6FQ= Subject key identifier: E2:45:CC:4B:8B:86:4D:09:A0:60:10:12:1B:94:8F:EE:60:F7:45:38 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 505C3E88C1657D28AF2385D6DAC263056CAC2CAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 032E Signing time: Wed 24 Dec 2025 02:52:10 +0000 Manifest this update: Wed 24 Dec 2025 02:47:10 +0000 Manifest next update: Sat 27 Dec 2025 14:31:10 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: BWmhuOHbaTlNRTw6x/UQzmMypPadK1HBQ6YNSVIshq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5c:3e:88:c1:65:7d:28:af:23:85:d6:da:c2:63:05:6c:ac:2c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Dec 24 02:47:10 2025 GMT Not After : Dec 27 14:31:10 2025 GMT Subject: CN=E245CC4B8B864D09A06010121B948FEE60F74538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:3c:ad:98:db:b9:25:f2:b4:54:cb:cf:1c: 14:b1:9f:c2:93:d3:d8:6d:b7:d8:5f:74:a0:3d:f8: 7e:77:a8:da:cd:ff:0e:04:7d:f2:ca:41:ec:ab:ae: c0:4a:ca:99:55:2a:88:a0:82:29:b0:11:47:81:76: 63:51:c1:1c:02:ab:5f:d1:e4:8c:49:0e:8f:f1:dc: 8d:e3:00:8d:ae:21:b3:5b:08:20:cf:b2:c3:dd:e1: 8b:be:47:ae:71:b0:d3:31:44:ed:21:59:b9:a2:df: 8c:3c:91:d7:89:c9:6b:cd:0e:b6:da:c2:83:ff:05: 64:c5:67:8f:04:78:c9:0f:83:eb:d3:21:f0:a6:45: 67:8f:cf:e9:21:06:ad:db:64:0e:e7:55:01:c1:34: ed:1a:15:a0:04:94:42:8f:33:6c:ff:c5:23:02:08: 7c:17:b0:e6:f8:4c:d0:52:49:28:1e:1f:87:ce:0b: d8:22:63:dd:76:45:e7:0c:8b:67:dd:58:e1:93:b5: 80:ee:e1:ee:1c:80:52:78:32:f4:5f:41:81:cc:ad: 1e:93:17:3d:53:c1:35:a4:8c:b9:ff:dc:d8:fd:dc: 7f:04:2f:16:9c:46:24:c2:d9:48:0f:8a:80:20:44: 84:fd:d3:60:8d:4c:76:4e:42:14:77:56:1d:ca:55: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:45:CC:4B:8B:86:4D:09:A0:60:10:12:1B:94:8F:EE:60:F7:45:38 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:69:aa:5c:82:84:bb:5a:16:46:9b:a5:ec:42:1e:43:a7:38: d9:57:8d:f7:e1:51:f6:97:35:8d:85:48:33:00:fa:43:46:98: b9:e3:6e:d9:b8:ae:d8:84:3f:46:4b:5a:4e:a5:9c:1e:4f:c6: ce:d7:a6:bf:d3:d6:19:ce:63:17:6c:52:0d:f6:bb:64:d9:02: 71:96:2b:d5:5f:19:60:4f:c8:58:6d:0c:56:25:e9:77:ea:20: 9d:3e:85:ce:5e:60:73:f8:e2:4c:dc:ba:83:fa:fe:de:2f:52: e2:d8:e6:17:de:d6:51:83:8a:14:59:5f:b1:24:ce:a1:39:e5: 4e:8b:90:21:2c:88:65:6d:96:3c:d5:58:f5:6f:c1:49:83:51: a0:ee:6a:c6:40:17:d7:e9:23:0c:4d:e4:96:d3:75:de:81:05: f1:02:cc:da:a1:fb:d4:62:e3:9d:00:d0:70:c4:13:80:e7:af: 5e:85:f5:9e:27:d4:6d:fe:58:af:49:3a:e8:df:ba:57:f2:e9: 59:cf:69:09:90:98:8e:29:32:d5:c9:c3:68:2c:ae:a0:0f:02: cd:58:28:b4:3f:ca:06:39:dc:e9:33:83:c8:23:25:bd:78:1c: d3:f1:42:3f:bb:f7:ff:e9:ea:75:8c:6c:8b:a2:8a:63:c4:92: 92:fb:93:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFw+iMFlfSivI4XW2sJjBWysLKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTEyMjQwMjQ3MTBaFw0yNTEyMjcxNDMxMTBaMDMxMTAvBgNV BAMTKEUyNDVDQzRCOEI4NjREMDlBMDYwMTAxMjFCOTQ4RkVFNjBGNzQ1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRjytmNu5JfK0VMvPHBSxn8KT 09htt9hfdKA9+H53qNrN/w4EffLKQeyrrsBKyplVKoiggimwEUeBdmNRwRwCq1/R 5IxJDo/x3I3jAI2uIbNbCCDPssPd4Yu+R65xsNMxRO0hWbmi34w8kdeJyWvNDrba woP/BWTFZ48EeMkPg+vTIfCmRWePz+khBq3bZA7nVQHBNO0aFaAElEKPM2z/xSMC CHwXsOb4TNBSSSgeH4fOC9giY912RecMi2fdWOGTtYDu4e4cgFJ4MvRfQYHMrR6T Fz1TwTWkjLn/3Nj93H8ELxacRiTC2UgPioAgRIT902CNTHZOQhR3Vh3KVQ7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kXMS4uGTQmgYBASG5SP7mD3RTgwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFpqlyChLtaFkabpexCHkOnONlXjffhUfaX NY2FSDMA+kNGmLnjbtm4rtiEP0ZLWk6lnB5Pxs7Xpr/T1hnOYxdsUg32u2TZAnGW K9VfGWBPyFhtDFYl6XfqIJ0+hc5eYHP44kzcuoP6/t4vUuLY5hfe1lGDihRZX7Ek zqE55U6LkCEsiGVtljzVWPVvwUmDUaDuasZAF9fpIwxN5JbTdd6BBfECzNqh+9Ri 450A0HDEE4Dnr16F9Z4n1G3+WK9JOujfulfy6VnPaQmQmI4pMtXJw2gsrqAPAs1Y KLQ/ygY53Okzg8gjJb14HNPxQj+79//p6nWMbIuiimPEkpL7kxA= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:23 2025 by rpki-client