This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft File: 6A755F0ECD114936B4C154BE153030E6BFE42025.mft (raw, json) Hash identifier: SPF6GNkiHcM4ePiRlVJxLFeBJuBZuxuI+104Cf0IDW4= Subject key identifier: 4D:38:37:18:E2:EC:50:39:E8:E5:8B:31:AD:E4:AE:03:17:1A:23:A1 Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 6B5F27ECE4B3BD20CDE09A04CC556411C1432176 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft Manifest number: BE Signing time: Sun 21 Dec 2025 07:02:33 +0000 Manifest this update: Sun 21 Dec 2025 06:57:33 +0000 Manifest next update: Wed 24 Dec 2025 18:51:33 +0000 Files and hashes: 1: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: e8ZJYzkvKx8Yk6VtEAAoJxN88Qmgg4lnk8IMQAGn/JE=) 2: 6A755F0ECD114936B4C154BE153030E6BFE42025.crl (hash: b6iC6Z/Mww5S38RV/p8UCq2KzViLxF3jdn0fLt/7I+Q=) 3: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: culnOZ+9LI8JbiM/iJt/J//Lb5wajjvnBMY/KnuE8Q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5f:27:ec:e4:b3:bd:20:cd:e0:9a:04:cc:55:64:11:c1:43:21:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Dec 21 06:57:33 2025 GMT Not After : Dec 24 18:51:33 2025 GMT Subject: CN=4D383718E2EC5039E8E58B31ADE4AE03171A23A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:ad:fa:2f:59:1a:2d:a7:da:51:8c:27:80: a2:67:b2:c3:fe:50:a0:25:4f:24:d6:f3:b5:dc:84: 65:46:9e:65:be:40:0b:df:4e:4f:ff:f3:5c:2b:3a: 0d:10:0a:eb:76:36:c5:b4:83:df:c0:f8:e8:f4:07: 78:ae:e8:ae:6a:20:55:73:ca:dc:92:6d:d6:4f:77: 28:1e:97:e9:e0:56:85:66:f2:44:8d:ad:3d:38:c4: 48:02:82:89:7c:c9:92:65:c2:41:fe:28:6f:d6:9d: 13:63:ad:aa:34:e2:8e:1b:37:5d:26:26:68:6b:60: 65:99:12:17:dd:d0:23:9a:42:a5:8c:d7:b6:dc:78: e6:34:ca:28:b8:19:4d:61:3f:b2:93:76:9a:41:35: b4:8c:53:fb:2d:54:ad:0b:c0:c4:3a:df:c6:4d:9b: e5:25:1e:59:1a:03:06:fb:55:49:1a:a2:c9:89:d4: 73:91:ed:4c:64:2a:a7:53:68:96:b9:b4:61:0f:97: 5b:aa:4f:b0:53:95:09:c8:81:89:50:8c:5a:ee:fd: b4:ca:69:44:ec:70:9c:7f:cd:31:7a:4a:3a:2e:3d: f0:c2:13:28:60:35:04:32:b1:4d:74:e7:47:0e:71: 8d:10:22:5f:38:70:88:1a:2f:cb:dc:14:06:03:16: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:37:18:E2:EC:50:39:E8:E5:8B:31:AD:E4:AE:03:17:1A:23:A1 X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bc:13:ba:53:2a:b2:ad:ea:5f:1a:cb:38:27:b0:ed:2f:9e: af:fb:c5:e5:94:40:0d:28:6c:06:13:33:ab:cd:24:99:86:3d: 86:0b:a6:68:78:db:ba:51:16:dd:ac:cc:06:c0:4b:6d:9b:42: cb:22:70:8f:9c:0b:a1:f8:85:c3:a7:da:20:bb:77:dd:17:b1: 1d:7e:a0:d3:96:cf:7e:d8:2a:fe:e6:68:6a:f2:01:09:43:ce: 77:59:89:ed:8b:91:81:af:3b:2e:48:1c:c4:4a:b3:97:73:80: f7:79:42:4e:aa:28:fe:01:de:52:02:de:cd:30:29:93:3c:93: 04:c1:a6:4d:2a:82:5e:71:77:22:c7:4a:85:11:e4:44:53:df: 5d:47:12:a0:8e:09:ee:7f:8d:11:0c:be:7a:89:c6:4c:67:d5: d5:8d:d8:3f:97:f8:e3:08:4d:38:61:f4:8f:c5:b2:25:88:f8: 16:d7:85:08:ec:3e:81:67:aa:6d:b6:71:aa:99:ff:08:a3:f9: 9a:7a:70:1c:d3:92:55:a5:9d:a8:8f:84:7b:8a:74:40:ba:a2: 95:34:44:ba:e6:ee:32:f5:75:23:e5:48:c3:92:03:e4:73:f8: a8:9d:0b:90:a5:30:bf:b0:c7:29:a9:04:69:56:d2:81:04:dc: 03:d3:c8:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa18n7OSzvSDN4JoEzFVkEcFDIXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNTEyMjEwNjU3MzNaFw0yNTEyMjQxODUxMzNaMDMxMTAvBgNV BAMTKDREMzgzNzE4RTJFQzUwMzlFOEU1OEIzMUFERTRBRTAzMTcxQTIzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYL636L1kaLafaUYwngKJnssP+ UKAlTyTW87XchGVGnmW+QAvfTk//81wrOg0QCut2NsW0g9/A+Oj0B3iu6K5qIFVz ytySbdZPdygel+ngVoVm8kSNrT04xEgCgol8yZJlwkH+KG/WnRNjrao04o4bN10m JmhrYGWZEhfd0COaQqWM17bceOY0yii4GU1hP7KTdppBNbSMU/stVK0LwMQ638ZN m+UlHlkaAwb7VUkaosmJ1HOR7UxkKqdTaJa5tGEPl1uqT7BTlQnIgYlQjFru/bTK aUTscJx/zTF6SjouPfDCEyhgNQQysU1050cOcY0QIl84cIgaL8vcFAYDFoebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTg3GOLsUDno5YsxreSuAxcaI6EwHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMw RTZCRkU0MjAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF28E7pTKrKt6l8ayzgnsO0vnq/7xeWUQA0o bAYTM6vNJJmGPYYLpmh427pRFt2szAbAS22bQssicI+cC6H4hcOn2iC7d90XsR1+ oNOWz37YKv7maGryAQlDzndZie2LkYGvOy5IHMRKs5dzgPd5Qk6qKP4B3lIC3s0w KZM8kwTBpk0qgl5xdyLHSoUR5ERT311HEqCOCe5/jREMvnqJxkxn1dWN2D+X+OMI TThh9I/FsiWI+BbXhQjsPoFnqm22caqZ/wij+Zp6cBzTklWlnaiPhHuKdEC6opU0 RLrm7jL1dSPlSMOSA+Rz+KidC5ClML+wxympBGlW0oEE3APTyKw= -----END CERTIFICATE-----Generated at Mon Dec 22 10:35:27 2025 by rpki-client