This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: jqc2OFBfbiILCjBo0Hxa5mc0gRF0x3QpACLVtLoBdrM= Subject key identifier: EF:9F:50:24:8E:A0:66:A6:8E:60:21:12:58:A4:6F:C2:03:EB:1A:06 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 12CCB8A907017C554D542A82DA8DD34BF8A40444 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: EF Signing time: Wed 24 Dec 2025 15:30:51 +0000 Manifest this update: Wed 24 Dec 2025 15:25:51 +0000 Manifest next update: Sat 27 Dec 2025 23:38:51 +0000 Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) 2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) 3: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: t3zYAl4yuQXZQn8X++c1qRySJixxwJNyu6POcpKtuoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cc:b8:a9:07:01:7c:55:4d:54:2a:82:da:8d:d3:4b:f8:a4:04:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Dec 24 15:25:51 2025 GMT Not After : Dec 27 23:38:51 2025 GMT Subject: CN=EF9F50248EA066A68E60211258A46FC203EB1A06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:2c:35:41:53:39:58:33:5c:e4:79:6c:77: 71:f5:09:ed:f8:b9:50:7c:9d:73:31:29:6b:5f:db: b3:fe:79:d2:10:a7:54:60:1f:dc:d4:bd:e7:88:a8: 4c:89:b5:ab:93:94:71:2f:64:d1:4b:cc:2e:57:ab: ad:2e:1c:9d:70:d6:b6:0b:c8:c6:f2:31:30:88:cb: 23:14:1f:a4:76:dd:bb:92:7c:ca:bb:f3:aa:d4:97: dc:02:99:07:56:76:8b:cf:94:a6:5e:a4:57:ac:0b: b7:7a:df:fa:a4:19:e9:bd:fa:e8:f8:d7:05:c6:98: 01:1b:6d:ab:01:de:1a:7c:dc:ca:37:4d:fc:72:ad: 2f:a8:f6:94:7e:11:c0:d2:c3:ca:f6:7d:33:00:a8: 3c:f3:45:76:24:e7:86:6b:14:30:a5:2f:f8:ba:0c: 46:cc:52:3e:0f:bb:cb:53:55:40:0f:a4:fb:ba:6a: 8c:8c:c3:7a:6a:3f:9c:0a:f9:39:4c:bb:1d:d7:9d: a3:f2:2f:13:2f:1c:50:bd:5f:04:8f:e0:df:c5:5f: 39:e9:a4:ea:3d:93:b4:4e:23:ea:27:e4:af:83:4f: b6:24:69:73:b9:9f:5c:55:05:38:7a:86:4f:98:84: a0:38:32:b9:76:aa:6a:d3:ff:99:17:ea:22:49:97: e3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9F:50:24:8E:A0:66:A6:8E:60:21:12:58:A4:6F:C2:03:EB:1A:06 X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:99:1f:84:5f:5e:05:1b:5b:dc:cf:11:65:62:e9:8f:32:b8: 31:67:1e:12:04:3c:99:bb:12:d0:4f:2b:d8:87:e8:ae:9a:ba: e7:76:e1:55:99:79:86:ac:44:36:ba:cd:9b:f1:04:17:05:97: 7c:c4:3d:49:0a:48:4c:4c:e3:92:90:0c:a0:9a:7a:4b:6d:b4: 3b:68:15:fe:11:e8:be:4f:03:35:ef:72:61:47:f0:b8:c9:a9: 63:bf:98:d6:90:ed:e3:04:7b:35:40:aa:7a:49:8e:2e:7a:21: de:3c:8c:11:e4:66:e9:0a:94:20:39:ee:ff:ca:da:dc:f9:b5: 73:05:8d:06:94:6f:bd:65:5b:0d:dc:6e:98:b2:42:44:6c:c9: a0:a7:f8:49:14:0d:e7:27:0c:44:e1:b8:fb:96:ff:bf:ab:73: 73:c4:57:ee:16:cb:52:93:18:b6:24:32:1f:0a:1d:b3:25:4b: d5:52:8b:e8:46:45:6b:25:53:b2:05:5c:9e:49:cb:13:a0:f4: a0:ac:d3:97:c0:76:3c:ea:4d:ae:94:77:1b:e7:9a:7b:07:56: f0:58:df:c3:1a:10:2e:de:6f:cc:78:55:a6:28:b8:df:d4:6a: 95:ef:d9:8d:8b:c6:eb:44:df:b5:4f:69:a3:01:90:c4:f8:31: 76:92:18:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsy4qQcBfFVNVCqC2o3TS/ikBEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTEyMjQxNTI1NTFaFw0yNTEyMjcyMzM4NTFaMDMxMTAvBgNV BAMTKEVGOUY1MDI0OEVBMDY2QTY4RTYwMjExMjU4QTQ2RkMyMDNFQjFBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/Sw1QVM5WDNc5Hlsd3H1Ce34 uVB8nXMxKWtf27P+edIQp1RgH9zUveeIqEyJtauTlHEvZNFLzC5Xq60uHJ1w1rYL yMbyMTCIyyMUH6R23buSfMq786rUl9wCmQdWdovPlKZepFesC7d63/qkGem9+uj4 1wXGmAEbbasB3hp83Mo3TfxyrS+o9pR+EcDSw8r2fTMAqDzzRXYk54ZrFDClL/i6 DEbMUj4Pu8tTVUAPpPu6aoyMw3pqP5wK+TlMux3XnaPyLxMvHFC9XwSP4N/FXznp pOo9k7ROI+on5K+DT7YkaXO5n1xVBTh6hk+YhKA4Mrl2qmrT/5kX6iJJl+N3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU759QJI6gZqaOYCESWKRvwgPrGgYwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECZH4RfXgUbW9zPEWVi6Y8yuDFnHhIEPJm7 EtBPK9iH6K6auud24VWZeYasRDa6zZvxBBcFl3zEPUkKSExM45KQDKCaektttDto Ff4R6L5PAzXvcmFH8LjJqWO/mNaQ7eMEezVAqnpJji56Id48jBHkZukKlCA57v/K 2tz5tXMFjQaUb71lWw3cbpiyQkRsyaCn+EkUDecnDEThuPuW/7+rc3PEV+4Wy1KT GLYkMh8KHbMlS9VSi+hGRWslU7IFXJ5JyxOg9KCs05fAdjzqTa6UdxvnmnsHVvBY 38MaEC7eb8x4VaYouN/UapXv2Y2LxutE37VPaaMBkMT4MXaSGPU= -----END CERTIFICATE-----Generated at Thu Dec 25 05:33:55 2025 by rpki-client