This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft File: C6E5FF54770B28DB44FDD655765364797010697B.mft (raw, json) Hash identifier: x9oqI/Ol4q/SefCvgoLVrXgVAq6HbsEuGU0ZlxJfUj0= Subject key identifier: A3:25:3B:CF:82:A3:AE:F9:19:F1:F5:E9:A5:7C:09:02:F1:21:12:3F Authority key identifier: C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B Certificate issuer: /CN=C6E5FF54770B28DB44FDD655765364797010697B Certificate serial: 58A4006E248962E8E4CD816F239B44D2B836BDE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft Manifest number: F0 Signing time: Mon 15 Dec 2025 15:22:15 +0000 Manifest this update: Mon 15 Dec 2025 15:17:15 +0000 Manifest next update: Fri 19 Dec 2025 00:05:15 +0000 Files and hashes: 1: C6E5FF54770B28DB44FDD655765364797010697B.crl (hash: qxkRpi3kTVEPXhswsVEQWHWPAk9slKLCUqcXpM7L2TU=) 2: 3136302e32322e33342e302f32332d3234203d3e20313532383136.roa (hash: a4xJEDoYakiTMO96ZZKVCyVqliQmIGfucXGPHg4A430=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 00:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a4:00:6e:24:89:62:e8:e4:cd:81:6f:23:9b:44:d2:b8:36:bd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E5FF54770B28DB44FDD655765364797010697B Validity Not Before: Dec 15 15:17:15 2025 GMT Not After : Dec 19 00:05:15 2025 GMT Subject: CN=A3253BCF82A3AEF919F1F5E9A57C0902F121123F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:51:4a:ac:d5:bb:9f:93:88:67:32:b0:2c: 05:f3:b6:25:ec:d5:23:54:a9:8e:3a:98:4f:1d:dc: a9:02:76:cf:61:77:04:c9:9b:25:94:9f:61:41:b7: 3e:e5:b4:58:28:c4:96:d1:03:b6:72:75:3b:72:4f: 90:56:51:79:ee:8c:e1:be:21:56:40:d2:ae:6b:c4: ec:73:f1:47:d6:eb:05:4a:73:14:96:05:be:bd:cd: b0:73:2d:d5:5a:f8:33:ba:97:b7:c8:57:a5:96:19: 9a:dc:6c:c5:82:42:b9:b1:5a:e1:32:95:eb:e8:97: 02:02:4d:f9:03:09:54:d4:93:d6:65:c2:2c:3f:25: b4:4e:fb:55:9c:fd:e7:23:76:d4:1b:8a:e5:55:ea: 0a:75:a0:e8:ea:cb:68:ff:ea:24:74:e2:b3:0d:41: e3:e7:c1:97:09:82:3a:ab:96:7c:92:fa:d8:d2:90: 05:d2:03:90:a3:5c:75:2a:81:c5:91:9a:00:40:ea: 62:14:c4:4c:cd:c6:b2:aa:d7:cd:18:e0:7c:a8:6e: 12:d9:e1:ce:68:29:c7:22:e6:cd:5c:0b:59:45:fb: 45:4c:fa:76:a5:b9:2d:91:b4:43:6b:10:ba:ad:8a: 8b:a3:37:28:de:3f:0f:fa:ae:9d:80:0a:3c:0a:11: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:25:3B:CF:82:A3:AE:F9:19:F1:F5:E9:A5:7C:09:02:F1:21:12:3F X509v3 Authority Key Identifier: keyid:C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:bf:3e:af:c6:2c:83:ce:da:aa:77:74:c8:83:cd:d4:0e:b3: 41:97:dd:c7:65:0c:43:41:32:11:4c:45:aa:d5:df:39:a1:d4: 37:f0:e8:68:97:94:6a:77:e1:d7:11:19:4b:fa:01:77:b7:d2: 5d:08:f2:89:0d:21:1a:83:11:f6:72:16:18:5f:ea:4e:0c:ad: cc:30:9d:72:87:79:a1:a5:a6:48:bb:90:73:40:68:eb:d6:91: cc:89:a7:d4:f9:d8:b9:00:f7:64:be:cd:1e:08:e7:bc:22:58: 46:cd:4b:f6:de:cc:d3:7c:3c:ff:d4:6f:ac:57:70:78:01:3e: f8:1d:12:e7:e4:c3:2b:aa:f2:64:5b:4e:bd:fb:fa:50:50:ec: 16:a7:3f:6a:3b:b4:f7:a8:dd:23:63:de:6e:eb:c7:3f:a4:39: dd:48:bf:89:01:14:d9:79:4b:fa:97:9c:ba:33:45:91:38:5b: 59:59:26:ce:d3:aa:43:c2:04:a4:3d:10:58:04:7f:06:fa:43: 26:5a:da:3f:24:61:00:46:31:71:cf:55:cb:18:81:90:f8:fa: 0b:53:33:99:3e:cb:6b:f3:31:d0:26:14:28:ed:32:e1:eb:58: 01:3e:0e:ee:d0:5f:af:f1:6f:26:95:de:46:be:64:b5:4c:32: 6c:27:ae:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKQAbiSJYujkzYFvI5tE0rg2veQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFNUZGNTQ3NzBCMjhEQjQ0RkRENjU1NzY1MzY0Nzk3 MDEwNjk3QjAeFw0yNTEyMTUxNTE3MTVaFw0yNTEyMTkwMDA1MTVaMDMxMTAvBgNV BAMTKEEzMjUzQkNGODJBM0FFRjkxOUYxRjVFOUE1N0MwOTAyRjEyMTEyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfD1FKrNW7n5OIZzKwLAXztiXs 1SNUqY46mE8d3KkCds9hdwTJmyWUn2FBtz7ltFgoxJbRA7ZydTtyT5BWUXnujOG+ IVZA0q5rxOxz8UfW6wVKcxSWBb69zbBzLdVa+DO6l7fIV6WWGZrcbMWCQrmxWuEy levolwICTfkDCVTUk9Zlwiw/JbRO+1Wc/ecjdtQbiuVV6gp1oOjqy2j/6iR04rMN QePnwZcJgjqrlnyS+tjSkAXSA5CjXHUqgcWRmgBA6mIUxEzNxrKq180Y4HyobhLZ 4c5oKcci5s1cC1lF+0VM+naluS2RtENrELqtioujNyjePw/6rp2ACjwKEUXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoyU7z4KjrvkZ8fXppXwJAvEhEj8wHwYDVR0j BBgwFoAUxuX/VHcLKNtE/dZVdlNkeXAQaXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Yjg4YTUxMy1kZWJmLTRkNWMtOTUxYi1kOTc1OWEwOTJkZTcvMC9DNkU1RkY1NDc3 MEIyOERCNDRGREQ2NTU3NjUzNjQ3OTcwMTA2OTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzZFNUZGNTQ3NzBCMjhEQjQ0RkRENjU1NzY1MzY0Nzk3MDEw Njk3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I4OGE1MTMtZGViZi00ZDVjLTk1 MWItZDk3NTlhMDkyZGU3LzAvQzZFNUZGNTQ3NzBCMjhEQjQ0RkRENjU1NzY1MzY0 Nzk3MDEwNjk3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAa/Pq/GLIPO2qp3dMiDzdQOs0GX3cdlDENB MhFMRarV3zmh1Dfw6GiXlGp34dcRGUv6AXe30l0I8okNIRqDEfZyFhhf6k4Mrcww nXKHeaGlpki7kHNAaOvWkcyJp9T52LkA92S+zR4I57wiWEbNS/bezNN8PP/Ub6xX cHgBPvgdEufkwyuq8mRbTr37+lBQ7BanP2o7tPeo3SNj3m7rxz+kOd1Iv4kBFNl5 S/qXnLozRZE4W1lZJs7TqkPCBKQ9EFgEfwb6QyZa2j8kYQBGMXHPVcsYgZD4+gtT M5k+y2vzMdAmFCjtMuHrWAE+Du7QX6/xbyaV3ka+ZLVMMmwnrlw= -----END CERTIFICATE-----Generated at Wed Dec 17 22:10:10 2025 by rpki-client