This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft
File: C6E5FF54770B28DB44FDD655765364797010697B.mft (raw, json)
Hash identifier: euLnt1K8cv0RWEDP7oNQ3284xyziEk8JPNrQZ/HvNhE=
Subject key identifier: A8:4C:59:99:89:39:34:2F:16:BD:A7:42:B5:FA:E6:70:EE:BC:A9:2F
Authority key identifier: C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
Certificate issuer: /CN=C6E5FF54770B28DB44FDD655765364797010697B
Certificate serial: 2BF97EDB3B5B33EAEAD5A5DF812A1E73564A11EB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft
Manifest number: F1
Signing time: Thu 18 Dec 2025 00:12:14 +0000
Manifest this update: Thu 18 Dec 2025 00:07:14 +0000
Manifest next update: Sun 21 Dec 2025 02:33:14 +0000
Files and hashes: 1: 3136302e32322e33342e302f32332d3234203d3e20313532383136.roa (hash: a4xJEDoYakiTMO96ZZKVCyVqliQmIGfucXGPHg4A430=)
2: C6E5FF54770B28DB44FDD655765364797010697B.crl (hash: 2i6Iqq24bl5yih0MtBvWd5JgWP1GtNoDK4YPYbqUhV4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl
rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 09:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f9:7e:db:3b:5b:33:ea:ea:d5:a5:df:81:2a:1e:73:56:4a:11:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E5FF54770B28DB44FDD655765364797010697B
Validity
Not Before: Dec 18 00:07:14 2025 GMT
Not After : Dec 21 02:33:14 2025 GMT
Subject: CN=A84C59998939342F16BDA742B5FAE670EEBCA92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2f:f2:cc:35:19:4a:b1:20:04:fa:4c:35:88:
ec:2e:62:85:29:d8:02:34:83:92:83:57:2c:25:64:
82:53:91:4c:72:40:bd:79:44:01:02:84:36:29:9a:
7e:79:ff:d6:09:6a:c0:68:6e:44:a9:e1:9e:f5:c3:
3e:07:44:4d:8c:ad:02:18:e9:94:6b:58:75:de:8f:
b8:8d:ca:fb:ce:86:36:50:dd:d6:e5:d8:e1:c4:de:
60:08:a3:b8:bb:1c:76:fc:2d:6d:0a:75:76:84:f8:
ec:0e:34:a7:0f:cb:32:d2:78:b6:39:d1:0c:fb:69:
e7:4c:28:0a:fd:79:9f:01:8b:2a:75:0a:36:cd:a4:
3b:c3:e6:70:d5:cd:b0:69:f3:40:b2:bd:9b:63:fd:
0e:ea:de:05:0b:7c:4a:72:0f:09:48:4c:3b:3d:5a:
17:4e:cd:dc:5a:48:19:92:83:1a:20:b4:e1:68:15:
a4:95:67:4b:58:0c:2b:29:0f:4b:53:bb:7d:05:7b:
69:53:7b:32:26:7c:9a:81:34:d6:d7:87:fe:f3:24:
c8:92:76:4b:47:26:f3:b8:0e:06:46:99:f8:a1:01:
86:d6:ae:84:73:b6:67:85:23:ff:a6:28:a9:17:29:
fb:8f:e8:f5:62:43:80:60:dd:44:e9:43:94:2b:e5:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:59:99:89:39:34:2F:16:BD:A7:42:B5:FA:E6:70:EE:BC:A9:2F
X509v3 Authority Key Identifier:
keyid:C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4b:07:36:84:aa:9c:11:e6:06:df:de:b8:2d:ab:70:d3:c1:
a5:05:43:8b:a2:a3:80:91:20:7a:8e:d4:2a:26:5d:e7:2b:72:
56:46:ea:fc:48:8a:0b:ba:da:53:5b:87:0c:5b:6c:ae:d5:f5:
ba:cb:1c:98:8b:57:66:d0:32:07:76:f6:a7:81:75:c5:12:6b:
94:75:d4:d7:78:a2:7f:37:ee:5c:14:75:89:8b:a3:46:aa:c5:
b8:bc:c4:30:b9:c2:45:b5:19:c1:d7:df:26:8d:f5:12:9a:5a:
3a:f7:1c:ba:43:5b:56:64:62:32:a7:c8:17:d9:5d:b2:e7:b6:
f1:98:08:1f:c1:1f:c0:b1:9d:25:df:36:f3:cb:79:48:6f:ff:
a1:f5:aa:3f:59:87:46:eb:8a:f1:51:7f:61:72:e5:dd:d0:fa:
bb:8b:e2:17:f0:34:da:56:79:6e:11:bd:4a:6d:aa:58:e0:24:
44:30:02:6f:7e:fa:3c:a1:da:7e:90:b2:16:8e:a7:45:13:09:
dd:11:96:c2:d3:0d:83:f2:ec:11:a1:83:69:66:f9:dc:97:8d:
0e:ae:d8:af:7a:19:4a:b4:34:b5:32:44:57:ee:86:97:80:2e:
fe:f0:84:3e:58:2c:59:16:69:64:fd:a2:4b:a3:df:18:df:ba:
70:2d:d0:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUK/l+2ztbM+rq1aXfgSoec1ZKEeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZFNUZGNTQ3NzBCMjhEQjQ0RkRENjU1NzY1MzY0Nzk3
MDEwNjk3QjAeFw0yNTEyMTgwMDA3MTRaFw0yNTEyMjEwMjMzMTRaMDMxMTAvBgNV
BAMTKEE4NEM1OTk5ODkzOTM0MkYxNkJEQTc0MkI1RkFFNjcwRUVCQ0E5MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXL/LMNRlKsSAE+kw1iOwuYoUp
2AI0g5KDVywlZIJTkUxyQL15RAEChDYpmn55/9YJasBobkSp4Z71wz4HRE2MrQIY
6ZRrWHXej7iNyvvOhjZQ3dbl2OHE3mAIo7i7HHb8LW0KdXaE+OwONKcPyzLSeLY5
0Qz7aedMKAr9eZ8Biyp1CjbNpDvD5nDVzbBp80CyvZtj/Q7q3gULfEpyDwlITDs9
WhdOzdxaSBmSgxogtOFoFaSVZ0tYDCspD0tTu30Fe2lTezImfJqBNNbXh/7zJMiS
dktHJvO4DgZGmfihAYbWroRztmeFI/+mKKkXKfuP6PViQ4Bg3UTpQ5Qr5VY1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqExZmYk5NC8WvadCtfrmcO68qS8wHwYDVR0j
BBgwFoAUxuX/VHcLKNtE/dZVdlNkeXAQaXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Yjg4YTUxMy1kZWJmLTRkNWMtOTUxYi1kOTc1OWEwOTJkZTcvMC9DNkU1RkY1NDc3
MEIyOERCNDRGREQ2NTU3NjUzNjQ3OTcwMTA2OTdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQzZFNUZGNTQ3NzBCMjhEQjQ0RkRENjU1NzY1MzY0Nzk3MDEw
Njk3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I4OGE1MTMtZGViZi00ZDVjLTk1
MWItZDk3NTlhMDkyZGU3LzAvQzZFNUZGNTQ3NzBCMjhEQjQ0RkRENjU1NzY1MzY0
Nzk3MDEwNjk3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKxLBzaEqpwR5gbf3rgtq3DTwaUFQ4uio4CR
IHqO1ComXecrclZG6vxIigu62lNbhwxbbK7V9brLHJiLV2bQMgd29qeBdcUSa5R1
1Nd4on837lwUdYmLo0aqxbi8xDC5wkW1GcHX3yaN9RKaWjr3HLpDW1ZkYjKnyBfZ
XbLntvGYCB/BH8CxnSXfNvPLeUhv/6H1qj9Zh0brivFRf2Fy5d3Q+ruL4hfwNNpW
eW4RvUptqljgJEQwAm9++jyh2n6QshaOp0UTCd0RlsLTDYPy7BGhg2lm+dyXjQ6u
2K96GUq0NLUyRFfuhpeALv7whD5YLFkWaWT9okuj3xjfunAt0IY=
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:54:07 2025 by rpki-client