This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
File: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft (raw, json)
Hash identifier: T9df6NP2ftVYIwdlFkEeuG4yswu4YNMCz7MeZmZtPws=
Subject key identifier: 7D:CF:D1:89:D4:AD:A8:5B:B3:F4:51:CC:1C:78:73:A9:D4:69:63:5E
Authority key identifier: 6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B
Certificate issuer: /CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
Certificate serial: 0318254836D974064E3D684B1725D5AA78020D78
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
Manifest number: 0210
Signing time: Tue 23 Dec 2025 20:53:06 +0000
Manifest this update: Tue 23 Dec 2025 20:48:06 +0000
Manifest next update: Sat 27 Dec 2025 05:43:06 +0000
Files and hashes: 1: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl (hash: h9Ddzt7gOq2jFA6hNJdOmKM24Xq9+pWfhAxUzvqTWJA=)
2: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: 9yEpf7UptHKPtJGMSNZGjTG/u5N0H8I6F7MGckJB2CA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl
rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 05:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:18:25:48:36:d9:74:06:4e:3d:68:4b:17:25:d5:aa:78:02:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
Validity
Not Before: Dec 23 20:48:06 2025 GMT
Not After : Dec 27 05:43:06 2025 GMT
Subject: CN=7DCFD189D4ADA85BB3F451CC1C7873A9D469635E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:27:14:13:b8:0d:c2:50:b1:95:83:fa:21:
80:52:5c:9a:41:9b:e3:d5:90:5c:61:a4:1b:39:04:
75:c6:c3:62:88:44:39:7a:09:1c:ae:e6:4f:34:fc:
e8:3f:0b:de:02:6a:d9:0a:bd:c2:3c:30:14:ce:83:
d9:b7:b5:d6:bd:4f:49:50:cc:5d:94:f8:39:4e:8d:
76:6b:3f:4f:ed:ca:cd:47:51:2f:44:57:ee:94:72:
94:62:3a:36:f1:39:00:dc:5a:d2:66:74:e7:a0:b1:
92:4d:0f:71:07:ca:ee:8c:c2:ff:87:01:d0:c2:81:
a0:c3:0d:86:94:6c:61:87:b5:54:47:29:8b:bc:34:
97:cb:e2:d5:2e:02:fc:e0:eb:1a:48:6a:71:fb:61:
50:f0:ca:e1:68:2c:b5:69:93:f3:e3:ab:35:da:17:
5f:14:81:fb:0c:70:27:08:0e:92:87:de:46:de:fc:
af:14:39:b8:e2:67:5e:b1:1c:d7:c9:c2:76:dd:09:
e2:ee:f8:cb:38:59:74:8f:41:a3:e0:7d:1a:2f:3e:
e2:c3:3d:b7:97:f5:50:67:2d:32:64:a9:3f:28:a3:
67:99:6c:de:fa:d1:a7:05:02:e2:b2:fb:de:c2:dc:
e6:8e:b4:75:82:7d:63:c8:94:26:ec:e4:05:4c:38:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CF:D1:89:D4:AD:A8:5B:B3:F4:51:CC:1C:78:73:A9:D4:69:63:5E
X509v3 Authority Key Identifier:
keyid:6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9d:af:51:43:75:5a:89:57:bf:5e:9b:9a:57:03:7b:f0:41:
e9:4e:13:f0:bc:de:3c:b8:c1:66:95:70:f8:36:f9:a2:cd:0d:
83:1c:10:88:12:e9:51:5f:93:d7:7f:e8:6e:5f:5a:f3:93:61:
36:9b:9a:8c:c3:ab:f1:98:1d:f0:a8:72:49:a8:19:4b:c3:5f:
bf:12:61:32:8b:84:88:61:c0:66:17:87:cb:48:78:fb:43:80:
ad:de:db:92:31:f4:c3:aa:6d:33:17:fa:5a:f5:b9:e8:25:10:
5d:c9:59:79:b1:3b:f0:94:68:21:4f:c2:8b:1d:0d:ab:81:27:
99:db:19:33:98:03:9a:33:ca:83:0f:ef:96:2c:71:57:c8:1a:
30:a2:50:b9:14:e4:23:92:52:d6:21:b4:71:24:d1:d2:31:65:
db:55:3e:c2:df:95:e1:5a:9f:c9:30:50:ee:f7:89:1c:32:97:
46:0a:83:30:40:c5:9d:71:97:0e:79:52:f7:32:80:60:76:e4:
7e:d9:4e:56:c0:de:b2:42:50:9d:6e:96:c4:4b:7c:6b:8f:67:
89:14:67:58:1b:86:7a:3e:9f:87:21:3d:51:00:95:24:a1:8d:
92:6e:bf:ef:3f:2e:ab:a6:e6:dc:b5:db:c4:51:f9:dd:8f:19:
08:d9:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:07:00 2025 by rpki-client