This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: 8qFJK2wbnwKtNrjeEUmb3SM61nZihf6JAVEd+BYm9Ps= Subject key identifier: F4:FD:0A:33:E4:23:65:82:9D:44:10:F9:F4:E2:92:BC:30:02:94:B8 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 48F67C351B339E70BAC1AA0BE7329F38D9EC28D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: E6 Signing time: Fri 26 Dec 2025 16:10:48 +0000 Manifest this update: Fri 26 Dec 2025 16:05:48 +0000 Manifest next update: Mon 29 Dec 2025 20:10:48 +0000 Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: jOlBtBmkXSj+fSYaHlDdKI9RGX/xpsWQdqL9iASpC0w=) 2: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: Oc5PqkrWMUwDVf8Yb156CAnYqX9pF7S0D4Z0wF8E7KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f6:7c:35:1b:33:9e:70:ba:c1:aa:0b:e7:32:9f:38:d9:ec:28:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Dec 26 16:05:48 2025 GMT Not After : Dec 29 20:10:48 2025 GMT Subject: CN=F4FD0A33E42365829D4410F9F4E292BC300294B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:72:ac:12:7e:a6:1a:90:89:7d:e3:8c:fe: 69:9d:76:7d:59:9c:7b:db:fd:24:98:e3:d5:0b:e1: ca:6f:17:88:42:e7:3f:c4:a2:7c:c7:fd:a2:d4:cd: 00:ce:9d:e6:11:d3:8c:54:94:00:36:a5:11:20:f7: 42:f4:50:fc:c2:e9:32:a1:bd:93:a4:cc:b3:f3:3d: 19:01:47:ef:93:75:fa:9c:a0:d6:33:7b:30:36:09: d5:ea:08:ae:fe:32:44:df:66:1c:cd:eb:08:90:3b: 34:36:53:97:49:a6:95:ee:9c:5e:c3:7f:1c:6f:10: 0c:15:dc:f2:50:7c:7e:3f:54:49:ae:f9:57:f5:8c: 2f:7d:93:d4:dd:36:5d:3c:8b:73:ae:c8:db:9b:fb: a3:d9:91:8d:28:eb:49:5b:20:b5:28:a5:1e:07:ab: b2:69:d2:73:28:16:7d:d0:73:d2:fb:39:1b:37:0f: 6a:39:0f:f3:47:43:c6:1e:2c:1c:15:1f:38:db:2b: 28:43:de:3d:34:6e:39:a6:d0:e3:55:cd:e0:f9:18: 5e:05:bc:75:ac:e4:25:70:6d:6d:a4:00:ca:5a:3a: 27:c5:d9:f6:8f:e2:72:12:a8:71:60:ca:d2:8a:d6: 56:d9:3b:a6:d7:e3:89:b7:95:6e:2b:0a:ab:c2:96: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FD:0A:33:E4:23:65:82:9D:44:10:F9:F4:E2:92:BC:30:02:94:B8 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:5a:5a:06:52:7c:47:9e:01:2e:7f:04:d8:21:99:f9:65:36: 62:21:4a:44:75:b3:5d:7c:e8:ef:4d:01:0e:bd:87:30:08:c1: b8:61:4c:2e:34:41:b7:8a:f9:e9:c6:91:fb:27:37:d9:7d:4e: 76:96:a5:07:05:a7:8b:9e:67:d1:67:63:e2:cb:db:31:6a:7e: 44:2f:1d:82:20:73:c9:f4:26:5e:d1:5f:f8:d8:60:67:ac:16: a5:46:eb:cf:8e:f9:af:b9:0e:e9:61:18:4b:7c:ba:7a:ce:72: 4b:fe:76:31:a9:74:db:22:38:9a:86:1a:9c:95:39:81:1e:56: e6:99:39:26:89:9e:f5:47:0b:31:d9:9e:57:ec:a5:53:a4:0f: bd:f9:63:95:72:eb:d4:24:40:64:59:6b:0c:d0:7c:13:ea:b4: 7e:36:f6:54:37:e2:3e:21:ae:a5:2d:f7:f5:e0:81:03:33:08: b0:33:e6:20:9a:0b:4a:4c:cb:19:d2:be:ef:bd:69:6a:f6:aa: a5:1a:5c:1e:4f:d8:78:05:7f:ee:96:fb:43:a0:60:28:83:1e: b0:f1:66:87:99:ac:38:c3:eb:66:8f:2d:3b:e6:69:78:de:59: 2a:37:2f:f0:f1:dc:e4:0a:28:e5:a5:07:27:97:cb:bd:e2:a5: d7:ba:58:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPZ8NRsznnC6waoL5zKfONnsKNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTEyMjYxNjA1NDhaFw0yNTEyMjkyMDEwNDhaMDMxMTAvBgNV BAMTKEY0RkQwQTMzRTQyMzY1ODI5RDQ0MTBGOUY0RTI5MkJDMzAwMjk0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYnKsEn6mGpCJfeOM/mmddn1Z nHvb/SSY49UL4cpvF4hC5z/EonzH/aLUzQDOneYR04xUlAA2pREg90L0UPzC6TKh vZOkzLPzPRkBR++TdfqcoNYzezA2CdXqCK7+MkTfZhzN6wiQOzQ2U5dJppXunF7D fxxvEAwV3PJQfH4/VEmu+Vf1jC99k9TdNl08i3OuyNub+6PZkY0o60lbILUopR4H q7Jp0nMoFn3Qc9L7ORs3D2o5D/NHQ8YeLBwVHzjbKyhD3j00bjmm0ONVzeD5GF4F vHWs5CVwbW2kAMpaOifF2faP4nISqHFgytKK1lbZO6bX44m3lW4rCqvClhcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9P0KM+QjZYKdRBD59OKSvDAClLgwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlaWgZSfEeeAS5/BNghmfllNmIhSkR1s118 6O9NAQ69hzAIwbhhTC40QbeK+enGkfsnN9l9TnaWpQcFp4ueZ9FnY+LL2zFqfkQv HYIgc8n0Jl7RX/jYYGesFqVG68+O+a+5DulhGEt8unrOckv+djGpdNsiOJqGGpyV OYEeVuaZOSaJnvVHCzHZnlfspVOkD735Y5Vy69QkQGRZawzQfBPqtH429lQ34j4h rqUt9/XggQMzCLAz5iCaC0pMyxnSvu+9aWr2qqUaXB5P2HgFf+6W+0OgYCiDHrDx ZoeZrDjD62aPLTvmaXjeWSo3L/Dx3OQKKOWlByeXy73ipde6WCw= -----END CERTIFICATE-----Generated at Sat Dec 27 19:27:01 2025 by rpki-client