This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft File: C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft (raw, json) Hash identifier: Ye0W0eg0LftKmXG81h1wZfDb9lVjCJnj5FOYyUotDo8= Subject key identifier: 6A:96:DD:DB:F9:E9:C4:11:0C:CB:9A:5C:3A:44:DB:0F:B4:6C:E9:86 Authority key identifier: C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 Certificate issuer: /CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Certificate serial: 3ABEAA2A5073C6F94A891FE7FDDA5A9B70A43051 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft Manifest number: 0531 Signing time: Thu 18 Dec 2025 20:22:47 +0000 Manifest this update: Thu 18 Dec 2025 20:17:47 +0000 Manifest next update: Mon 22 Dec 2025 04:42:47 +0000 Files and hashes: 1: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: p4QmW11QVKIy/H0IsIo9siyqhBsQC1fGJ4OCrOJGVFc=) 2: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: n2P3Yp+pRtsLYzAJB7+7TGk1BY1SpgPoZfiLyMV51xc=) 3: C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl (hash: tw73vgr4F6cclrNBQ0+lAm9FWlzpz50xCg+iWCPRnIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:be:aa:2a:50:73:c6:f9:4a:89:1f:e7:fd:da:5a:9b:70:a4:30:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Validity Not Before: Dec 18 20:17:47 2025 GMT Not After : Dec 22 04:42:47 2025 GMT Subject: CN=6A96DDDBF9E9C4110CCB9A5C3A44DB0FB46CE986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:27:e3:ac:54:0a:aa:55:04:8b:63:38:04: 33:08:62:0e:9e:9a:b9:8f:4f:6c:d7:9b:b4:50:84: c9:6d:36:d4:2c:0c:79:b4:4f:81:3a:96:6a:7e:e0: 70:4f:a6:1c:8d:62:d7:da:1e:17:a2:fd:e4:11:e2: 53:69:1c:67:cb:0c:e9:74:b0:6e:69:60:55:57:23: 79:17:f9:f4:32:c1:23:ff:33:04:ef:18:d8:a4:80: e5:e3:04:be:13:c2:55:54:32:09:25:59:1a:a0:17: f7:73:a7:91:ff:d1:b8:e0:7a:21:b9:29:fd:22:84: e0:28:e2:8f:3d:c1:fd:7b:09:42:cd:0d:18:18:e7: f3:e0:ea:2d:55:00:80:ae:ee:a6:5e:2d:9e:40:e9: 46:cf:e6:64:ce:ff:f4:68:3d:5b:a3:95:2f:ee:7a: c1:38:b7:30:e5:d1:ac:28:bb:78:b4:24:a7:cc:67: 30:d4:f3:63:b3:56:30:76:6c:98:53:a6:d3:05:4c: 63:d5:97:f3:71:da:21:52:b6:cf:cc:0a:ca:3e:98: d9:99:a0:46:5c:b4:19:ee:16:6f:f1:cc:3d:47:f3: ec:c8:8b:6b:50:7b:ea:dd:8e:0f:ca:67:3e:af:b3: b7:ab:d1:36:5d:a2:50:43:25:70:08:21:0f:c8:0c: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:96:DD:DB:F9:E9:C4:11:0C:CB:9A:5C:3A:44:DB:0F:B4:6C:E9:86 X509v3 Authority Key Identifier: keyid:C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bd:b2:18:33:c3:3a:67:2c:be:a8:69:b3:fb:f1:b5:94:76: f7:20:75:2e:b3:fd:97:24:5b:40:8f:3c:e0:ca:4a:d5:2b:0a: 2d:7a:4e:ec:65:6c:d8:d8:52:c2:3a:00:57:70:8a:7a:cd:bd: c4:71:dc:cf:cd:ea:ef:86:69:07:6b:1b:8d:2c:f5:72:6d:04: b7:bb:de:0f:b3:e3:d2:73:71:a4:a4:50:fc:75:2f:c2:76:fc: 6f:50:ef:7c:a9:41:e7:1e:db:7f:60:0c:d5:f2:3f:b0:c4:cb: a9:c6:84:6e:61:73:02:cd:9b:11:70:0e:9c:9c:62:d5:8d:69: be:ea:38:81:c4:3f:6d:7d:8b:19:08:b2:1e:47:e1:01:1e:c1: 77:59:92:b5:bd:f6:81:10:c8:f8:c8:8f:ce:8f:95:79:be:e4: ca:6e:48:bd:02:7f:66:48:0e:ba:a0:4d:25:8d:d9:84:5f:57: 7a:19:f9:85:24:96:07:d0:46:04:f3:fe:9c:a6:e1:dc:48:46: 83:89:19:de:25:c4:1c:89:c8:e9:fd:60:11:e9:95:69:18:58: 94:72:1e:b4:db:63:2e:df:d8:3c:de:a0:e3:cc:7e:4e:26:88: b3:df:e5:91:7d:90:79:cb:20:93:c9:07:ce:63:82:1a:48:0b: f0:97:b1:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOr6qKlBzxvlKiR/n/dpam3CkMFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkx NUExOEIzMzAeFw0yNTEyMTgyMDE3NDdaFw0yNTEyMjIwNDQyNDdaMDMxMTAvBgNV BAMTKDZBOTZERERCRjlFOUM0MTEwQ0NCOUE1QzNBNDREQjBGQjQ2Q0U5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycyfjrFQKqlUEi2M4BDMIYg6e mrmPT2zXm7RQhMltNtQsDHm0T4E6lmp+4HBPphyNYtfaHhei/eQR4lNpHGfLDOl0 sG5pYFVXI3kX+fQywSP/MwTvGNikgOXjBL4TwlVUMgklWRqgF/dzp5H/0bjgeiG5 Kf0ihOAo4o89wf17CULNDRgY5/Pg6i1VAICu7qZeLZ5A6UbP5mTO//RoPVujlS/u esE4tzDl0awou3i0JKfMZzDU82OzVjB2bJhTptMFTGPVl/Nx2iFSts/MCso+mNmZ oEZctBnuFm/xzD1H8+zIi2tQe+rdjg/KZz6vs7er0TZdolBDJXAIIQ/IDBvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUapbd2/npxBEMy5pcOkTbD7Rs6YYwHwYDVR0j BBgwFoAUxvc27769GgFD2wpXoUNUWRWhizMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDU0YjRlMi0yZTU4LTQ2NWItYWZhYS0xYzk0NjVjODgyZTYvMC9DNkY3MzZFRkJF QkQxQTAxNDNEQjBBNTdBMTQzNTQ1OTE1QTE4QjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkxNUEx OEIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0 NTkxNUExOEIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu9shgzwzpnLL6oabP78bWUdvcgdS6z/Zck W0CPPODKStUrCi16TuxlbNjYUsI6AFdwinrNvcRx3M/N6u+GaQdrG40s9XJtBLe7 3g+z49JzcaSkUPx1L8J2/G9Q73ypQece239gDNXyP7DEy6nGhG5hcwLNmxFwDpyc YtWNab7qOIHEP219ixkIsh5H4QEewXdZkrW99oEQyPjIj86PlXm+5MpuSL0Cf2ZI DrqgTSWN2YRfV3oZ+YUklgfQRgTz/pym4dxIRoOJGd4lxByJyOn9YBHplWkYWJRy HrTbYy7f2DzeoOPMfk4miLPf5ZF9kHnLIJPJB85jghpIC/CXsbU= -----END CERTIFICATE-----Generated at Fri Dec 19 13:33:00 2025 by rpki-client