This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: 88r907IM7HOPHFksg14/hyujylAFNIUVkim7aF5ZZ10= Subject key identifier: 14:7A:29:F2:F6:45:27:56:96:A2:F8:B5:66:E9:4A:4E:C6:87:81:AE Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 78E7B593554E9F3A3C5878347873B54007F5F516 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 022B Signing time: Wed 17 Dec 2025 19:22:05 +0000 Manifest this update: Wed 17 Dec 2025 19:17:05 +0000 Manifest next update: Sun 21 Dec 2025 06:09:05 +0000 Files and hashes: 1: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: FVGuh7h5NDwJpTXj75aPEv31d/QENjnVKnig8uwQrzM=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e7:b5:93:55:4e:9f:3a:3c:58:78:34:78:73:b5:40:07:f5:f5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Dec 17 19:17:05 2025 GMT Not After : Dec 21 06:09:05 2025 GMT Subject: CN=147A29F2F645275696A2F8B566E94A4EC68781AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:db:43:23:65:cd:de:4e:a5:8c:e5:d1:84: a7:a0:92:11:47:e2:08:d8:17:d0:ac:af:db:12:78: c0:28:2c:3f:e0:c9:0d:e3:3d:e6:40:c7:c5:d2:16: bc:b3:95:50:64:03:b4:05:37:bf:47:1c:ef:d7:ec: 6a:a3:80:45:cd:01:36:f9:2e:39:af:af:bb:11:3e: e8:36:d7:26:62:1a:94:4a:87:68:9e:7c:bf:86:d2: f3:3d:17:4d:b4:12:6d:d5:62:4e:b3:50:25:7a:1a: f7:7d:cb:ec:67:17:81:d7:3c:c6:c7:17:95:3d:1b: 07:72:d2:04:49:42:65:1d:69:d2:ca:67:0b:32:62: 92:4b:b9:68:96:ae:ee:57:c3:62:f6:33:4d:c3:e3: ef:aa:19:22:24:1e:bc:0c:76:9a:58:56:e9:b0:0b: 47:94:7e:16:10:56:40:27:75:b3:25:74:bd:cc:97: b3:77:e7:2d:a4:19:dc:ea:59:7f:2a:4e:c9:c6:82: c8:28:8f:47:21:88:29:33:c9:8b:73:32:33:dc:2e: 0e:a7:72:99:cf:e6:dc:88:89:c2:d5:38:9f:7d:ad: 8e:75:18:2e:ab:94:4b:aa:9b:b2:05:2a:92:d4:e7: ea:ee:8c:c2:3e:c7:b2:22:b7:78:36:f7:90:8f:40: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:29:F2:F6:45:27:56:96:A2:F8:B5:66:E9:4A:4E:C6:87:81:AE X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f1:8a:9a:81:c7:64:43:02:e1:ec:ca:e3:e3:66:cd:a6:92: 5b:85:31:d9:45:b2:58:31:1a:cf:58:cf:38:e4:e4:e0:41:48: ee:35:73:fe:6f:4c:24:50:1b:40:04:f2:2c:6a:97:57:eb:cd: 82:de:86:03:91:ec:51:db:40:ac:b6:de:5e:00:fa:fa:87:be: 43:d3:9c:9b:49:b5:a5:19:5b:4d:ca:74:8e:de:a5:c4:70:16: 19:ea:d5:2c:14:88:65:03:10:14:03:41:c8:13:9b:8c:8f:59: fc:e2:de:29:50:9d:9d:e4:78:b5:12:44:24:17:07:3b:ac:2b: ad:81:79:b5:01:9b:6f:df:15:4e:70:f8:ad:a9:df:3f:1d:32: 27:e6:fa:41:89:b6:60:7e:a3:a2:b2:3f:77:6f:90:c4:44:e0: c0:a6:1e:93:6b:be:7f:02:9e:74:13:26:ba:7a:11:02:8b:bf: 67:e2:c5:e0:99:dc:c3:5f:49:19:d3:6a:25:20:5d:7d:6f:41: 52:c3:8d:14:d4:49:79:68:4a:ab:fc:47:88:20:38:86:ac:cc: d2:5c:c4:97:20:88:1e:af:19:58:6d:2e:2c:6d:c1:e4:c4:be: 5c:c2:74:2e:ef:08:c2:9d:06:07:5e:9d:7a:d0:5b:f2:e1:fb: c4:2c:67:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOe1k1VOnzo8WHg0eHO1QAf19RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTEyMTcxOTE3MDVaFw0yNTEyMjEwNjA5MDVaMDMxMTAvBgNV BAMTKDE0N0EyOUYyRjY0NTI3NTY5NkEyRjhCNTY2RTk0QTRFQzY4NzgxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOw9tDI2XN3k6ljOXRhKegkhFH 4gjYF9Csr9sSeMAoLD/gyQ3jPeZAx8XSFryzlVBkA7QFN79HHO/X7GqjgEXNATb5 Ljmvr7sRPug21yZiGpRKh2iefL+G0vM9F020Em3VYk6zUCV6Gvd9y+xnF4HXPMbH F5U9Gwdy0gRJQmUdadLKZwsyYpJLuWiWru5Xw2L2M03D4++qGSIkHrwMdppYVumw C0eUfhYQVkAndbMldL3Ml7N35y2kGdzqWX8qTsnGgsgoj0chiCkzyYtzMjPcLg6n cpnP5tyIicLVOJ99rY51GC6rlEuqm7IFKpLU5+rujMI+x7Iit3g295CPQNPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHop8vZFJ1aWovi1ZulKTsaHga4wHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrxipqBx2RDAuHsyuPjZs2mkluFMdlFslgx Gs9Yzzjk5OBBSO41c/5vTCRQG0AE8ixql1frzYLehgOR7FHbQKy23l4A+vqHvkPT nJtJtaUZW03KdI7epcRwFhnq1SwUiGUDEBQDQcgTm4yPWfzi3ilQnZ3keLUSRCQX BzusK62BebUBm2/fFU5w+K2p3z8dMifm+kGJtmB+o6KyP3dvkMRE4MCmHpNrvn8C nnQTJrp6EQKLv2fixeCZ3MNfSRnTaiUgXX1vQVLDjRTUSXloSqv8R4ggOIaszNJc xJcgiB6vGVhtLixtweTEvlzCdC7vCMKdBgdenXrQW/Lh+8QsZ5E= -----END CERTIFICATE-----Generated at Fri Dec 19 15:59:40 2025 by rpki-client