This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json) Hash identifier: rmHIaMzjtT17x3EO6n7EMGLedOGPHXoqHnAcHD9e1Q4= Subject key identifier: C1:D1:30:BE:3B:C7:59:1F:55:BB:00:24:A2:D2:A0:C6:9E:64:65:1A Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Certificate serial: 44CAD62CE124D66BE8714F46E953A22FE0F6024E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft Manifest number: 0401 Signing time: Tue 23 Dec 2025 08:22:48 +0000 Manifest this update: Tue 23 Dec 2025 08:17:48 +0000 Manifest next update: Fri 26 Dec 2025 10:31:48 +0000 Files and hashes: 1: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: RtKaOt0QVcUfg/opcNyngIYtGMAYjqUtlrzDiVJb3H0=) 2: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: +zKTzwzhIKBzs66VzWRrFEPjmfkmAihZZu6jfWFa2ts=) 3: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: /QE3JbQC9fGdo5sebo5tYuWfdXhEXpRAxCPxewOPZfY=) 4: 3130332e3132302e36372e302f32342d3234203d3e20313337333733.roa (hash: IzbXTMVKVDEB9rg5msnU2DpFCw8NlvM8m/tSeauJb7M=) 5: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: 8JbwHHtI2+x8Q7Ly9bJcp9ZLV+q/WXTIRy0nL9ot5M8=) 6: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: pCJYjvXonKex+skSqmImkbu4oPl5fBK9Q5SIxdeC0qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 10:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ca:d6:2c:e1:24:d6:6b:e8:71:4f:46:e9:53:a2:2f:e0:f6:02:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Validity Not Before: Dec 23 08:17:48 2025 GMT Not After : Dec 26 10:31:48 2025 GMT Subject: CN=C1D130BE3BC7591F55BB0024A2D2A0C69E64651A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:ac:49:87:7b:97:7f:7e:61:d8:6b:8e:a3: 39:96:b8:df:8c:ae:30:10:26:ef:14:79:29:d7:00: 8e:37:a7:eb:e9:15:7c:4e:c4:72:bf:2c:51:f4:d6: e7:66:09:28:cc:55:83:4d:08:e1:c3:1a:81:0b:d6: 2a:a9:d1:98:6a:15:a5:6d:ba:7c:25:79:c4:13:92: df:8e:4b:f7:50:56:a8:4e:eb:15:3f:4d:75:22:ea: d1:c8:da:a0:e5:1a:be:f8:01:b3:79:58:34:09:09: 78:d5:b1:e9:90:d8:9c:36:18:83:09:58:7b:d0:99: 92:ee:b9:a1:3d:16:8d:58:51:5e:45:ff:6d:07:94: 23:e1:2c:23:d1:0d:6f:bf:79:b2:ac:9a:31:90:60: 12:e4:95:43:60:d6:d5:e4:4e:b2:6c:6e:bc:3d:f9: c8:7c:ce:d2:8d:fe:4e:b6:11:e9:87:37:4f:55:10: b8:4b:7a:d8:a4:cc:68:ae:39:63:a6:20:16:8a:1c: 11:cd:5a:dc:e6:12:5d:96:43:a4:dc:7a:84:75:3f: d7:bc:05:59:d8:ca:9e:ed:0f:fb:82:4a:95:41:81: e2:f8:92:96:7b:cc:af:db:e2:33:79:cd:0c:8f:c6: 0a:8c:3a:3d:72:9e:15:29:d7:d7:df:fe:c2:fc:ec: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D1:30:BE:3B:C7:59:1F:55:BB:00:24:A2:D2:A0:C6:9E:64:65:1A X509v3 Authority Key Identifier: keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:9a:48:d8:bc:3a:fa:52:bf:f4:17:29:75:bd:5f:6b:0b:8b: 18:ce:8f:f8:c3:4a:8b:a8:ea:ec:9f:00:21:18:2c:8e:44:4b: ab:3b:df:22:50:bd:9b:8d:7d:1b:26:3f:ac:15:5b:6e:c6:86: ee:29:bd:34:d6:2d:29:eb:d5:8e:4b:02:7f:14:99:1b:83:70: af:7b:10:99:b3:80:20:3c:a6:cd:fd:7d:17:3f:15:8c:c2:43: 31:da:2a:1f:2b:8a:25:86:68:40:17:5d:c8:35:01:f0:97:48: d7:47:0a:f8:17:bf:f0:38:46:32:26:b5:b9:27:d8:6d:70:06: 29:98:b5:5b:08:1a:77:dd:20:39:7b:ee:27:59:f5:93:a2:8c: 53:fa:6f:a2:5f:94:da:de:b2:14:18:e8:04:04:99:89:64:29: 63:03:3e:ee:a2:61:44:07:12:24:f6:3a:e3:ad:58:1a:d9:2d: 6a:5a:87:49:6e:ed:84:39:eb:85:53:74:c7:24:59:64:3c:a7: 07:ac:91:6e:8c:24:92:d0:cc:6a:a6:ea:c6:f9:86:a0:32:fd: f0:97:e5:22:c7:28:1b:ed:62:4f:f3:66:a4:43:ae:b3:9d:01: db:00:00:0f:93:0e:98:e1:4f:b5:48:41:06:c8:2c:ba:48:6a: 2d:05:04:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMrWLOEk1mvocU9G6VOiL+D2Ak4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF NTY2Rjk0RTAeFw0yNTEyMjMwODE3NDhaFw0yNTEyMjYxMDMxNDhaMDMxMTAvBgNV BAMTKEMxRDEzMEJFM0JDNzU5MUY1NUJCMDAyNEEyRDJBMEM2OUU2NDY1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgKxJh3uXf35h2GuOozmWuN+M rjAQJu8UeSnXAI43p+vpFXxOxHK/LFH01udmCSjMVYNNCOHDGoEL1iqp0ZhqFaVt unwlecQTkt+OS/dQVqhO6xU/TXUi6tHI2qDlGr74AbN5WDQJCXjVsemQ2Jw2GIMJ WHvQmZLuuaE9Fo1YUV5F/20HlCPhLCPRDW+/ebKsmjGQYBLklUNg1tXkTrJsbrw9 +ch8ztKN/k62EemHN09VELhLetikzGiuOWOmIBaKHBHNWtzmEl2WQ6TceoR1P9e8 BVnYyp7tD/uCSpVBgeL4kpZ7zK/b4jN5zQyPxgqMOj1ynhUp19ff/sL87CZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwdEwvjvHWR9VuwAkotKgxp5kZRowHwYDVR0j BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2 Rjk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEz MGUtMTBiMmM2ODhjMmZjLzAvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYx QkVFNTY2Rjk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeaSNi8OvpSv/QXKXW9X2sLixjOj/jDSouo 6uyfACEYLI5ES6s73yJQvZuNfRsmP6wVW27Ghu4pvTTWLSnr1Y5LAn8UmRuDcK97 EJmzgCA8ps39fRc/FYzCQzHaKh8riiWGaEAXXcg1AfCXSNdHCvgXv/A4RjImtbkn 2G1wBimYtVsIGnfdIDl77idZ9ZOijFP6b6JflNreshQY6AQEmYlkKWMDPu6iYUQH EiT2OuOtWBrZLWpah0lu7YQ564VTdMckWWQ8pweskW6MJJLQzGqm6sb5hqAy/fCX 5SLHKBvtYk/zZqRDrrOdAdsAAA+TDpjhT7VIQQbILLpIai0FBBE= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:53 2025 by rpki-client