This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft File: 6E740E0191A423D6D9A0908C8B778DD2416F842E.mft (raw, json) Hash identifier: iCBBiLGD29f7sWfb4BNxzWdbUWQdDfqFuKMf1VqBMgg= Subject key identifier: E1:7C:4E:48:87:3D:11:2D:97:63:6E:21:95:E5:6C:04:F3:0A:09:C9 Authority key identifier: 6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E Certificate issuer: /CN=6E740E0191A423D6D9A0908C8B778DD2416F842E Certificate serial: 3BB4EC98C92F18AB23A963DC6277507C004A053F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft Manifest number: 0539 Signing time: Sat 20 Dec 2025 06:21:55 +0000 Manifest this update: Sat 20 Dec 2025 06:16:55 +0000 Manifest next update: Tue 23 Dec 2025 09:20:55 +0000 Files and hashes: 1: 323430323a323638303a3a2f33322d3438203d3e203633383733.roa (hash: i6JZ/uan2F0mTAhu/58NkGrI8IpjuHVX3ZFhTweqB/M=) 2: 6E740E0191A423D6D9A0908C8B778DD2416F842E.crl (hash: IAznhWkkvm3QP4MqcwxLTqG796MGRcv6ymeRLZaNhJ8=) 3: 3130332e35332e302e302f32322d3234203d3e203633383733.roa (hash: EL5dwlPuAnRs0Kif8+4P+OmtMjmZ41AfT1OvSsOeIrQ=) 4: 34352e3131352e3133362e302f32322d3234203d3e203633383733.roa (hash: 6NGp/IxdbJP7Vhpnk9z8nNolHX+E4iOl92U87OVivbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.crl rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 09:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b4:ec:98:c9:2f:18:ab:23:a9:63:dc:62:77:50:7c:00:4a:05:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E740E0191A423D6D9A0908C8B778DD2416F842E Validity Not Before: Dec 20 06:16:55 2025 GMT Not After : Dec 23 09:20:55 2025 GMT Subject: CN=E17C4E48873D112D97636E2195E56C04F30A09C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:ba:33:88:42:2d:58:03:31:84:e7:75:6a: 94:c4:e3:78:6d:1e:ec:f0:aa:eb:ed:2f:39:b5:b1: 0e:15:0f:b3:fa:87:47:4e:ec:9f:46:e5:67:49:07: b0:14:05:64:8c:1d:84:79:92:b9:99:39:6a:db:10: 72:5a:c9:79:fc:57:73:cf:16:65:9e:eb:be:ef:f4: e1:86:19:68:5f:33:46:64:7f:13:bc:61:d7:56:60: 09:f4:c9:59:47:78:4b:94:77:c3:59:d5:c1:fb:80: 68:24:90:11:ae:38:75:99:83:07:d7:9c:bd:e8:0f: 2f:ef:b4:22:7b:b4:9d:b1:9e:a2:26:dc:ac:f5:e8: 4f:6e:bb:5b:26:e6:78:8b:9d:d1:fd:cc:ff:f0:40: 9d:b0:56:6f:8a:66:9e:36:94:56:9c:12:5e:34:40: 5c:ff:71:f7:c3:66:9d:c8:7a:88:60:f9:fe:a0:9c: ac:a5:83:24:08:a8:a1:d9:88:dc:de:d8:b2:ef:0a: 1e:a6:4d:91:06:2c:4c:24:64:a6:85:ab:f7:0b:1f: 29:d3:5f:1a:80:82:6a:e9:17:89:fb:47:ae:fb:b0: ec:f9:29:8a:f8:6c:8d:44:4e:79:f2:68:3e:37:81: ca:88:72:e8:c7:5d:9d:4c:6d:85:38:e2:2f:ec:e8: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7C:4E:48:87:3D:11:2D:97:63:6E:21:95:E5:6C:04:F3:0A:09:C9 X509v3 Authority Key Identifier: keyid:6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bc:02:10:0e:67:2b:b8:8d:08:80:f2:dc:13:45:96:0f:ac: 84:4b:fe:05:9f:f8:10:16:a1:93:5e:8b:66:1f:9f:79:7e:64: 53:47:09:08:f7:2d:99:86:22:b9:17:e3:40:83:ec:ba:aa:8d: 8d:00:29:6e:0a:c6:47:9a:3b:0b:e9:b9:92:72:8d:4f:75:93: 1f:e1:ac:2d:a7:68:9b:e5:4d:0f:95:ec:33:02:18:32:3c:3e: f1:89:35:7b:02:4c:20:a3:ec:5c:95:49:5a:d6:49:80:94:80: 90:70:1c:af:36:a1:d3:f2:a7:7a:85:2f:09:67:bb:e8:e7:40: 79:92:19:ed:a2:50:20:b0:bc:13:99:c4:d2:24:b8:7d:6a:ad: b6:73:52:fa:b8:48:9c:bd:7a:49:56:12:0a:f9:f0:7a:dd:2c: 7a:c8:16:af:2a:e7:71:5b:15:8a:07:e8:40:dd:56:af:71:2f: 15:5b:72:1b:d1:e9:42:45:0a:67:5e:c5:93:06:d0:4b:33:0b: 00:5d:96:99:42:9c:b3:22:80:a5:e1:47:5b:c1:92:01:5d:24: 63:18:3e:9e:da:30:27:e3:a5:f0:fc:4b:65:48:ce:96:30:88: 7c:f9:a5:0d:77:b5:94:01:88:ef:02:c9:18:2f:14:33:8a:62: e9:f1:12:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7TsmMkvGKsjqWPcYndQfABKBT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU3NDBFMDE5MUE0MjNENkQ5QTA5MDhDOEI3NzhERDI0 MTZGODQyRTAeFw0yNTEyMjAwNjE2NTVaFw0yNTEyMjMwOTIwNTVaMDMxMTAvBgNV BAMTKEUxN0M0RTQ4ODczRDExMkQ5NzYzNkUyMTk1RTU2QzA0RjMwQTA5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxroziEItWAMxhOd1apTE43ht HuzwquvtLzm1sQ4VD7P6h0dO7J9G5WdJB7AUBWSMHYR5krmZOWrbEHJayXn8V3PP FmWe677v9OGGGWhfM0ZkfxO8YddWYAn0yVlHeEuUd8NZ1cH7gGgkkBGuOHWZgwfX nL3oDy/vtCJ7tJ2xnqIm3Kz16E9uu1sm5niLndH9zP/wQJ2wVm+KZp42lFacEl40 QFz/cffDZp3Ieohg+f6gnKylgyQIqKHZiNze2LLvCh6mTZEGLEwkZKaFq/cLHynT XxqAgmrpF4n7R677sOz5KYr4bI1ETnnyaD43gcqIcujHXZ1MbYU44i/s6DDNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XxOSIc9ES2XY24hleVsBPMKCckwHwYDVR0j BBgwFoAUbnQOAZGkI9bZoJCMi3eN0kFvhC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzUxZTdhYi1hNjM4LTRmYTAtYmJjYy1iMGY4NTZhOGExNTcvMC82RTc0MEUwMTkx QTQyM0Q2RDlBMDkwOEM4Qjc3OEREMjQxNkY4NDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU3NDBFMDE5MUE0MjNENkQ5QTA5MDhDOEI3NzhERDI0MTZG ODQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM1MWU3YWItYTYzOC00ZmEwLWJi Y2MtYjBmODU2YThhMTU3LzAvNkU3NDBFMDE5MUE0MjNENkQ5QTA5MDhDOEI3NzhE RDI0MTZGODQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy8AhAOZyu4jQiA8twTRZYPrIRL/gWf+BAW oZNei2Yfn3l+ZFNHCQj3LZmGIrkX40CD7LqqjY0AKW4KxkeaOwvpuZJyjU91kx/h rC2naJvlTQ+V7DMCGDI8PvGJNXsCTCCj7FyVSVrWSYCUgJBwHK82odPyp3qFLwln u+jnQHmSGe2iUCCwvBOZxNIkuH1qrbZzUvq4SJy9eklWEgr58HrdLHrIFq8q53Fb FYoH6EDdVq9xLxVbchvR6UJFCmdexZMG0EszCwBdlplCnLMigKXhR1vBkgFdJGMY Pp7aMCfjpfD8S2VIzpYwiHz5pQ13tZQBiO8CyRgvFDOKYunxEgY= -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:24 2025 by rpki-client