This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
File: 6B35526165718CDFDDCB202D241332F565BEE7B0.mft (raw, json)
Hash identifier: HL1/doxWXb0XpYJeEVHp2uU+QHU9K2EVXgoyNJadKA4=
Subject key identifier: CA:28:F4:42:9C:F6:78:77:BF:38:6D:F7:D3:67:FB:7D:D5:77:3C:CB
Authority key identifier: 6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
Certificate issuer: /CN=6B35526165718CDFDDCB202D241332F565BEE7B0
Certificate serial: 1B3C95052989010CE06F72CC5967383B8B8CB2C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
Manifest number: F6
Signing time: Tue 16 Dec 2025 08:31:25 +0000
Manifest this update: Tue 16 Dec 2025 08:26:25 +0000
Manifest next update: Fri 19 Dec 2025 12:12:25 +0000
Files and hashes: 1: 6B35526165718CDFDDCB202D241332F565BEE7B0.crl (hash: kZqUNdnLyutdobSoAd6wLMrSqCYX2NFhgAWZhl3FHg0=)
2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: mKIqmd/EOitm2VkjJ4/rdItHB7wxpB5sjP3tcWKMCX8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl
rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 12:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3c:95:05:29:89:01:0c:e0:6f:72:cc:59:67:38:3b:8b:8c:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B35526165718CDFDDCB202D241332F565BEE7B0
Validity
Not Before: Dec 16 08:26:25 2025 GMT
Not After : Dec 19 12:12:25 2025 GMT
Subject: CN=CA28F4429CF67877BF386DF7D367FB7DD5773CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:8f:e4:8f:ab:dc:4a:e0:a6:40:93:ec:58:
8a:1c:6b:cc:cb:7b:61:e1:2a:76:29:b6:1f:e3:1d:
f3:d8:b6:b2:9f:a5:f1:d1:23:da:64:21:db:0d:97:
b8:55:a5:45:92:ee:77:b8:7f:b6:83:12:23:17:47:
a6:24:58:f8:17:a3:7f:ae:53:c4:30:2b:a3:11:48:
31:ee:ca:07:19:43:dd:43:c5:fc:89:e6:9a:24:d0:
99:43:86:dc:8b:10:36:06:77:0a:ec:9e:ec:2e:c4:
69:c7:fa:3e:41:c8:ae:2b:2f:32:f4:af:64:65:3b:
03:76:6e:b8:83:38:3f:8b:ec:c2:16:6c:13:e0:f3:
9f:bd:a1:6d:9c:4f:44:65:68:8c:3b:9a:e3:7d:1b:
b9:7e:fa:2f:e7:3b:0b:8e:35:c0:38:6f:22:a4:10:
2d:57:56:32:c4:e0:5b:71:1b:37:55:42:04:14:d7:
5e:b2:70:63:c3:c4:ea:fc:70:45:2d:0c:c6:88:14:
37:24:0c:f3:0b:cf:e6:b4:16:e2:e6:6d:99:1a:a5:
ad:53:15:9a:2d:a4:29:87:77:c3:eb:59:0d:2c:c4:
aa:55:a2:76:ae:3f:17:00:e5:a3:6b:fc:f5:ab:af:
39:26:72:67:ac:3f:e8:80:52:55:cf:ab:d4:2a:3e:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:F4:42:9C:F6:78:77:BF:38:6D:F7:D3:67:FB:7D:D5:77:3C:CB
X509v3 Authority Key Identifier:
keyid:6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e2:41:1d:ca:8b:07:1a:f9:69:ae:27:bc:b9:18:38:33:55:
4f:a3:75:b3:d0:81:0a:43:22:f8:83:7f:1a:95:8e:aa:cf:3b:
70:1f:1b:d7:16:3f:57:83:a7:44:f1:62:61:ab:2e:2c:2f:e2:
36:66:c7:cd:18:8c:2b:78:ab:c8:39:2e:5c:9a:a7:d8:46:d3:
03:0d:7d:46:0a:ff:0e:8c:cd:37:d9:b1:e6:fc:ef:96:3d:c2:
d6:f1:fe:76:21:c1:80:63:94:40:33:25:c9:9b:54:85:58:45:
b8:b5:63:54:5c:37:d5:90:8c:cb:dc:b0:2c:b4:1f:a4:71:ac:
79:63:95:1a:16:ea:36:26:eb:76:7b:2d:5a:1d:3a:df:c2:24:
93:4e:44:77:d2:7c:9a:e4:d9:6c:87:39:16:12:18:52:11:24:
58:65:c4:3d:3c:07:5e:51:4b:21:83:ff:27:85:c0:4f:c6:ce:
76:b3:0b:62:92:01:af:b8:07:02:4f:42:2c:60:7d:b5:12:17:
ca:ad:e7:65:61:82:f8:bb:8b:25:cb:2c:ba:fb:51:a8:68:53:
76:11:f4:9b:9a:17:3a:df:88:d2:61:36:f2:d2:4f:bc:01:dc:
1f:83:e4:e2:7b:7d:f6:c4:ff:e4:bf:dd:6a:8b:62:1c:d1:34:
12:d9:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 11:20:39 2025 by rpki-client