This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
File:                     6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json)
Hash identifier:          +CjSplJ0V1jatdMcKUBmacMg4EePRVH2chiJ4ufY5ug=
Subject key identifier:   6F:F2:5B:63:EE:71:6B:77:CB:FC:BF:14:67:DB:7D:A2:19:6D:5B:5A
Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66
Certificate issuer:       /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66
Certificate serial:       591205C200C9DECA68E05B863C46C1A7722C3EAA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
Manifest number:          E0
Signing time:             Sat 06 Dec 2025 03:40:57 +0000
Manifest this update:     Sat 06 Dec 2025 03:35:57 +0000
Manifest next update:     Tue 09 Dec 2025 05:08:57 +0000
Files and hashes:         1: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: gKnLUgmdHJ6REva8tsfwxOnHm7xRrAzK3lKXMILY60M=)
                          2: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=)
                          3: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl
                          rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:12:05:c2:00:c9:de:ca:68:e0:5b:86:3c:46:c1:a7:72:2c:3e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66
        Validity
            Not Before: Dec  6 03:35:57 2025 GMT
            Not After : Dec  9 05:08:57 2025 GMT
        Subject: CN=6FF25B63EE716B77CBFCBF1467DB7DA2196D5B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:ea:77:0c:2c:70:bd:96:d6:2a:32:dd:e9:
                    cd:d0:bd:d5:6e:8f:70:b4:b7:8e:61:97:6f:21:47:
                    7b:71:a0:d6:d9:cb:55:93:36:9b:3c:20:a2:63:2b:
                    90:d7:23:2d:c0:f3:60:37:45:24:83:cf:38:d3:8b:
                    25:ee:43:d4:52:62:09:3a:48:90:9e:bc:fa:0c:e5:
                    6e:39:ed:48:d1:bd:b4:83:10:84:38:53:32:ae:2a:
                    a7:44:ad:94:24:43:8f:69:52:d8:f2:34:de:9e:47:
                    89:2a:ae:8b:a2:e0:d3:3a:c2:6f:1e:fd:e6:71:f8:
                    2e:01:5b:f6:29:4f:23:27:14:65:23:c3:26:5f:cc:
                    16:5b:a6:45:88:9c:90:09:52:28:46:bc:f1:e6:ad:
                    c4:51:d1:21:92:2f:7f:c1:7f:db:dc:9a:47:a8:95:
                    04:77:9a:ab:d2:00:c9:a0:13:e7:eb:e3:7d:4f:08:
                    10:c0:fd:7d:4d:d5:47:87:35:50:0c:4c:e5:33:68:
                    a4:76:b6:f7:62:28:76:28:cb:11:c1:e2:45:26:c2:
                    bd:eb:7e:12:e9:46:e3:0b:00:90:67:88:21:52:6f:
                    c3:aa:03:b8:06:65:3b:7e:cf:00:dc:90:c5:5a:94:
                    41:34:1c:39:41:a7:fb:00:0a:2f:d0:fa:98:a6:af:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F2:5B:63:EE:71:6B:77:CB:FC:BF:14:67:DB:7D:A2:19:6D:5B:5A
            X509v3 Authority Key Identifier:
                keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f8:2b:1d:f5:17:a2:f6:ba:f0:74:91:d9:fb:35:00:f8:8c:
         27:0d:9e:d7:bd:31:c1:63:58:d0:75:77:d3:5a:14:e0:f1:df:
         28:e5:de:f5:28:95:20:62:dc:69:dd:90:e3:10:6f:4a:95:2d:
         98:ef:2e:0d:5d:84:5c:7d:e2:1f:be:c8:5e:dd:f1:31:0b:e9:
         3f:a0:5c:3a:ba:b1:37:ef:84:d4:ee:a7:aa:37:8b:ca:90:43:
         a1:89:64:06:46:d3:39:12:ae:4c:0d:e5:2f:c5:5d:14:bf:79:
         9f:8f:b2:46:db:69:c4:28:ec:68:83:24:35:07:7a:9a:c2:17:
         4f:c8:7d:23:25:4f:e8:11:53:a1:44:d3:df:0c:69:a8:6f:30:
         65:71:62:c6:85:f9:9c:d5:da:13:0c:29:66:d9:51:06:7f:00:
         f2:d4:69:75:3c:9b:5e:f6:6c:53:3b:04:45:c7:d9:d2:43:38:
         fb:0f:68:6d:61:75:f4:42:5f:c2:47:ef:54:ec:a5:18:19:bd:
         6c:a7:39:29:8b:2a:b4:00:8f:45:47:88:b4:7c:54:68:92:43:
         29:a9:24:86:66:b7:10:51:04:70:42:d1:82:aa:7f:cf:31:66:
         bc:d1:00:fd:6a:6d:25:8e:dd:cd:ec:05:9c:ea:07:94:40:c3:
         ac:24:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:57:42 2025 by rpki-client