This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft
File:                     6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft (raw, json)
Hash identifier:          thXv7PFmp2oYWPzbu0492sLez8n9Goa6pvKtFJD8+KI=
Subject key identifier:   BA:B6:9A:13:08:0C:C3:42:0C:92:67:B5:D5:74:42:D8:77:3F:F4:A6
Authority key identifier: 6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF
Certificate issuer:       /CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF
Certificate serial:       127B10F2C0591A712DD52EFB5366699DD348128B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft
Manifest number:          022B
Signing time:             Sat 06 Dec 2025 14:22:13 +0000
Manifest this update:     Sat 06 Dec 2025 14:17:13 +0000
Manifest next update:     Tue 09 Dec 2025 22:05:13 +0000
Files and hashes:         1: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: k8S4ytxUaj76beyPRcDHD1fQEEQNVlrOr14776a6SbE=)
                          2: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl (hash: 5S0Ht7oB1NaM9IBo2Nn1mlRkkzzrkLzVR90hNDVcVeM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl
                          rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7b:10:f2:c0:59:1a:71:2d:d5:2e:fb:53:66:69:9d:d3:48:12:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF
        Validity
            Not Before: Dec  6 14:17:13 2025 GMT
            Not After : Dec  9 22:05:13 2025 GMT
        Subject: CN=BAB69A13080CC3420C9267B5D57442D8773FF4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:92:3b:fd:4a:b5:3e:c0:db:b5:36:48:b9:
                    3a:f1:64:c2:1e:22:2d:19:73:49:72:ba:c2:da:90:
                    04:69:00:b6:b8:a7:7d:a1:64:4a:c7:05:72:61:a1:
                    69:a9:f1:d7:5b:f1:82:3e:22:75:2b:84:f9:2a:3b:
                    96:f0:17:93:56:10:fe:17:9f:bc:c8:04:4a:bd:2b:
                    d6:17:25:f7:1b:1b:79:61:1c:03:d7:92:74:c6:49:
                    53:4b:c0:c9:e4:02:f3:4c:7b:11:a7:6e:73:ee:38:
                    4b:02:8a:da:58:0c:4f:04:86:1b:c5:ea:87:61:2e:
                    62:27:fd:c6:06:b5:55:13:ca:f6:cc:2b:ed:e2:08:
                    c6:01:39:ed:3a:29:fd:3a:84:b4:65:62:d5:8a:75:
                    08:55:3e:7d:75:a2:6f:6c:10:6f:47:fa:da:17:e3:
                    38:b3:f2:06:00:ba:54:e2:5e:05:80:db:cf:a5:1b:
                    d2:6a:47:ac:62:d2:e8:1f:89:9a:d8:68:31:78:ed:
                    2a:82:bc:d0:b0:cf:ad:a8:45:29:5c:d4:40:ed:33:
                    99:cd:bf:bb:6b:f7:eb:15:d9:ec:13:18:24:21:16:
                    fe:60:36:97:ca:0b:e0:1f:ee:b6:38:3b:df:98:8b:
                    23:ed:ba:d7:3a:86:a5:0a:65:3b:a8:c3:5f:bc:42:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B6:9A:13:08:0C:C3:42:0C:92:67:B5:D5:74:42:D8:77:3F:F4:A6
            X509v3 Authority Key Identifier:
                keyid:6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:bb:70:2d:10:62:a4:9b:e8:74:59:9b:98:3c:e3:15:63:
         8c:b5:3e:64:de:3c:bd:fe:23:34:66:31:72:be:44:32:99:50:
         fe:22:6b:59:89:87:d9:76:a0:49:96:98:7b:2c:0c:7c:4f:c9:
         2b:05:1a:dd:83:2f:13:31:36:b3:e0:51:59:66:10:7e:a9:75:
         83:94:cb:ad:7b:2f:92:27:4c:09:8a:57:4e:ba:fd:67:13:cf:
         89:43:3b:54:17:da:3c:50:51:86:fc:0b:ec:7d:eb:80:7e:01:
         40:0b:1a:0d:45:a3:34:0c:df:d3:d0:5b:6d:ea:a9:f8:d6:35:
         85:55:c5:83:93:15:26:78:ae:4a:1a:89:88:5a:8c:20:01:8d:
         6c:c4:f7:51:be:a2:97:9b:25:50:98:a3:12:75:48:ae:02:bd:
         36:ff:fc:f4:44:28:fd:49:eb:69:99:77:6e:b1:d7:c1:7a:87:
         e0:58:17:64:b5:0e:91:a3:45:b9:79:f1:f4:b4:8e:af:e0:6c:
         e1:fe:d9:4a:a1:b4:dd:84:26:73:5a:9d:b0:9f:65:82:12:2f:
         b6:d5:d4:41:b6:be:a1:45:16:f5:23:1b:ec:30:ff:3b:c5:ab:
         88:c6:9a:39:c3:b3:25:1c:0f:14:2f:69:31:33:76:b3:e7:1c:
         ea:a3:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:53:48 2025 by rpki-client