This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
File:                     6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json)
Hash identifier:          6zGIzv3zfCEz6R33rOO6a+pKEJZFR3hxZp1OZCHBLpM=
Subject key identifier:   E6:9D:19:21:17:47:B0:09:61:DB:F9:83:82:86:D0:21:FB:05:CD:D0
Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB
Certificate issuer:       /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
Certificate serial:       659D9D105F54A69261E609B81D8699078F5F5CEE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
Manifest number:          03FB
Signing time:             Fri 05 Dec 2025 13:01:50 +0000
Manifest this update:     Fri 05 Dec 2025 12:56:50 +0000
Manifest next update:     Mon 08 Dec 2025 23:11:50 +0000
Files and hashes:         1: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=)
                          2: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=)
                          3: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=)
                          4: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: ny0PMq+WRDd5TPmGtBcNPDyChtDoy1Bj6SA+9CCQWFQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl
                          rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:9d:10:5f:54:a6:92:61:e6:09:b8:1d:86:99:07:8f:5f:5c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
        Validity
            Not Before: Dec  5 12:56:50 2025 GMT
            Not After : Dec  8 23:11:50 2025 GMT
        Subject: CN=E69D19211747B00961DBF9838286D021FB05CDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:ca:db:01:c8:c6:48:97:2c:0c:76:5a:d2:
                    06:3e:b1:51:1c:37:a9:d1:c6:5a:ab:4f:a5:9a:cb:
                    e3:e1:80:6c:c0:01:c9:0f:4f:96:de:83:42:37:07:
                    3e:e9:61:3c:b1:20:3f:83:70:3b:6c:96:66:54:09:
                    52:d7:cd:97:0a:27:de:2c:24:17:2a:20:de:e7:79:
                    f8:16:58:46:9b:af:1c:f9:2e:32:4a:5a:80:9e:f7:
                    ab:cd:26:76:8b:cd:b8:5b:74:25:af:a5:a4:49:11:
                    c6:cd:42:1b:c9:25:a5:c7:26:e6:97:c9:8a:a1:f0:
                    c0:e3:d0:a1:42:a7:55:56:ec:58:ea:56:4c:ea:67:
                    da:ba:3b:4f:2f:6f:17:e5:43:45:d4:f6:16:da:bb:
                    0b:8b:06:e7:25:a5:c2:35:25:f8:d7:92:b0:bf:7c:
                    cf:7b:6c:31:9e:07:52:87:a9:07:0d:1c:66:ff:11:
                    36:e1:2e:fa:4e:80:48:c4:32:ba:b7:17:04:73:b9:
                    f1:78:dd:f2:24:67:18:28:ac:8e:bd:9c:ad:33:22:
                    30:8a:db:3c:fc:0a:64:90:43:cc:5e:a1:d7:bf:be:
                    df:f0:67:ad:da:e1:93:1d:b4:02:6b:12:14:cd:3c:
                    b8:e9:8a:e4:59:08:89:56:dc:72:cc:0f:4a:fb:fb:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9D:19:21:17:47:B0:09:61:DB:F9:83:82:86:D0:21:FB:05:CD:D0
            X509v3 Authority Key Identifier:
                keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:8f:f5:62:82:a7:b4:21:dd:5d:4e:85:a8:1f:5d:18:7d:d5:
         1d:18:06:32:e8:8f:87:ee:f5:6a:2b:20:53:b4:53:9c:77:fb:
         e6:f1:09:d1:4b:a6:81:0a:9c:3c:22:fd:28:b8:b1:81:b7:b2:
         49:ac:2a:52:8c:b8:46:fc:a5:c8:28:4d:07:6f:f6:ec:2c:0b:
         70:6b:32:04:1c:c6:af:26:ed:19:5f:0d:db:64:f6:60:c2:b7:
         0b:37:d0:f1:23:0c:28:ed:69:0c:3b:9f:ae:42:ef:e8:59:fd:
         f6:19:40:13:f3:45:36:d8:63:e3:48:19:29:2a:5c:b4:19:ca:
         c0:d6:e6:b3:b0:33:dd:59:fe:27:12:ea:c8:17:09:b3:41:a3:
         23:49:64:77:41:a0:1f:7d:1a:69:77:cb:30:3e:b6:e9:b3:c9:
         9c:16:de:2b:cb:3d:95:18:77:aa:46:2e:cc:cf:7e:80:0f:3b:
         0f:18:6e:75:3d:04:f5:98:07:33:1b:5c:16:10:a6:03:30:32:
         02:7c:12:bc:3a:9d:ec:e8:e8:b8:88:b4:19:8a:4a:54:7c:bd:
         d7:be:c1:7f:b4:77:59:17:c8:e6:b3:b1:55:d1:6e:82:40:30:
         12:50:fb:41:6b:7c:0f:0e:2a:0d:55:3a:96:8b:db:48:c8:aa:
         b1:d1:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:01 2025 by rpki-client