This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
File:                     6C11FF5474BE690E545132237E53030296585D32.mft (raw, json)
Hash identifier:          jEZt1A7A6mG+bxFPuf1N9lV0YPTcNOmSAbAAvrs3G1s=
Subject key identifier:   38:6B:0F:A8:93:80:F4:AE:60:CE:6B:68:51:D6:B5:C9:8C:A4:72:8C
Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
Certificate issuer:       /CN=6C11FF5474BE690E545132237E53030296585D32
Certificate serial:       0C8AC791FD34F3B7883F78ED992F9C5A10D0924C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
Manifest number:          048C
Signing time:             Fri 05 Dec 2025 22:50:49 +0000
Manifest this update:     Fri 05 Dec 2025 22:45:49 +0000
Manifest next update:     Tue 09 Dec 2025 07:27:49 +0000
Files and hashes:         1: 6C11FF5474BE690E545132237E53030296585D32.crl (hash: 9AMismXmI/j93yhrxw2jZukLLEMni64XFtvB/mgdV5s=)
                          2: 3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (hash: bRNZ8nUlgm5rj4Lv4Xn5qKIuBE6nw8cnVSc6VxHCPew=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
                          rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 07:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8a:c7:91:fd:34:f3:b7:88:3f:78:ed:99:2f:9c:5a:10:d0:92:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C11FF5474BE690E545132237E53030296585D32
        Validity
            Not Before: Dec  5 22:45:49 2025 GMT
            Not After : Dec  9 07:27:49 2025 GMT
        Subject: CN=386B0FA89380F4AE60CE6B6851D6B5C98CA4728C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:db:dc:5e:8d:d6:61:b9:34:5f:77:7c:37:
                    fe:9e:8b:6d:d0:2b:2e:f5:26:23:b3:4c:94:a2:6b:
                    8d:20:d3:54:95:47:bb:26:90:e5:8a:e2:4e:eb:63:
                    9f:3a:27:bc:8e:05:4c:98:01:cf:aa:07:d2:5a:30:
                    02:cf:1a:d3:7b:75:f4:91:e5:dc:7f:ec:2d:9a:83:
                    1e:28:45:7b:62:f7:6b:34:40:fc:7a:4a:4e:f8:01:
                    80:45:0f:6b:44:5a:4e:74:ce:83:0b:d7:3f:2d:76:
                    c8:0a:c4:30:5b:2e:60:e1:1f:28:d7:6e:e8:83:b3:
                    63:f9:b0:c2:49:a5:64:96:b0:fa:ee:48:a4:b8:e8:
                    cc:97:e7:60:72:25:3c:44:a4:29:3b:df:09:b8:4d:
                    69:c3:ed:92:ea:50:d6:0b:2e:7a:27:98:62:e8:a5:
                    a3:5a:5e:5b:f3:86:3f:91:0f:7f:2e:d6:91:be:6f:
                    8a:06:46:b4:2a:52:cd:21:26:69:7e:8a:dd:30:40:
                    2c:dd:6a:b1:57:1f:27:88:20:ca:83:8f:f5:05:b1:
                    17:f3:ca:4e:c8:f4:24:1b:9e:7c:16:d6:7c:06:df:
                    bf:ec:4d:af:95:df:dc:67:93:ab:de:fe:e0:89:1f:
                    7c:b4:67:2c:e8:8a:20:dd:f4:3c:6b:e0:4c:41:5e:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6B:0F:A8:93:80:F4:AE:60:CE:6B:68:51:D6:B5:C9:8C:A4:72:8C
            X509v3 Authority Key Identifier:
                keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:37:fa:bc:87:38:3c:64:b0:33:94:35:33:9f:80:30:3f:d1:
         d7:f7:00:88:d8:22:cb:32:76:af:ef:f5:86:79:16:f3:b0:f1:
         df:ea:b0:36:c2:6d:9d:bd:bd:90:37:e5:94:71:b2:7c:bf:cf:
         99:84:fd:6c:b5:ef:91:d3:f3:0f:55:74:fc:21:93:9f:ab:df:
         fd:59:18:77:1f:0c:c2:f2:e6:1e:40:18:39:4c:90:2e:93:5b:
         c4:1a:65:45:85:20:c5:f6:c5:c7:2e:72:0b:c7:3c:b5:16:d9:
         1b:75:37:35:df:39:83:eb:7a:eb:4a:29:d6:ee:f9:dd:9a:64:
         d8:f7:94:35:ad:ce:3d:c6:0c:33:f9:ce:f7:15:1f:14:63:86:
         ee:ea:73:df:d3:08:e0:5c:24:8b:a5:2e:18:be:15:b2:3d:3c:
         ed:e7:fe:b4:82:10:cc:4f:88:2d:17:b7:d7:2f:cc:eb:d7:8b:
         b8:12:4b:08:9e:90:e6:c6:f9:a6:09:76:d2:53:c2:09:ea:8c:
         b3:66:3f:4b:d4:c2:92:7c:7f:e5:4a:65:9b:5b:22:42:15:7a:
         a6:1e:88:a1:b3:30:54:fe:2c:35:a0:9c:b3:8d:0b:89:27:87:
         0f:fb:e7:8c:11:8d:33:76:cb:d8:25:02:15:84:89:4a:15:f4:
         b8:09:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:05:35 2025 by rpki-client