This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
File:                     6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json)
Hash identifier:          cbzV2w5bmgKO6fc7Afrd6meXN78CHkhNyfA1e2gux34=
Subject key identifier:   42:22:A1:E5:F2:C6:66:8E:79:88:0D:49:82:6C:AE:DA:4A:F1:0E:19
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       053157948277B0DCF4DDEC4CEAD5651DF39825C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
Manifest number:          0533
Signing time:             Tue 16 Dec 2025 04:20:55 +0000
Manifest this update:     Tue 16 Dec 2025 04:15:55 +0000
Manifest next update:     Fri 19 Dec 2025 10:49:55 +0000
Files and hashes:         1: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=)
                          2: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: So2nOlSSzUaMKkEBBnhNYamU0ElW07kiXuEs3QCMI5U=)
                          3: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=)
                          4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=)
                          5: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 10:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:31:57:94:82:77:b0:dc:f4:dd:ec:4c:ea:d5:65:1d:f3:98:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Dec 16 04:15:55 2025 GMT
            Not After : Dec 19 10:49:55 2025 GMT
        Subject: CN=4222A1E5F2C6668E79880D49826CAEDA4AF10E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:18:b9:34:38:80:81:3f:36:87:25:ee:22:
                    db:9c:2a:e7:01:2f:36:24:43:b9:b9:65:0b:40:4a:
                    83:7e:30:0b:20:02:2b:5a:6b:b9:30:8c:e3:58:bd:
                    00:26:bd:a4:d2:a7:95:ca:04:92:41:71:b8:45:40:
                    2a:01:28:bf:48:25:43:bc:c2:75:2d:26:d2:50:e8:
                    b4:71:fd:87:c1:5d:16:c5:ce:fe:8f:4c:77:d6:b2:
                    08:10:44:e2:ce:2c:30:7a:aa:8e:db:ce:7d:01:ec:
                    75:84:89:88:c0:d4:7b:77:a6:ce:d4:ae:da:f8:9a:
                    65:87:ad:14:ef:8d:4d:c7:e6:3e:04:33:8e:4e:3f:
                    28:92:2a:3f:73:ac:a0:00:70:dd:08:fb:db:85:b6:
                    46:1d:4d:ec:6d:a1:59:18:e4:47:de:73:34:9f:67:
                    cf:81:6e:81:9b:6e:e2:21:31:bd:e6:99:f6:13:68:
                    d1:76:ff:be:11:21:8d:8d:6e:d0:75:67:ca:be:8c:
                    ee:10:d1:fa:38:87:20:d8:49:0f:f5:18:1e:b0:cc:
                    c3:3b:1c:0d:bf:31:f8:3f:dd:ab:67:69:f8:31:ab:
                    f6:f1:fb:1b:12:7a:73:7b:c4:ea:d7:68:4b:58:96:
                    1c:d0:14:1a:9b:61:50:0e:ca:43:9e:55:99:4c:af:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:A1:E5:F2:C6:66:8E:79:88:0D:49:82:6C:AE:DA:4A:F1:0E:19
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:0b:c7:98:d3:06:6e:ee:ad:9a:29:a1:8c:ef:5f:eb:03:16:
         50:ac:f0:e8:95:a5:dd:95:b4:75:4b:59:f2:a3:34:0e:a2:cf:
         42:72:f7:d0:6d:90:04:91:74:ea:b2:e8:3e:ca:cc:56:12:ac:
         b0:78:5a:26:52:e1:06:75:3b:ba:24:bb:dd:43:c6:8e:82:9c:
         be:ed:93:6e:b7:db:d8:64:0d:2f:60:b0:1d:c3:be:de:db:97:
         b8:77:11:47:0e:a7:63:e1:76:43:67:e3:9e:cf:9d:b6:70:da:
         0d:78:95:cd:f5:e6:f2:b7:0e:9a:69:0b:e4:67:60:e8:5d:2f:
         d3:ab:1e:32:d5:f8:e9:eb:ac:b1:16:e0:18:20:3b:1c:64:01:
         8c:ce:9b:0f:66:5a:30:de:59:de:21:fb:50:0e:4d:db:69:bb:
         0f:0b:a4:50:20:8f:52:b9:87:43:03:8a:58:2c:0f:9a:9a:01:
         fe:4b:c8:05:61:6e:ed:73:b3:41:54:1d:2a:35:31:17:29:8b:
         04:08:e7:ff:ee:e2:12:25:56:ed:e2:9d:db:cb:91:a5:e0:3d:
         67:f3:e9:95:78:fd:8b:ee:c4:92:6d:e0:8e:41:f2:46:fd:de:
         93:dc:7b:bb:d2:4e:98:26:0f:a9:be:4d:65:3e:3b:b4:84:97:
         22:94:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:44:16 2025 by rpki-client