This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
File:                     6886844AB176920850E0984917E9713667D0A025.mft (raw, json)
Hash identifier:          x8JgOu38DgCCglaA8xN9rN/k0TYNQXWR05Qi575R0CQ=
Subject key identifier:   66:27:48:54:7D:1F:98:D2:3A:3F:AE:4F:04:32:AF:D2:05:51:09:1F
Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25
Certificate issuer:       /CN=6886844AB176920850E0984917E9713667D0A025
Certificate serial:       3D38F33D599F6C18590F57F299F5B0DC8E532738
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
Manifest number:          01E8
Signing time:             Fri 05 Dec 2025 05:52:24 +0000
Manifest this update:     Fri 05 Dec 2025 05:47:24 +0000
Manifest next update:     Mon 08 Dec 2025 09:14:24 +0000
Files and hashes:         1: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: oHaPvJW9wiPw6s3g8J+9ty85JMlTJ8ChGgOpurTLBaY=)
                          2: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: 9EmMFN9j1NU/nvOY8wiv0XwdZICwg892ouExOsJJt8g=)
                          3: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=)
                          4: 6886844AB176920850E0984917E9713667D0A025.crl (hash: G86qlwSF6x4CmlQiqEBm3vZD5mMz/p+N+MOLmKSPplw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl
                          rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 09:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:38:f3:3d:59:9f:6c:18:59:0f:57:f2:99:f5:b0:dc:8e:53:27:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6886844AB176920850E0984917E9713667D0A025
        Validity
            Not Before: Dec  5 05:47:24 2025 GMT
            Not After : Dec  8 09:14:24 2025 GMT
        Subject: CN=662748547D1F98D23A3FAE4F0432AFD20551091F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:bb:bb:a7:36:83:ce:10:dc:ac:a9:c4:49:
                    0c:e8:fc:88:b6:03:94:7d:e8:26:a0:cd:fc:79:9e:
                    70:fb:c0:e4:3f:d7:c2:43:47:d6:2b:2f:04:62:bb:
                    be:a9:d5:69:33:4c:6e:54:58:99:9e:a1:89:bb:91:
                    bb:17:0c:09:44:54:20:29:94:d8:0f:22:01:e4:7e:
                    ca:67:89:0c:eb:ef:11:ae:2a:73:ad:87:51:8d:77:
                    4d:f5:6d:42:02:0d:82:ea:df:82:9f:87:fb:9c:e6:
                    af:25:0b:52:65:2a:a4:8e:7b:de:be:cb:a2:a7:88:
                    de:f9:0d:ac:12:ea:ca:89:a8:af:84:b1:2e:cc:5c:
                    93:8f:06:33:96:77:7b:41:81:b2:a9:1c:57:a7:1b:
                    b7:dc:a1:c2:2c:a8:31:28:d7:3a:6a:4a:99:bb:2a:
                    e0:e5:76:83:07:bf:1f:b6:42:83:b2:6d:36:a5:ed:
                    f8:4e:3e:7c:23:ae:1f:5b:df:40:b9:44:7c:bb:ab:
                    66:90:1f:1c:20:5b:ae:97:64:91:97:d2:23:c8:4f:
                    b8:f6:88:ec:92:92:a0:96:2b:5e:65:e4:1d:9d:54:
                    37:30:eb:45:02:ea:6c:dd:2f:7b:5d:22:6e:55:cf:
                    2f:a3:72:53:d8:71:d2:d0:56:ff:10:5e:97:64:5b:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:48:54:7D:1F:98:D2:3A:3F:AE:4F:04:32:AF:D2:05:51:09:1F
            X509v3 Authority Key Identifier:
                keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:72:51:37:f8:28:2f:d9:89:ce:91:5b:d0:13:56:a0:57:36:
         cb:9a:3c:5f:4d:bf:81:3f:d0:01:87:78:1b:5e:2a:ea:1f:25:
         61:16:ce:96:38:72:eb:34:ff:20:9a:10:a7:36:a6:37:14:ad:
         17:c4:18:5d:db:78:61:98:6a:00:91:8b:f5:47:53:0c:15:e9:
         ea:4b:d7:db:e0:ef:a9:ec:0d:13:dd:bf:d3:1e:ba:1a:70:5c:
         8c:11:50:90:1a:9d:75:63:e5:d6:37:06:e8:ef:89:6a:23:73:
         a3:e2:8a:30:d8:0c:b8:18:34:fa:2e:6e:db:7c:48:64:f9:aa:
         e0:40:44:e0:20:d3:20:ce:99:b4:40:01:8f:f0:dc:65:3a:63:
         bf:90:af:12:f2:ad:fa:75:10:0d:04:14:3d:af:6c:59:72:fd:
         cc:a2:44:6e:2c:eb:45:18:1d:8a:93:ff:40:b4:73:92:d4:11:
         7a:8f:a0:7c:4c:4a:20:39:6a:65:bd:2f:ee:49:79:d8:73:ca:
         64:27:fa:a4:82:f2:7c:a2:e7:54:4d:b3:bd:8b:45:75:48:a3:
         5d:2a:c7:34:43:ea:c8:dc:4d:72:18:74:22:75:91:fe:94:a7:
         30:73:ee:1f:d6:6a:50:da:4a:f5:11:39:ef:61:c1:d6:f7:1b:
         8f:26:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:41 2025 by rpki-client