This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft
File:                     6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json)
Hash identifier:          NDp4BtPgBfGDh9Wzbmgcjm4Ui2gxvXyaA/m0cWWr97w=
Subject key identifier:   B9:6F:3A:14:E5:96:38:70:23:E8:2E:15:BD:4C:DB:BA:2E:CC:EC:62
Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11
Certificate issuer:       /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11
Certificate serial:       64F5D9BF52C0388318446814AB8001D101F247B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft
Manifest number:          025F
Signing time:             Fri 23 Jan 2026 22:50:56 +0000
Manifest this update:     Fri 23 Jan 2026 22:45:56 +0000
Manifest next update:     Tue 27 Jan 2026 08:27:56 +0000
Files and hashes:         1: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: //+o8fHe6E0loKsGSmkgVyIWp7gWm5okCpSCAbrnfh4=)
                          2: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: 53qcM+ccBLtC4itMx3/USg0Fyqx/+gFM4oGLTxMTBcU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl
                          rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 08:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f5:d9:bf:52:c0:38:83:18:44:68:14:ab:80:01:d1:01:f2:47:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11
        Validity
            Not Before: Jan 23 22:45:56 2026 GMT
            Not After : Jan 27 08:27:56 2026 GMT
        Subject: CN=B96F3A14E596387023E82E15BD4CDBBA2ECCEC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:47:ad:36:97:e6:9a:97:7d:53:68:9f:49:
                    0e:db:70:97:16:88:65:63:f8:9a:9c:6a:8d:6b:29:
                    25:ee:fc:2a:a1:b8:66:2a:17:39:f8:7c:4e:d3:f3:
                    34:39:1e:e4:d2:4e:72:c2:1f:bc:97:8e:b7:c6:07:
                    4f:25:6f:26:fc:0b:70:7d:da:71:3b:f3:e3:39:68:
                    ce:5b:49:d5:19:69:0f:ff:05:79:4b:d9:77:4b:64:
                    19:df:d8:04:8a:c0:f2:4d:21:41:ad:db:f8:af:b8:
                    91:cf:58:05:dd:10:2a:07:68:35:68:02:08:1a:18:
                    b6:1a:3f:68:2f:00:23:5d:e6:fc:20:69:10:27:b9:
                    94:6d:11:65:27:b9:72:f9:48:71:44:1b:d8:70:79:
                    6b:c3:51:f8:be:02:c4:71:ed:d4:30:03:3d:dd:b4:
                    38:19:9b:8b:cd:fe:ba:4a:70:46:5b:f2:5b:e3:05:
                    62:ca:97:e2:bd:b5:3d:6a:c9:86:fd:d9:d3:86:17:
                    20:30:37:5a:86:70:c1:7f:eb:0f:b2:10:4a:21:14:
                    ca:6f:40:43:0f:fa:81:56:3c:3b:93:fa:33:f0:c7:
                    db:0e:d0:2c:f0:63:65:e7:e9:3f:d3:e0:76:f0:10:
                    56:d0:d9:de:7b:d6:7b:62:2c:e9:5b:62:7b:2f:09:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6F:3A:14:E5:96:38:70:23:E8:2E:15:BD:4C:DB:BA:2E:CC:EC:62
            X509v3 Authority Key Identifier:
                keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:16:c4:b1:57:7f:4e:35:0d:e1:82:94:f8:ec:25:63:a3:
         ea:7b:64:91:f7:53:f7:19:00:ac:e0:f7:3e:f5:1d:06:4c:fa:
         05:ea:9a:65:3e:46:93:b7:0f:58:96:83:88:1a:6a:b5:74:b3:
         33:8d:ce:b9:b7:b0:20:36:63:30:63:d9:7e:1d:e3:e2:24:85:
         58:8e:43:f2:f9:20:36:9d:ee:a6:a8:a5:cb:76:30:1a:06:f6:
         98:2c:e5:a1:92:11:e4:21:b1:bd:4f:99:c0:0f:64:8d:50:94:
         d5:76:de:34:75:c4:01:44:0c:50:11:1a:c4:fd:6c:60:3b:4e:
         a9:ba:bb:22:99:e1:4c:07:f2:64:04:c4:d7:4b:68:35:06:d7:
         32:f4:e5:b9:df:83:99:38:c9:48:ff:f9:d9:ad:a3:11:18:70:
         fd:23:62:d5:78:fa:db:f4:c2:59:ec:b5:0d:b3:61:29:03:e1:
         5d:63:71:99:06:70:c2:31:31:4f:35:9a:5a:00:18:57:66:5d:
         b5:52:c9:1a:97:b5:64:de:04:32:eb:99:d0:1e:f4:44:85:21:
         38:d7:f7:8d:f3:df:b4:b2:9f:7a:29:ae:fa:61:c2:ae:27:21:
         b0:82:77:08:6a:fd:4c:35:72:d6:f0:5b:b2:21:3b:3b:11:96:
         3f:43:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:37 2026 by rpki-client