This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
File:                     6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json)
Hash identifier:          5E7mh+Xrqy1eNhmD4kOKiPfEdDhmgym1HN9NpcF3xD0=
Subject key identifier:   90:DE:F7:F4:45:7F:75:3B:FD:25:0E:7F:9A:BA:D3:DE:60:7F:E2:0E
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Certificate issuer:       /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial:       4D1DCE0743B9EE94E7D897DF819F2FD93E362125
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
Manifest number:          047E
Signing time:             Thu 04 Dec 2025 15:01:27 +0000
Manifest this update:     Thu 04 Dec 2025 14:56:27 +0000
Manifest next update:     Sun 07 Dec 2025 22:05:27 +0000
Files and hashes:         1: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: Vb5cnFC6Wpj880gEVaQTtTKJLSX6B7dTQEwn1sKGOMQ=)
                          2: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: HwyLb5wrnXQ2TUn7JAl0tKf5RhJTtuv+1v09MJtniBE=)
                          3: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: m2OZ4XMcLl0P7HlEaALJYW+kWpR85aBYZcawB+LS50Q=)
                          4: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: 2iQsY2shTRUgO13U5IiTRn4DaQNWjPojhHqwN4kzhnY=)
                          5: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: wBFqUEBx2DDGu8IYB2Rrh97qGUaa3TXpbQ/WC7MicYY=)
                          6: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: I+1VVYj6jtqkdnEHUu+yoBW+N9Gr17EVEw+bCbgU0gI=)
                          7: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: 7pHManaPZkFlhfeOFk5WWLbfjaz9rFOW48sliqyfNRA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
                          rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 22:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1d:ce:07:43:b9:ee:94:e7:d8:97:df:81:9f:2f:d9:3e:36:21:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
        Validity
            Not Before: Dec  4 14:56:27 2025 GMT
            Not After : Dec  7 22:05:27 2025 GMT
        Subject: CN=90DEF7F4457F753BFD250E7F9ABAD3DE607FE20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:2f:2c:fa:1f:c7:18:7d:01:d3:f7:e8:94:
                    ee:7c:4f:6b:45:a8:3d:6c:47:33:31:93:4f:85:37:
                    58:d6:66:ad:3c:5e:3d:be:45:a8:27:d3:36:4e:86:
                    e4:a6:dc:a7:5a:5c:87:70:d6:b3:c2:c7:fa:80:af:
                    88:82:20:2b:ec:e7:14:11:a2:15:b2:de:67:32:03:
                    31:eb:03:58:d5:fa:77:d2:a8:76:74:29:85:e5:cf:
                    d2:2a:98:0d:22:7b:2c:e0:a1:81:10:92:83:9c:b9:
                    72:27:e1:15:8b:64:b9:3b:62:e9:14:37:1c:c7:9d:
                    30:f2:fb:57:c8:6a:4d:78:93:07:7f:4e:c7:3d:4b:
                    aa:2d:eb:36:45:63:73:48:e8:8e:28:bc:97:8d:84:
                    db:5c:3e:47:38:48:c8:a3:26:3b:18:f8:6c:ba:38:
                    b9:7e:4b:90:43:ee:12:75:9c:06:73:42:64:1d:79:
                    c1:57:77:ea:cd:21:81:18:0a:cc:ea:37:11:6a:f8:
                    d6:27:1b:0e:ef:19:4c:bb:2a:61:ae:e3:8b:fe:19:
                    2b:5a:76:46:53:e5:b7:63:b7:0d:30:fd:cf:a3:01:
                    4d:2b:10:90:60:b6:56:16:aa:31:5b:4c:49:8b:eb:
                    bc:1c:a6:35:19:54:06:12:e1:e9:1d:e2:f2:12:05:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DE:F7:F4:45:7F:75:3B:FD:25:0E:7F:9A:BA:D3:DE:60:7F:E2:0E
            X509v3 Authority Key Identifier:
                keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:eb:e4:6a:66:d1:72:4b:62:7d:89:8a:d9:4a:19:37:42:e3:
         c9:e7:16:6f:9e:aa:18:11:e7:23:f4:31:fb:97:2a:71:89:91:
         d8:91:c2:99:6b:aa:16:29:15:81:c5:d0:e1:5f:21:4a:75:51:
         08:fe:68:01:ad:13:ba:e0:3a:5c:6c:05:1b:b8:8e:81:6e:2f:
         7c:bc:4d:c1:30:5c:c5:0c:78:b6:42:6e:65:91:60:c7:5f:5d:
         b4:fa:6a:90:c0:65:65:5c:d7:d2:f8:08:5f:ca:a7:14:81:e3:
         39:9b:66:da:d7:97:54:5e:e2:c6:45:ab:ab:60:9a:49:fa:93:
         f4:1d:46:18:65:f5:57:ad:75:5e:18:64:14:40:3e:0a:a9:99:
         e1:6b:cc:d7:e4:60:a5:74:39:1e:7d:a5:63:fb:2c:05:85:0b:
         69:d9:56:98:15:10:ac:6a:e7:4f:e7:a1:15:76:ec:0a:55:d8:
         ec:7b:7a:2c:12:53:e5:22:7a:94:7f:6f:3c:47:85:79:63:16:
         f9:c0:50:37:b8:cf:16:7c:ea:0e:0e:f9:40:76:60:f1:d9:b4:
         a3:9a:67:0b:1b:2c:96:d3:c1:95:3d:bf:a1:90:7e:22:23:7e:
         14:1f:e6:50:68:e0:65:9e:b2:76:cf:38:d6:4f:0c:04:7c:9e:
         bb:03:dc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:18:50 2025 by rpki-client