This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
File:                     C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json)
Hash identifier:          PVdJ0QKCtdr2Rz0xAanAqFJ0fVdkPc54kziDS2Z+hP0=
Subject key identifier:   95:12:28:10:35:57:16:E1:FB:3C:4D:6F:28:AE:F1:FB:AC:2C:F3:67
Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7
Certificate issuer:       /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
Certificate serial:       5925861433DB3AD663D2D5930DA43AF80EF69431
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
Manifest number:          0131
Signing time:             Thu 04 Dec 2025 21:21:07 +0000
Manifest this update:     Thu 04 Dec 2025 21:16:07 +0000
Manifest next update:     Mon 08 Dec 2025 07:16:07 +0000
Files and hashes:         1: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: SFRsqHV6I18hZ71hfij7DXv6EYzN2JjqpnvlXhOXFs0=)
                          2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: V1YXnZ8RaD7jZMTPv9sl3RlMQ1DjfCA6C5B7VF3kpxc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl
                          rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 07:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:25:86:14:33:db:3a:d6:63:d2:d5:93:0d:a4:3a:f8:0e:f6:94:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
        Validity
            Not Before: Dec  4 21:16:07 2025 GMT
            Not After : Dec  8 07:16:07 2025 GMT
        Subject: CN=95122810355716E1FB3C4D6F28AEF1FBAC2CF367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:ea:c8:ff:22:2c:82:49:ed:41:17:a0:0a:
                    e6:0b:9b:3c:38:10:9d:75:ac:e2:14:6f:ed:ff:9b:
                    ea:8f:91:6a:8a:f5:bd:09:3a:ba:0f:bb:89:a5:4f:
                    ac:f1:6d:9b:5e:79:8b:e1:9b:61:98:18:93:63:da:
                    81:21:c6:b1:ba:ca:bb:c2:56:d5:37:c3:17:95:78:
                    b4:0b:87:a8:f8:c1:f1:f6:85:db:f0:ee:1f:11:15:
                    22:19:63:81:d5:09:57:3e:98:44:32:a8:d3:15:63:
                    f0:f3:e2:94:91:dd:88:b3:1e:ec:c1:97:cd:5f:0d:
                    15:56:4b:90:ca:bb:59:4e:a7:8f:d9:60:ca:74:18:
                    c6:48:b0:95:af:92:4e:ef:32:ec:ef:8c:99:96:64:
                    02:1a:b7:e9:23:22:13:08:1c:5e:68:ee:13:62:17:
                    44:ce:ad:c4:ce:ee:07:80:a6:ab:94:12:27:8b:4a:
                    b0:50:ac:01:8c:1e:bc:d0:1f:aa:b9:c4:c3:b6:fd:
                    32:32:d8:24:07:68:49:65:04:df:eb:04:40:ee:93:
                    cd:6b:c9:6f:b0:42:a4:80:28:e0:6e:21:99:e4:72:
                    48:2a:d4:60:25:88:88:a6:6d:dc:1c:3a:1a:ea:95:
                    09:ab:d7:5c:8c:22:e8:f5:64:95:c3:dd:ac:ab:72:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:12:28:10:35:57:16:E1:FB:3C:4D:6F:28:AE:F1:FB:AC:2C:F3:67
            X509v3 Authority Key Identifier:
                keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:09:42:fa:a6:d4:08:83:50:16:6b:64:30:d2:e8:13:eb:c6:
         da:48:aa:7d:64:28:e8:32:57:ed:bd:24:1e:88:42:d3:bf:33:
         37:b7:20:e7:09:f3:20:45:14:03:c5:e4:a7:2a:33:be:62:a6:
         89:01:2a:5a:8e:00:20:28:f7:b0:db:4a:bd:69:7b:42:cd:01:
         22:35:22:08:1f:26:0c:e6:bc:7c:80:25:ee:6b:eb:bd:1a:2a:
         bf:fe:1a:b1:8d:ad:55:27:8c:ad:27:69:cf:87:ae:f5:1a:a8:
         10:13:ab:40:aa:81:25:93:9d:15:74:32:58:a0:39:0e:34:19:
         28:57:d7:df:c8:ec:91:c7:b6:98:27:94:6f:9b:be:6c:bb:19:
         8c:fd:2b:67:6e:53:97:cb:bc:bf:84:1e:cd:fe:6c:ce:9a:5d:
         e6:a8:0c:54:71:94:b1:4c:50:52:94:9d:73:5f:7d:de:82:b9:
         32:f2:d9:93:a7:a8:d0:e4:17:3e:8e:85:cb:f3:98:c2:4b:ed:
         39:b3:9e:39:30:bf:43:b3:79:46:d3:e1:fd:77:85:35:ea:7d:
         58:8f:d5:bb:13:b7:98:b4:d9:48:d2:70:ae:76:25:9b:26:6a:
         da:b2:1e:d4:dc:d3:0a:93:22:98:b3:ae:34:c3:ec:08:c1:31:
         1a:34:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:53 2025 by rpki-client