This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft
File:                     B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft (raw, json)
Hash identifier:          Ef/C+XF433I6TGWtN7hpXLHiAMsnrbmvxtO80TWhnCg=
Subject key identifier:   D0:25:9B:F4:56:F8:12:3B:BC:5E:B0:2A:F5:DC:15:3B:98:6C:AD:FE
Authority key identifier: B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B
Certificate issuer:       /CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B
Certificate serial:       70510CC6E2EB68BAC11EC38A71C6066839F5214A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft
Manifest number:          04B8
Signing time:             Sat 06 Dec 2025 03:52:10 +0000
Manifest this update:     Sat 06 Dec 2025 03:47:10 +0000
Manifest next update:     Tue 09 Dec 2025 13:03:10 +0000
Files and hashes:         1: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: NqObVqd5RFS36G2zVhBk4F5X4p1gzlJwj4/LivREaBM=)
                          2: B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl (hash: NmnOPvEw1nYyMDKT1HHhywQaycBiGHbDrqBPbABcIQ8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl
                          rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 13:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:51:0c:c6:e2:eb:68:ba:c1:1e:c3:8a:71:c6:06:68:39:f5:21:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B
        Validity
            Not Before: Dec  6 03:47:10 2025 GMT
            Not After : Dec  9 13:03:10 2025 GMT
        Subject: CN=D0259BF456F8123BBC5EB02AF5DC153B986CADFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:09:30:95:63:f8:98:cb:ba:ff:a0:83:5f:
                    d5:b3:15:23:40:1e:a4:5e:b2:38:85:84:c4:77:7d:
                    9e:e8:cb:c0:c0:f8:5e:bf:02:00:f5:12:29:77:78:
                    c0:d0:69:99:04:ef:61:7f:8d:09:34:fd:3f:7f:c8:
                    a1:2f:97:1d:7f:a2:dc:81:7d:97:03:46:a3:94:7c:
                    2f:09:9a:72:48:54:ca:41:78:62:8b:11:03:9c:10:
                    d8:31:75:ab:87:76:31:07:2e:2a:8b:d5:6d:84:45:
                    bf:8c:72:9a:1e:2a:17:6f:f7:f9:8c:fb:5a:44:6f:
                    44:4d:10:18:9c:d0:36:1d:38:ef:86:e6:32:33:be:
                    6e:a9:cf:09:12:78:93:15:cc:4a:aa:13:e9:e2:97:
                    4e:55:4f:e3:45:6b:9e:f9:cf:9d:f7:29:b7:dd:6c:
                    1a:b6:cf:01:6c:7c:91:1e:b3:25:c6:55:a6:b0:1c:
                    75:87:fd:28:55:2a:b7:2c:9e:42:ab:d0:25:ae:02:
                    9e:18:f7:cf:d8:fd:73:c7:c3:ca:38:eb:6c:bc:80:
                    06:c3:c8:79:41:90:91:01:b1:92:79:b4:56:22:1c:
                    07:75:e2:cf:cf:4c:95:70:22:3a:ef:d1:f9:4f:8b:
                    ce:1d:0e:db:01:bd:cd:45:a0:86:38:97:39:27:b1:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:9B:F4:56:F8:12:3B:BC:5E:B0:2A:F5:DC:15:3B:98:6C:AD:FE
            X509v3 Authority Key Identifier:
                keyid:B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7a:24:5c:7b:33:cd:fa:bc:a5:0d:cd:d5:73:fd:ae:17:aa:
         10:d7:6e:7d:23:f6:9f:37:55:ed:d7:57:44:a1:c3:eb:7c:36:
         38:5c:e8:76:9d:b8:7e:11:b8:94:e2:a0:b0:f2:f7:8f:8f:f4:
         95:34:fe:2e:4c:8a:a6:ec:66:83:e6:cb:2d:80:6d:46:e6:0e:
         f9:64:ed:74:16:cb:e6:f7:5f:d5:28:b8:99:3d:93:eb:55:5c:
         e0:3d:3a:07:0d:31:78:cf:e9:b9:cf:fc:2e:3f:c6:d0:9c:ca:
         ef:dc:38:2c:2c:08:d1:c1:c0:1a:08:98:10:45:1c:b9:df:4f:
         17:ae:09:ed:7d:d7:8a:09:12:ca:1d:26:f3:92:c1:2d:c6:84:
         23:d1:ca:cf:45:5c:e5:13:6a:bf:39:fe:6c:90:4f:25:ce:f4:
         31:35:3f:7c:c8:68:77:3e:48:c7:6d:91:07:81:b8:e5:be:01:
         01:db:8c:9c:f5:77:f8:ce:25:63:e6:2d:ce:5f:b2:96:96:9c:
         cc:86:1d:26:3c:2a:6b:50:4f:dc:f7:c3:54:00:ec:b7:cc:b8:
         57:dc:7f:4c:58:f3:dd:53:cb:fa:a6:dd:9b:4e:ab:39:19:b0:
         2e:e9:c4:e8:97:0e:73:67:f0:27:c4:ca:82:1b:71:7e:ad:db:
         0a:4a:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:59 2025 by rpki-client