This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
File:                     66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json)
Hash identifier:          ZH6eKsU/coUsgk0KTfNp6kNVTkHp5zPJoB84jz96uic=
Subject key identifier:   1A:1A:82:2A:2D:E7:C8:4E:4F:1C:FC:90:D4:87:68:83:98:A5:08:60
Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7
Certificate issuer:       /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
Certificate serial:       6EB28A8576D8FAA141E31BC035F75590A82B2E73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
Manifest number:          0286
Signing time:             Sat 06 Dec 2025 02:42:23 +0000
Manifest this update:     Sat 06 Dec 2025 02:37:23 +0000
Manifest next update:     Tue 09 Dec 2025 10:17:23 +0000
Files and hashes:         1: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=)
                          2: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=)
                          3: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: 4ldfA6TkRgNJB33FaeubKBXppFusu2BtbFZE3Y11Rqc=)
                          4: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=)
                          5: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=)
                          6: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=)
                          7: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=)
                          8: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: FBKftcy5u8WLMlpAhKDN3+/qY75MgpkD76kkG1AgdUE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl
                          rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 10:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b2:8a:85:76:d8:fa:a1:41:e3:1b:c0:35:f7:55:90:a8:2b:2e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
        Validity
            Not Before: Dec  6 02:37:23 2025 GMT
            Not After : Dec  9 10:17:23 2025 GMT
        Subject: CN=1A1A822A2DE7C84E4F1CFC90D487688398A50860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:45:56:d4:08:56:ba:65:ea:c1:90:9a:a1:
                    70:3a:b1:c8:88:43:85:c7:cd:c1:d3:f6:80:ca:46:
                    53:5f:73:ac:63:16:38:47:67:bc:f8:16:f9:45:72:
                    d9:62:56:91:ca:24:70:ed:2d:69:d8:28:9d:15:b2:
                    6b:06:60:69:88:69:d0:69:b6:16:f6:f6:bf:da:9a:
                    0f:3b:ed:db:48:9b:f5:79:b5:56:f4:49:8f:69:0b:
                    29:88:f6:72:8b:20:f9:7f:f0:e5:62:c8:78:1c:40:
                    67:52:3d:96:c9:2d:e9:25:8a:4b:01:97:60:dd:88:
                    a0:c9:cc:0a:2d:91:97:7b:20:11:76:9f:19:de:5b:
                    8f:a8:f5:e1:5c:2c:7c:b5:cc:a0:59:e5:3a:9f:54:
                    d3:3a:09:2f:cf:66:fc:e7:79:c8:2c:14:fe:46:73:
                    6a:0e:6d:2c:57:25:3a:3c:82:ee:c4:10:82:44:c2:
                    be:42:c9:19:27:38:21:74:41:68:37:24:86:fb:54:
                    79:e7:4c:de:b5:d6:e7:bd:1b:c4:b5:79:a4:47:cd:
                    cc:06:0f:af:96:fc:9b:e4:e8:5a:da:8e:69:b5:bc:
                    01:fe:eb:d9:8b:ff:94:b3:15:a2:21:6b:b4:ee:1e:
                    94:a1:8d:57:23:e5:6a:ac:7e:32:3b:bf:2f:89:9e:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1A:82:2A:2D:E7:C8:4E:4F:1C:FC:90:D4:87:68:83:98:A5:08:60
            X509v3 Authority Key Identifier:
                keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:2b:f6:64:8b:84:7c:ea:e5:4e:20:81:7a:a1:c2:29:1c:
         ff:e6:5b:01:f3:f2:48:4c:23:b3:d5:85:a0:44:75:08:66:29:
         b7:cc:ad:15:d6:b1:7d:ca:25:71:94:cd:3d:87:eb:b7:69:8d:
         78:eb:cf:53:04:ca:4c:d7:7c:65:60:04:bf:1c:50:5e:fc:57:
         2d:79:b8:9f:af:06:67:68:ca:f7:14:74:67:d9:3f:95:05:e4:
         cd:60:0c:be:54:4e:f0:eb:cf:3f:21:05:30:88:b7:dd:4b:59:
         e4:27:48:c5:e1:6d:6b:e7:13:bf:5c:29:52:72:5e:59:1b:62:
         5f:7a:b7:4b:db:76:c0:63:95:7a:dd:81:1d:4a:85:7b:5e:c7:
         45:99:d3:c7:78:18:92:50:be:5d:87:9c:92:18:d1:22:f5:d8:
         72:6c:bc:80:b3:1f:83:bf:18:09:db:48:be:e1:f7:f2:8b:38:
         3c:cb:9f:9c:c4:8c:bb:c6:1a:3e:1f:dc:e1:d2:20:a5:0e:b5:
         c1:ae:9a:e2:c9:9a:39:93:bb:4c:dc:c4:57:44:a6:08:83:39:
         76:67:c0:47:c2:fd:df:d1:2e:39:91:69:e5:4c:e5:90:a4:25:
         46:39:3e:96:eb:aa:c9:1e:63:87:38:84:0c:7e:14:47:46:7d:
         5d:08:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:14:01 2025 by rpki-client