This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
File:                     6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json)
Hash identifier:          FPp8lZXn7RPTQBfW7YNFLosKW8TUTF5OASMgFjLqlZU=
Subject key identifier:   B7:69:B3:ED:36:1C:F3:A4:0D:24:A0:69:70:74:3E:82:97:77:7C:B8
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       12FC23F54CCD237F19DF135F3C21CB6F1099AFD7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
Manifest number:          029E
Signing time:             Fri 05 Dec 2025 03:31:34 +0000
Manifest this update:     Fri 05 Dec 2025 03:26:34 +0000
Manifest next update:     Mon 08 Dec 2025 04:29:34 +0000
Files and hashes:         1: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY=)
                          2: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: M2pyi/IMF/9bDLHyO64naWXcT6UxKr+6hMI7b6iDcRY=)
                          3: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: PpAfKuTLC2LZflDGFc6yX8hZy8hNL9DWJF0ArhdPsJs=)
                          4: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: fJ4g0K772WVp53tZH6Cr6nPqsZvGnVS3VfLvicif+Ms=)
                          5: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: kIaQGWL5YUwAplbYF3rxqdRNmuWMqoQK88/zSxpS0Qk=)
                          6: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: C/DytbgqMAcV6L3L4owC+Z+i6iFIBWpBJ8e+cbQw6Zk=)
                          7: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: +1/NKTo1zjk1P1ZAkPLDaaCsjoolxhbaib5j0otnVl8=)
                          8: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4=)
                          9: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: 7skPXD0GcBP0y8K0CJN6k0vAhi8+IRcH6Kcm8uU8vVs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 04:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fc:23:f5:4c:cd:23:7f:19:df:13:5f:3c:21:cb:6f:10:99:af:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Dec  5 03:26:34 2025 GMT
            Not After : Dec  8 04:29:34 2025 GMT
        Subject: CN=B769B3ED361CF3A40D24A06970743E8297777CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:de:e8:98:ec:30:6f:a1:13:3e:93:cc:3d:c6:
                    5e:3a:57:63:3a:3f:24:61:8f:4f:c3:33:11:dd:c3:
                    d0:fa:2e:38:48:9d:b9:96:ba:ed:fb:28:ef:57:5f:
                    ee:14:c8:b1:76:7f:7e:3f:2c:35:92:c6:68:b1:6f:
                    84:6a:82:75:b9:21:6e:8e:d8:a1:9c:d2:b8:bc:77:
                    2a:f6:f2:df:18:fe:09:c7:f4:c7:3d:a4:62:62:c9:
                    fe:65:84:3b:7b:e6:fb:a6:a3:a1:5b:89:d6:f3:c2:
                    30:cd:54:5b:bf:60:30:70:fa:9c:03:f0:40:4c:8d:
                    af:9a:d2:35:e6:8e:92:68:bf:9b:ec:6d:12:08:49:
                    80:3c:d2:37:94:e5:7c:dd:93:60:7d:f0:4a:30:cb:
                    65:6f:10:f8:9b:9c:19:17:3e:cd:4f:26:6b:d8:7b:
                    d1:11:5b:fa:63:b2:49:44:98:f5:0f:74:2e:cd:c0:
                    ac:92:f2:63:76:56:4a:19:d4:28:5f:2d:03:54:91:
                    59:b7:84:a8:b8:ff:ea:03:c7:4e:fc:5d:b2:5c:0f:
                    11:a9:d1:1f:95:1b:e0:0a:8c:8e:f3:a9:11:d7:c7:
                    e3:87:b2:1b:af:a1:4c:4e:8d:36:f8:aa:ec:9c:b9:
                    2d:dc:ce:c2:fc:54:36:c4:64:cc:d4:30:08:ab:13:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:69:B3:ED:36:1C:F3:A4:0D:24:A0:69:70:74:3E:82:97:77:7C:B8
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:54:7e:e3:ef:41:3a:e9:e6:2a:02:87:31:1b:0d:b2:7a:84:
         54:78:71:00:06:00:20:9e:b8:5c:7d:58:ef:d4:97:11:bc:53:
         7a:f8:a3:c1:0d:29:e4:b1:d5:d6:9f:a3:86:5f:c0:d4:87:4d:
         10:99:18:29:f3:3d:60:4b:94:b6:93:63:69:98:b4:00:82:dc:
         e6:71:c7:ae:46:68:83:d0:63:42:83:b0:b0:02:2b:3f:7b:61:
         99:83:7b:5e:85:b7:1c:8a:78:55:67:63:6b:69:9f:de:be:82:
         d1:30:48:fd:30:c4:da:e3:a8:d4:8a:d4:8f:05:c2:fe:0c:f6:
         c9:9e:dd:b2:34:7d:28:8e:62:28:3f:e7:72:9c:cb:7e:ec:63:
         4d:af:ce:7e:be:10:0d:f5:2c:07:53:f5:71:4f:a2:d0:e1:82:
         13:e8:62:b7:a4:ea:22:31:8c:5e:ad:4e:0d:a2:cc:ce:e0:0c:
         ab:2f:65:63:a2:87:a7:60:2a:c7:dc:15:89:54:85:d8:86:18:
         39:e0:13:89:2e:62:28:bd:63:23:c4:c2:28:cc:79:3a:50:48:
         c6:85:ce:e4:10:1f:cb:7d:48:51:81:a1:a7:2b:3e:db:a1:d8:
         35:8a:78:d0:7c:39:81:70:f1:1d:27:20:16:96:c8:84:a3:8c:
         43:72:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:12:30 2025 by rpki-client