This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft
File:                     63A008B749DB87C773CA05C5DF448BCA5357BB01.mft (raw, json)
Hash identifier:          owGyUPYza8/hfw2n2KrTyCScsYWrStE191PKqLxRhgw=
Subject key identifier:   00:6E:6A:AA:77:6C:C0:AE:31:A3:FD:88:06:D8:A8:FF:E3:EB:B7:54
Authority key identifier: 63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01
Certificate issuer:       /CN=63A008B749DB87C773CA05C5DF448BCA5357BB01
Certificate serial:       626B4B6D68EE05E79F58A618818492ED5246A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft
Manifest number:          033C
Signing time:             Sat 06 Dec 2025 16:42:17 +0000
Manifest this update:     Sat 06 Dec 2025 16:37:17 +0000
Manifest next update:     Wed 10 Dec 2025 04:10:17 +0000
Files and hashes:         1: 3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (hash: Tji5eLarsbsUV7OPBAVD/9yKk9GUehEwx/Ji4JAvY3U=)
                          2: 3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (hash: 16U5ENt1Fx7mXMkbXyDTcuDuUq+dB5XA/NthjrW4JLc=)
                          3: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (hash: eZnK2eskkU6AREBsLNvr+wfApR29iHfhfxaLS8JDmM4=)
                          4: 63A008B749DB87C773CA05C5DF448BCA5357BB01.crl (hash: rH2PMCgJIoPG+rbwXdBpejNDjuj8EFm/cq1GUXXJ1og=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl
                          rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6b:4b:6d:68:ee:05:e7:9f:58:a6:18:81:84:92:ed:52:46:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63A008B749DB87C773CA05C5DF448BCA5357BB01
        Validity
            Not Before: Dec  6 16:37:17 2025 GMT
            Not After : Dec 10 04:10:17 2025 GMT
        Subject: CN=006E6AAA776CC0AE31A3FD8806D8A8FFE3EBB754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:8c:53:64:28:e5:0e:ed:0a:04:6f:4a:c9:
                    91:9a:0a:a9:81:c6:e6:b9:9d:4b:f8:48:01:5d:cb:
                    57:35:28:ec:fc:8e:db:39:a3:89:c8:a2:39:0a:79:
                    4c:82:97:99:2a:fc:0d:cb:9e:95:05:99:70:f7:8d:
                    51:32:26:fa:6a:e1:4f:ef:b0:96:81:de:10:bc:92:
                    aa:d4:c3:55:98:ec:25:13:e8:70:5b:06:9c:6e:18:
                    9c:ce:83:3a:3c:05:c3:02:4a:da:a3:5a:72:63:4c:
                    58:cd:8b:e3:01:b0:0c:61:55:5c:f3:2e:33:ce:11:
                    ed:98:c7:06:0b:e0:a0:6c:05:24:69:2b:43:b8:2a:
                    a8:7b:2c:87:1b:9c:ad:91:bb:f6:c2:96:1e:5d:bb:
                    d6:39:cf:e8:fd:92:54:3f:66:1b:ef:b3:c1:d6:2e:
                    af:a7:cc:68:02:aa:5b:f2:c4:ad:6c:cb:43:cb:90:
                    f0:73:bc:3d:88:a0:fe:4b:2b:f8:7b:c7:a7:48:56:
                    d2:4a:09:ac:c1:2b:44:2a:a7:93:da:62:29:ce:4d:
                    77:55:ee:52:8e:a7:55:57:d7:a6:c3:f0:72:c6:f3:
                    ba:10:de:70:d4:25:f1:56:5a:2d:18:db:c8:83:df:
                    f4:7b:51:4e:7a:94:eb:f5:de:23:13:72:7f:08:3c:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:6A:AA:77:6C:C0:AE:31:A3:FD:88:06:D8:A8:FF:E3:EB:B7:54
            X509v3 Authority Key Identifier:
                keyid:63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:07:fe:ad:ba:37:8f:4b:8d:ac:de:9b:4b:a3:c2:80:1b:91:
         1d:fd:bd:49:75:f3:c3:ce:2d:86:a1:d5:82:88:9b:02:fb:a3:
         f6:7b:79:8e:61:bc:46:96:dc:91:31:95:4d:d8:72:74:c9:10:
         f3:7d:d7:ff:bd:53:0c:7c:96:a2:53:19:3a:e5:f2:83:dd:0d:
         84:5d:a9:e8:01:6e:a7:85:ed:fb:78:50:9f:a3:7d:c5:cf:f5:
         f6:70:7e:47:03:28:73:33:6f:5d:79:3b:5d:88:a3:c2:b1:10:
         2c:85:ca:ec:b5:d4:ee:5b:7e:16:94:67:34:11:87:19:bb:e7:
         a0:70:0d:85:a6:fb:f1:5d:bb:68:fa:c6:3c:5f:96:26:64:47:
         80:ec:22:bf:f8:68:a9:71:69:d3:71:12:e1:f7:e2:15:d8:7c:
         78:43:ec:be:84:54:21:94:ec:91:f9:42:de:a8:af:35:ed:e9:
         cf:b5:df:de:06:b5:05:60:fb:cf:77:3b:c8:3f:cf:ef:cc:07:
         c9:93:16:7b:02:3c:58:69:90:00:b0:e9:41:f2:f0:21:86:3e:
         e1:7c:74:d3:18:75:07:5f:75:b4:b4:86:b4:79:7d:3e:ac:26:
         54:00:c6:bb:99:fe:01:8b:b6:fa:70:74:81:79:d7:4c:2f:31:
         cf:df:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:21:00 2025 by rpki-client