This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft
File:                     6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft (raw, json)
Hash identifier:          AlG72LWB6yeBulrpaZUvbF7gn7g6iHFw1ou6cEmY+9w=
Subject key identifier:   88:7A:7C:AD:BA:F1:C4:CA:E0:D2:FE:F8:9F:05:89:0C:DE:60:93:90
Authority key identifier: 6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C
Certificate issuer:       /CN=6C9FD300DFD761AFDA950CE979599BBE316BB13C
Certificate serial:       3FD911DC4512D720E49A4E0628D18EDA7B6BBA28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft
Manifest number:          EF
Signing time:             Sat 06 Dec 2025 18:42:21 +0000
Manifest this update:     Sat 06 Dec 2025 18:37:21 +0000
Manifest next update:     Tue 09 Dec 2025 19:26:21 +0000
Files and hashes:         1: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: 0/OqllA56TlHB+/g3q6s+l8VMpQYYTb8qnYADWBkbik=)
                          2: 6C9FD300DFD761AFDA950CE979599BBE316BB13C.crl (hash: fgnrZuJeqIattiv+TtPUcCMQoAT19y1hpxIhxasmiNo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.crl
                          rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d9:11:dc:45:12:d7:20:e4:9a:4e:06:28:d1:8e:da:7b:6b:ba:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C9FD300DFD761AFDA950CE979599BBE316BB13C
        Validity
            Not Before: Dec  6 18:37:21 2025 GMT
            Not After : Dec  9 19:26:21 2025 GMT
        Subject: CN=887A7CADBAF1C4CAE0D2FEF89F05890CDE609390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:0c:82:22:cb:5b:eb:a4:20:b2:d4:e9:de:
                    ff:48:d7:9c:a0:73:00:f0:38:50:15:fd:41:64:d9:
                    b9:c5:7b:49:91:5f:8c:65:34:41:0e:af:e7:5c:ab:
                    a4:4c:9f:0b:45:88:89:72:c7:65:56:98:40:9a:3a:
                    2b:b6:bb:f9:3f:6f:eb:b8:dd:56:b6:08:88:9e:82:
                    a9:52:18:0c:a9:61:15:94:e1:8e:4a:5c:62:4f:18:
                    f1:21:79:d7:41:82:ee:7d:57:29:30:36:0d:a2:68:
                    b4:7e:a1:f5:73:8a:2a:c7:00:66:89:c7:66:2e:70:
                    a4:0d:c3:9d:0b:e7:df:3a:96:ca:16:6a:96:32:da:
                    75:7c:bf:94:55:f6:81:a5:29:7e:ec:dd:c9:f1:08:
                    21:ee:6a:70:83:48:f0:c8:80:50:89:3e:c8:40:36:
                    c6:15:1b:9b:89:11:79:0d:2e:24:88:89:8b:3e:32:
                    2e:36:69:4d:45:1d:e8:c0:e4:57:1e:f1:55:56:07:
                    ae:f7:ce:1a:d8:1c:57:2c:ce:79:97:77:64:c8:a3:
                    4c:36:69:b6:41:c1:71:bd:b8:63:e0:34:dc:58:12:
                    38:35:58:95:ec:f3:b7:12:57:71:9e:5a:ae:61:2b:
                    60:16:a5:33:91:64:5a:7d:01:db:7f:4a:64:29:91:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7A:7C:AD:BA:F1:C4:CA:E0:D2:FE:F8:9F:05:89:0C:DE:60:93:90
            X509v3 Authority Key Identifier:
                keyid:6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:75:e5:a9:69:80:2d:c8:bc:90:66:64:7d:8d:34:f8:d5:
         7b:53:51:f8:d9:ff:50:5f:b9:52:69:d4:41:37:3c:68:69:6a:
         49:bb:b5:c7:10:1c:4e:90:fd:fd:3f:17:28:30:e6:2d:72:fc:
         dd:8d:1a:8d:20:7a:7b:f9:8e:33:bc:6c:10:79:7c:87:6e:a1:
         51:ed:55:dc:99:61:b1:8e:c5:02:8f:8a:cd:eb:9c:16:b6:fc:
         ae:cc:6c:f2:24:68:ab:5d:eb:3b:c4:01:0d:b4:bc:1e:7b:ae:
         cc:e2:2c:65:43:d0:d4:b2:09:65:ef:83:1b:13:8a:5e:64:29:
         b9:2a:a5:75:30:d5:7e:65:b7:2d:08:31:5b:3a:4f:7e:cc:ab:
         74:7c:89:bf:ec:a8:7c:82:7f:c2:47:0b:a4:a3:b7:40:43:d3:
         a4:cf:83:96:b1:0e:37:b4:01:3c:a4:27:53:0b:23:52:b8:1b:
         8e:55:69:d6:b8:c2:4f:c8:35:36:0e:56:46:b1:e6:1b:a2:86:
         19:10:cb:0e:b7:2f:89:d0:30:ac:1c:34:77:f8:ee:49:51:09:
         ca:b5:13:dd:5a:1d:6a:df:1b:cf:4b:d7:bd:04:c9:36:6f:8b:
         c3:a0:3b:1d:e1:a8:6b:51:71:08:db:db:5f:65:63:8c:e1:43:
         8f:d8:be:55
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP9kR3EUS1yDkmk4GKNGO2ntruigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM5RkQzMDBERkQ3NjFBRkRBOTUwQ0U5Nzk1OTlCQkUz
MTZCQjEzQzAeFw0yNTEyMDYxODM3MjFaFw0yNTEyMDkxOTI2MjFaMDMxMTAvBgNV
BAMTKDg4N0E3Q0FEQkFGMUM0Q0FFMEQyRkVGODlGMDU4OTBDREU2MDkzOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zwyCIstb66QgstTp3v9I15yg
cwDwOFAV/UFk2bnFe0mRX4xlNEEOr+dcq6RMnwtFiIlyx2VWmECaOiu2u/k/b+u4
3Va2CIiegqlSGAypYRWU4Y5KXGJPGPEheddBgu59VykwNg2iaLR+ofVziirHAGaJ
x2YucKQNw50L5986lsoWapYy2nV8v5RV9oGlKX7s3cnxCCHuanCDSPDIgFCJPshA
NsYVG5uJEXkNLiSIiYs+Mi42aU1FHejA5Fce8VVWB673zhrYHFcsznmXd2TIo0w2
abZBwXG9uGPgNNxYEjg1WJXs87cSV3GeWq5hK2AWpTORZFp9Adt/SmQpkSedAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiHp8rbrxxMrg0v74nwWJDN5gk5AwHwYDVR0j
BBgwFoAUbJ/TAN/XYa/alQzpeVmbvjFrsTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMS82QzlGRDMwMERG
RDc2MUFGREE5NTBDRTk3OTU5OUJCRTMxNkJCMTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkM5RkQzMDBERkQ3NjFBRkRBOTUwQ0U5Nzk1OTlCQkUzMTZC
QjEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky
NjgtYTEzM2RhZjExY2VmLzEvNkM5RkQzMDBERkQ3NjFBRkRBOTUwQ0U5Nzk1OTlC
QkUzMTZCQjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH/3deWpaYAtyLyQZmR9jTT41XtTUfjZ/1Bf
uVJp1EE3PGhpakm7tccQHE6Q/f0/Fygw5i1y/N2NGo0genv5jjO8bBB5fIduoVHt
VdyZYbGOxQKPis3rnBa2/K7MbPIkaKtd6zvEAQ20vB57rsziLGVD0NSyCWXvgxsT
il5kKbkqpXUw1X5lty0IMVs6T37Mq3R8ib/sqHyCf8JHC6Sjt0BD06TPg5axDje0
ATykJ1MLI1K4G45Vada4wk/INTYOVkax5huihhkQyw63L4nQMKwcNHf47klRCcq1
E91aHWrfG89L170EyTZvi8OgOx3hqGtRcQjb219lY4zhQ4/YvlU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:53:07 2025 by rpki-client