This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
File:                     6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json)
Hash identifier:          fCcD+F+DovH2Qu8c4zkNYsfEwKjPiQgyIGOMKPNDgck=
Subject key identifier:   B8:FF:E8:90:B3:7C:F3:0F:C8:02:A0:9B:01:A8:D5:D4:05:0C:B6:55
Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F
Certificate issuer:       /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F
Certificate serial:       73050AB47AC751E5670E9004668B308D8C8FF70E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
Manifest number:          FA
Signing time:             Sat 06 Dec 2025 12:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 11:56:18 +0000
Manifest next update:     Tue 09 Dec 2025 17:02:18 +0000
Files and hashes:         1: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: MiGoU+24hCapXJRAgpbtZ2XrLakndlrC1c3teJhVvgM=)
                          2: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl
                          rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:05:0a:b4:7a:c7:51:e5:67:0e:90:04:66:8b:30:8d:8c:8f:f7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F
        Validity
            Not Before: Dec  6 11:56:18 2025 GMT
            Not After : Dec  9 17:02:18 2025 GMT
        Subject: CN=B8FFE890B37CF30FC802A09B01A8D5D4050CB655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:b2:1f:8d:61:83:c3:2e:b0:73:98:e3:61:
                    93:33:ec:23:d7:d0:3f:f0:48:1a:fb:a0:76:1f:9b:
                    ec:f8:2a:fc:4d:d4:9a:bb:54:9b:78:3e:54:c0:de:
                    b5:17:ab:e2:74:1b:e2:99:6a:2a:bc:58:fe:3b:03:
                    c3:22:fb:fe:30:54:94:92:d7:16:ba:89:a9:4b:04:
                    08:68:11:bf:fe:ff:69:fa:4d:75:51:f2:05:fb:97:
                    9c:fb:a2:0c:ce:7f:65:22:61:de:5a:8e:dd:94:05:
                    a7:6c:1b:71:d9:b5:82:f1:59:e0:09:a6:11:9f:4f:
                    ac:e7:dc:47:fb:f4:32:42:03:c5:f6:5d:e7:7a:75:
                    47:28:3f:01:58:2b:4d:71:8a:80:6e:44:99:47:77:
                    57:25:00:bb:53:b6:33:d1:cb:d4:bf:40:bf:2f:dd:
                    f0:70:d0:0c:3b:53:f6:1a:ce:2a:43:4e:76:c5:ba:
                    46:90:cb:63:f7:d0:fe:f7:fd:6e:80:65:67:7f:ac:
                    1e:ce:50:63:61:7b:b6:79:5a:4b:14:91:8b:5c:d6:
                    9e:cd:23:93:a6:f8:fd:18:33:cf:04:df:a7:a9:c5:
                    b6:6f:36:f2:f6:f7:25:cb:99:5a:ac:34:bf:58:45:
                    1b:32:69:65:95:ab:3f:c0:4b:47:73:d9:a3:d6:39:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FF:E8:90:B3:7C:F3:0F:C8:02:A0:9B:01:A8:D5:D4:05:0C:B6:55
            X509v3 Authority Key Identifier:
                keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:84:2f:33:33:eb:26:fb:d3:e9:60:58:4c:8e:3d:82:3e:12:
         b4:3e:a9:ee:13:89:58:d4:28:04:d8:35:57:e9:1b:7c:ab:90:
         1e:d4:cf:f1:41:c7:a7:d6:8c:32:3a:d0:01:a5:2c:9d:07:ad:
         d1:69:de:c3:2c:6e:9f:7b:db:7e:ec:91:52:a3:6e:df:b6:2f:
         2a:a2:85:ac:bb:16:ca:8f:c1:2a:66:e5:b5:88:88:7b:ba:ee:
         dc:7b:2e:9d:bd:5b:aa:03:9a:fb:8e:e6:4c:84:7c:d6:61:c2:
         2d:2c:fc:12:1f:52:99:5f:77:51:d4:cd:75:b5:58:8a:0c:e6:
         aa:bd:1f:14:e6:78:f3:21:55:6d:8a:dc:95:50:20:9a:4a:7a:
         67:6b:f6:aa:d5:51:49:dc:32:18:3d:ca:c7:12:fc:72:94:f1:
         69:9c:35:da:b5:90:75:f3:1f:e2:7b:8f:d8:23:54:b2:6d:99:
         4f:e3:86:c8:d7:54:e3:97:78:d7:01:35:52:dc:8b:1c:34:6a:
         43:f4:27:51:9a:ea:70:35:83:95:08:a1:20:26:a1:18:bd:0e:
         2d:bd:83:0f:79:3c:e6:7f:7b:af:51:ee:03:2c:b8:a6:44:19:
         be:35:a9:0e:9e:18:0f:57:18:5e:b9:8e:9c:ba:7f:fb:e6:a8:
         f4:77:60:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:01:08 2025 by rpki-client