This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
File:                     6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json)
Hash identifier:          4UA3N+G/DTlJ5CLY60hmR+Hp+jNca3aUF0HjyJh88Bw=
Subject key identifier:   8B:CB:19:33:15:53:BE:AF:4E:26:06:AE:63:67:6F:13:27:0B:F8:45
Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7
Certificate issuer:       /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
Certificate serial:       203FC9E5F1B35F17C0FB8AB89D2B04F2331DF427
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
Manifest number:          0294
Signing time:             Fri 05 Dec 2025 04:51:39 +0000
Manifest this update:     Fri 05 Dec 2025 04:46:39 +0000
Manifest next update:     Mon 08 Dec 2025 05:47:39 +0000
Files and hashes:         1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=)
                          2: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=)
                          3: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=)
                          4: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: 1KUwCkgIU+EjoJfLe5NZQrl86GNkYsG844WWJfbfCfw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl
                          rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 05:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3f:c9:e5:f1:b3:5f:17:c0:fb:8a:b8:9d:2b:04:f2:33:1d:f4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
        Validity
            Not Before: Dec  5 04:46:39 2025 GMT
            Not After : Dec  8 05:47:39 2025 GMT
        Subject: CN=8BCB19331553BEAF4E2606AE63676F13270BF845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:b4:31:d8:ce:d9:d9:31:57:59:cc:1a:3c:
                    19:94:59:52:bf:b1:db:b2:cf:64:0b:dc:6d:4f:14:
                    99:3e:8a:e3:44:86:0c:b4:c5:e3:23:4b:b3:67:d3:
                    8f:11:c1:9f:bf:3f:bf:d3:dd:f2:ab:82:fb:48:00:
                    3b:9f:ff:f8:5e:47:fc:e0:5c:22:0a:fe:34:dc:3f:
                    99:95:af:fb:64:61:fd:d0:0a:f1:1f:2c:6d:fd:4f:
                    fc:72:b2:6c:8e:0d:33:32:04:ee:1e:b0:b4:55:78:
                    ea:ad:5e:15:39:e9:7b:fd:f8:58:f9:d5:f2:58:aa:
                    73:cc:ce:e8:e1:d5:14:36:2a:ee:90:ac:dd:da:bc:
                    11:03:95:f6:4f:26:15:4f:8e:ff:c1:05:c6:b2:93:
                    dd:6d:5d:26:1a:bc:ac:d2:a1:2a:52:f4:fd:47:79:
                    2a:7f:6a:00:d8:b4:13:33:66:28:5c:00:41:44:f4:
                    b4:3d:1a:96:59:34:0e:27:c6:73:59:89:1d:cc:82:
                    a2:9f:10:52:c0:21:0d:c7:69:8f:57:56:43:ae:a5:
                    7f:79:35:a5:e2:ef:c1:9e:4b:31:ac:3b:05:6d:69:
                    56:87:66:d8:1f:e2:9e:0b:28:68:57:ff:6f:69:14:
                    65:26:14:f1:9a:b8:f9:3e:c2:8b:7a:71:d3:fd:e4:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CB:19:33:15:53:BE:AF:4E:26:06:AE:63:67:6F:13:27:0B:F8:45
            X509v3 Authority Key Identifier:
                keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:18:26:13:19:6e:7e:71:95:72:e0:59:83:14:23:59:27:f3:
         91:64:f9:a5:1e:9e:37:a3:d3:3e:70:4f:82:62:51:28:c6:58:
         08:e4:ff:bc:6c:fb:b5:68:60:0b:98:85:bb:f1:dd:28:09:02:
         83:f8:3d:5e:0c:de:ae:f5:80:35:17:c9:8b:ed:ef:b6:71:84:
         70:66:01:09:fd:a1:f0:3e:0a:89:09:b5:ef:ad:b1:8f:66:9b:
         e4:2a:78:04:a3:a9:c8:f7:ac:e3:0a:2b:bc:fb:2c:d8:5c:05:
         e6:27:5d:d9:ba:ae:93:7d:ee:49:83:ee:40:ee:05:4e:ed:2c:
         b9:7d:03:b6:f0:33:60:c0:c8:ab:de:24:fb:f7:19:5b:72:a0:
         60:b1:9b:35:61:03:a7:fb:bb:0a:b7:ba:3c:ec:4c:e3:6c:72:
         a1:fa:18:d1:07:ae:55:3b:f5:25:6f:eb:c8:f4:36:63:71:13:
         6a:67:2c:15:56:15:51:80:31:6e:87:97:55:c1:79:f1:ae:d6:
         4f:e0:f5:61:e1:d0:6f:62:3c:e0:73:0a:b5:a2:9a:ae:26:a5:
         c5:87:bd:a1:65:64:7d:73:ed:74:54:5f:db:24:f5:b4:db:3a:
         e6:ce:c6:2e:ff:a2:21:ea:18:98:82:29:36:6e:24:3c:d7:da:
         93:7e:f1:d4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUID/J5fGzXxfA+4q4nSsE8jMd9CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2
M0M1RDRFNzAeFw0yNTEyMDUwNDQ2MzlaFw0yNTEyMDgwNTQ3MzlaMDMxMTAvBgNV
BAMTKDhCQ0IxOTMzMTU1M0JFQUY0RTI2MDZBRTYzNjc2RjEzMjcwQkY4NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvrQx2M7Z2TFXWcwaPBmUWVK/
sduyz2QL3G1PFJk+iuNEhgy0xeMjS7Nn048RwZ+/P7/T3fKrgvtIADuf//heR/zg
XCIK/jTcP5mVr/tkYf3QCvEfLG39T/xysmyODTMyBO4esLRVeOqtXhU56Xv9+Fj5
1fJYqnPMzujh1RQ2Ku6QrN3avBEDlfZPJhVPjv/BBcayk91tXSYavKzSoSpS9P1H
eSp/agDYtBMzZihcAEFE9LQ9GpZZNA4nxnNZiR3MgqKfEFLAIQ3HaY9XVkOupX95
NaXi78GeSzGsOwVtaVaHZtgf4p4LKGhX/29pFGUmFPGauPk+wot6cdP95N+LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUi8sZMxVTvq9OJgauY2dvEycL+EUwHwYDVR0j
BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD
M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1
RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw
MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2
RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADMYJhMZbn5xlXLgWYMUI1kn85Fk+aUenjej
0z5wT4JiUSjGWAjk/7xs+7VoYAuYhbvx3SgJAoP4PV4M3q71gDUXyYvt77ZxhHBm
AQn9ofA+CokJte+tsY9mm+QqeASjqcj3rOMKK7z7LNhcBeYnXdm6rpN97kmD7kDu
BU7tLLl9A7bwM2DAyKveJPv3GVtyoGCxmzVhA6f7uwq3ujzsTONscqH6GNEHrlU7
9SVv68j0NmNxE2pnLBVWFVGAMW6Hl1XBefGu1k/g9WHh0G9iPOBzCrWimq4mpcWH
vaFlZH1z7XRUX9sk9bTbOubOxi7/oiHqGJiCKTZuJDzX2pN+8dQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:52:26 2025 by rpki-client