This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
File:                     3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json)
Hash identifier:          K9/NrKxPi76lwff6YlBDYXUpL9iiqckKlpl2yNNbZiw=
Subject key identifier:   D7:16:29:06:1B:A4:5B:B4:38:46:03:3F:D6:F9:10:32:9E:2E:30:6E
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       03763FF0999BD550E21A0A8D6E1AB121F4F76E82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
Manifest number:          0259
Signing time:             Sun 14 Dec 2025 09:12:28 +0000
Manifest this update:     Sun 14 Dec 2025 09:07:28 +0000
Manifest next update:     Wed 17 Dec 2025 15:58:28 +0000
Files and hashes:         1: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: P3vCG1eFCyYSS9LnEKWdiNtZlxHi5gwLg+zU1gklVa8=)
                          2: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: hNT+T7CGBXtFEAIKUs8Tuoz5IS5Ppz9c3i/v8Vc20uc=)
                          3: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=)
                          4: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=)
                          5: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=)
                          6: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=)
                          7: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=)
                          8: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: MfIpRbDFsLXG7r+gaPn+k51+pDkVoYxO4kfKQbaBZic=)
                          9: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: nmYMdBmJi2dLE67aggA0wkg2W+WeeYl9g1CRUjC4EIE=)
                          10: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=)
                          11: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=)
                          12: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=)
                          13: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: UZSj1gbIEphe1mWnvI396dxPxD/E5WStBcGb1wpBcZo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 15:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:76:3f:f0:99:9b:d5:50:e2:1a:0a:8d:6e:1a:b1:21:f4:f7:6e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Dec 14 09:07:28 2025 GMT
            Not After : Dec 17 15:58:28 2025 GMT
        Subject: CN=D71629061BA45BB43846033FD6F910329E2E306E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:2b:9c:6b:60:ac:af:96:dc:15:bf:a5:4b:
                    bc:4e:d4:29:d2:50:91:b8:10:59:eb:ed:2d:50:09:
                    33:fe:64:f1:37:86:3b:f4:c5:48:5e:20:b8:1f:80:
                    25:97:c5:61:04:46:d5:8a:a8:45:14:8a:a2:f5:d8:
                    45:b0:0d:6a:eb:50:e7:8c:4f:98:7d:65:5f:cd:28:
                    2b:d4:44:41:b2:5d:86:c5:8d:32:e8:fd:d4:ad:30:
                    51:7c:34:cb:ee:33:61:f5:62:55:93:c8:f7:d7:63:
                    6b:6d:f9:02:e1:ef:94:40:7a:20:b7:f8:53:81:c1:
                    0c:66:22:34:23:b3:2b:c5:fd:de:bf:ed:2c:dc:85:
                    98:44:13:d0:c5:92:88:fa:77:19:24:db:d1:ff:2f:
                    9c:c4:8f:6c:06:7e:9a:e4:8f:8a:a6:69:e9:23:00:
                    36:be:b2:fa:34:11:d6:94:bf:86:76:b5:7c:db:0b:
                    28:a4:3c:5e:1f:cf:eb:67:a4:8d:65:f9:5e:f1:79:
                    d0:b6:29:97:8c:5e:53:8f:9f:22:1e:da:ea:d8:fe:
                    64:6d:05:31:a3:a3:a0:c3:87:c1:c9:58:13:5b:e3:
                    f3:58:83:d7:07:4e:29:fe:32:3d:eb:7f:8a:f7:f4:
                    70:12:1e:0b:ab:9f:a0:58:66:04:fc:d9:94:1e:6e:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:16:29:06:1B:A4:5B:B4:38:46:03:3F:D6:F9:10:32:9E:2E:30:6E
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:fc:f3:54:81:6c:90:f6:34:d0:4c:a5:1f:d0:57:72:fd:90:
         97:35:b7:82:e6:f6:66:0b:b4:f4:f6:cb:cb:f8:e2:1d:37:87:
         1b:16:7b:b1:c7:b0:da:2c:71:89:3f:ee:90:66:99:63:e6:6d:
         a7:cc:95:a6:82:16:be:f0:83:4b:8d:c2:f5:c1:32:49:40:ae:
         6e:57:f5:2a:28:ca:c6:96:6a:ce:52:f0:a5:f9:5b:7b:bb:32:
         e5:83:9b:08:51:24:07:78:66:bc:8b:41:d1:09:d8:2e:43:ce:
         c9:71:97:2c:55:6a:fa:75:0c:8e:72:d4:2e:c2:64:ca:5b:ea:
         23:66:b8:98:ed:ad:0a:5f:73:a3:77:89:83:ec:85:51:39:ca:
         81:f6:1c:a6:52:7c:05:c9:6e:5b:be:87:55:91:82:e0:86:35:
         4b:c0:c9:67:69:61:b2:a9:f2:f5:a9:d6:a4:d3:ea:99:61:c6:
         7c:cc:68:0e:f8:8b:86:35:a1:eb:1a:8f:ed:17:54:40:a4:59:
         7d:03:e3:7a:7f:f0:b0:64:1f:fd:b1:f7:88:c9:21:1c:fb:e7:
         2f:a8:f8:ab:17:2f:bf:a9:b0:48:f8:d9:ce:dc:f2:89:70:c2:
         60:9f:6a:99:c2:86:73:b5:d9:64:0b:38:7b:25:85:5e:8b:f5:
         2a:9d:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 07:03:46 2025 by rpki-client