This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
File:                     B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft (raw, json)
Hash identifier:          xO3xFUXmU0bhhNnwbYwnSClAyWlSkr0Gc6pe723xWNE=
Subject key identifier:   AC:3C:35:17:AF:55:A3:DE:69:24:11:A9:93:24:2D:F8:8F:4E:64:30
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       4078F367D4BA1948B87DD060AB1C588D69FB369B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
Manifest number:          0555
Signing time:             Wed 17 Dec 2025 17:42:00 +0000
Manifest this update:     Wed 17 Dec 2025 17:37:00 +0000
Manifest next update:     Sat 20 Dec 2025 19:36:00 +0000
Files and hashes:         1: 323430323a666463303a3a2f33322d3438203d3e20313337333633.roa (hash: j7jB38lRK0MyqdwJWx6N5CBz2kyL9r9I3yPoxuutiIw=)
                          2: 323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa (hash: VONMn5fIO30lRT5TNxNJEclAWC+FxhI3fBqb3mzNwEc=)
                          3: 3230322e31302e36322e302f32342d3234203d3e20313530353031.roa (hash: RA0dEmWofu9VoMSQ/341O6y+HXDRp9y2vRcLh4F1ODI=)
                          4: 323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa (hash: Ar5/cOpa7lR7Klsqcv8KVTA9NybEjILpd76HZ5Wm55Q=)
                          5: 3230322e31302e35302e302f32342d3234203d3e20313332363334.roa (hash: /wpQsAwZKIww7skvfjYUPlEp6b6QcsNwO4f66PwBXCY=)
                          6: 3230322e31302e35342e302f32332d3234203d3e20313430343735.roa (hash: mrQV3K4ZfNyFu4dz4PQjyYnBuXTV/qSLCJuvGp+za9Q=)
                          7: 3230322e31302e35322e302f32342d3234203d3e20313337333633.roa (hash: h0jtUkeClRH/RQiHCSY5/jNkH1epCPrd4PdfmPfAgug=)
                          8: 323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa (hash: zTf2KHECdlF8CivRMKWMy2l8q7k9i66ao4kyK+xS1y8=)
                          9: 3230322e31302e35322e302f32332d3234203d3e20313337333633.roa (hash: hPRob0LbT96x1OWMP1vefqV7B1+l+jJr6lBjqV01ftw=)
                          10: B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl (hash: Ngt04vkCc93axAvOlJy8E402mAgZwrLthEGfViEzFhs=)
                          11: 3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa (hash: p6sOKpaHxQkCClQSyTYMdnkWbFxcKXaXdyewePl3H10=)
                          12: 3230322e31302e35312e302f32342d3234203d3e20313332363334.roa (hash: Rjv6tIDKIsz+tV5NKRFWqs/fslBMHbaD5maSFYxqf0I=)
                          13: 3230322e31302e35342e302f32342d3234203d3e20313430343735.roa (hash: oY8PFSmRlK4Vr9dRAsrKJH2p/p9xJlr+E4F6IgwEYPg=)
                          14: 3230322e31302e33322e302f32332d3234203d3e20313337333633.roa (hash: 0rOdUlH6gv3+zZP8vGxs8CTSWUCRCHhK1DMWGhKDqBk=)
                          15: 323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa (hash: 2jNUjF4nke4CK+6iAYAgplrGXkwCafjzFP+r1D8zcBY=)
                          16: 323430323a666463303a633830303a3a2f34382d3438203d3e20313337333633.roa (hash: Ih2ujo7pvABxXIdfIdlrZdpA6OwzPTPKOakfX3mx57k=)
                          17: 3230322e31302e35352e302f32342d3234203d3e20313430343735.roa (hash: lL570HClg96u1KXZ9sJyqf8kPj1FRroj8cGKU/nkYi4=)
                          18: 3230322e31302e35332e302f32342d3234203d3e20313430343639.roa (hash: j1Hqw6TnerpgI9rlz8g77UO+7SSdu2/QSD/Hp0tiFCg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 19:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:78:f3:67:d4:ba:19:48:b8:7d:d0:60:ab:1c:58:8d:69:fb:36:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Dec 17 17:37:00 2025 GMT
            Not After : Dec 20 19:36:00 2025 GMT
        Subject: CN=AC3C3517AF55A3DE692411A993242DF88F4E6430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:ba:69:50:4b:23:fe:ed:d2:a2:cc:d7:d5:
                    58:fd:b6:aa:d7:99:d0:e2:d2:5b:55:4a:34:01:2a:
                    3e:8f:68:44:f2:82:64:2d:76:6c:29:d3:ce:66:33:
                    14:46:b2:68:42:0a:64:59:70:3c:43:2b:35:d5:99:
                    74:0b:5a:f2:3a:44:77:9e:ed:d6:8b:84:44:b7:ca:
                    6f:52:a1:ee:9a:8a:79:a7:28:9c:57:38:85:b5:89:
                    19:6f:25:84:bb:44:08:6e:a8:ef:92:13:6d:3c:d5:
                    98:4b:75:8d:95:6c:82:46:ed:55:bb:4c:50:d7:07:
                    17:d9:5b:f7:f4:1b:a0:55:6f:d6:67:f4:0a:c5:17:
                    99:88:ce:1a:a7:94:d6:08:67:ac:38:f5:85:af:35:
                    3c:d0:20:ea:ab:a7:de:f3:c9:43:d3:4d:f9:cf:ea:
                    b6:99:8a:e4:13:b4:2b:7a:17:8e:62:a2:c0:47:43:
                    da:d6:d9:ea:58:54:64:98:66:c4:81:0e:2d:46:f5:
                    ef:80:6e:82:45:e6:97:8a:5a:8b:a5:1e:31:c8:84:
                    23:c7:a6:97:a6:06:01:6c:51:e1:fb:49:37:11:6b:
                    ee:75:d7:44:a8:61:ff:7c:c0:22:c3:6c:af:a2:76:
                    f4:9d:cd:d9:e5:a1:40:9a:fd:b6:60:5b:9c:96:6b:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3C:35:17:AF:55:A3:DE:69:24:11:A9:93:24:2D:F8:8F:4E:64:30
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ac:95:4e:d8:81:f0:51:12:d0:73:a9:1e:58:2b:14:81:c2:
         c6:2c:32:06:58:7b:a9:e7:f2:b9:7f:53:77:52:a3:dd:9a:47:
         95:d2:85:89:d2:a4:95:0d:ce:21:ce:a1:ed:f1:98:28:77:3f:
         37:2e:dc:57:b1:1c:39:61:d9:17:b9:ef:ea:8d:7b:b6:fd:b0:
         f6:c6:86:2a:f8:18:dd:84:2a:7b:14:65:dd:b8:b1:1d:52:c5:
         45:be:4e:15:9a:a4:62:2c:6e:c7:ee:70:45:f5:c9:30:11:60:
         e4:e2:2e:9b:13:93:13:9a:30:b6:1f:c7:59:3e:72:db:22:c8:
         5c:73:40:b2:4c:07:18:0a:6d:86:0a:77:75:e9:9a:c0:b5:a3:
         df:88:03:da:8d:d3:bf:ac:4b:c8:75:47:18:7f:40:fa:40:ab:
         71:52:b0:01:e6:59:31:55:bb:3b:11:d4:7a:1f:6b:2e:05:7d:
         c1:9c:d2:59:d8:69:94:79:41:eb:30:db:b1:e5:7a:99:de:d0:
         7c:b5:4d:34:19:52:66:2b:99:14:b8:5e:71:90:57:b4:5c:ce:
         07:e5:e6:2f:32:15:50:b8:bb:60:57:f7:67:1b:90:0f:ba:08:
         15:0c:f5:79:f6:df:a2:8d:94:4a:aa:77:f0:a9:e0:a2:e5:05:
         1e:72:ae:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQHjzZ9S6GUi4fdBgqxxYjWn7NpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEy
NDk5M0NBMzAeFw0yNTEyMTcxNzM3MDBaFw0yNTEyMjAxOTM2MDBaMDMxMTAvBgNV
BAMTKEFDM0MzNTE3QUY1NUEzREU2OTI0MTFBOTkzMjQyREY4OEY0RTY0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0S7ppUEsj/u3SoszX1Vj9tqrX
mdDi0ltVSjQBKj6PaETygmQtdmwp085mMxRGsmhCCmRZcDxDKzXVmXQLWvI6RHee
7daLhES3ym9Soe6ainmnKJxXOIW1iRlvJYS7RAhuqO+SE2081ZhLdY2VbIJG7VW7
TFDXBxfZW/f0G6BVb9Zn9ArFF5mIzhqnlNYIZ6w49YWvNTzQIOqrp97zyUPTTfnP
6raZiuQTtCt6F45iosBHQ9rW2epYVGSYZsSBDi1G9e+AboJF5peKWoulHjHIhCPH
ppemBgFsUeH7STcRa+5110SoYf98wCLDbK+idvSdzdnloUCa/bZgW5yWa37hAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrDw1F69Vo95pJBGpkyQt+I9OZDAwHwYDVR0j
BBgwFoAUtu4fYdbo6e7GQMzB15HboSSZPKMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMC9CNkVFMUY2MUQ2
RThFOUVFQzY0MENDQzFENzkxREJBMTI0OTkzQ0EzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEyNDk5
M0NBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwODViNGEtZjU3My00MmYzLTgy
NWMtMWNmMGM4NzJiMTUyLzAvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURC
QTEyNDk5M0NBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAICslU7YgfBREtBzqR5YKxSBwsYsMgZYe6nn
8rl/U3dSo92aR5XShYnSpJUNziHOoe3xmCh3Pzcu3FexHDlh2Re57+qNe7b9sPbG
hir4GN2EKnsUZd24sR1SxUW+ThWapGIsbsfucEX1yTARYOTiLpsTkxOaMLYfx1k+
ctsiyFxzQLJMBxgKbYYKd3XpmsC1o9+IA9qN07+sS8h1Rxh/QPpAq3FSsAHmWTFV
uzsR1Hofay4FfcGc0lnYaZR5Qesw27Hlepne0Hy1TTQZUmYrmRS4XnGQV7Rczgfl
5i8yFVC4u2BX92cbkA+6CBUM9Xn236KNlEqqd/Cp4KLlBR5yrug=
-----END CERTIFICATE-----
Generated at Thu Dec 18 07:08:47 2025 by rpki-client