This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
File:                     C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json)
Hash identifier:          gdq2E9W87oStPnvWnjGo9Kuzky/y5D8V/WzCZRe5lH4=
Subject key identifier:   68:24:66:8E:7D:08:20:51:50:51:A1:BB:79:5C:6E:2D:C9:42:A7:01
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Certificate issuer:       /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial:       2341E15AACCCFAF14F1DB9AEB5055811459070A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
Manifest number:          047C
Signing time:             Fri 05 Dec 2025 02:20:53 +0000
Manifest this update:     Fri 05 Dec 2025 02:15:53 +0000
Manifest next update:     Mon 08 Dec 2025 08:33:53 +0000
Files and hashes:         1: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=)
                          2: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: KXjupGOJ4mhF/A5D/mKM69KXwlXoSfwvSUvOI6gHTW0=)
                          3: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=)
                          4: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=)
                          5: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=)
                          6: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=)
                          7: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=)
                          8: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=)
                          9: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
                          rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 08:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:41:e1:5a:ac:cc:fa:f1:4f:1d:b9:ae:b5:05:58:11:45:90:70:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
        Validity
            Not Before: Dec  5 02:15:53 2025 GMT
            Not After : Dec  8 08:33:53 2025 GMT
        Subject: CN=6824668E7D0820515051A1BB795C6E2DC942A701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:3a:cb:ca:57:f6:99:40:07:be:6a:7d:eb:
                    a1:5e:a8:61:1f:6b:38:d3:64:99:a5:61:b6:97:5e:
                    5d:a2:24:f0:91:02:d0:0d:d7:9e:53:b9:2d:e0:59:
                    d9:df:c9:48:e7:a8:42:da:96:a1:3c:d3:09:e7:0f:
                    f1:61:be:e7:0b:19:bf:7b:5d:23:8a:5d:4c:f6:1f:
                    9e:ab:4d:cd:2f:50:36:6f:d8:81:6f:9e:33:54:47:
                    e3:ce:fe:6e:a2:17:10:6e:39:7f:be:74:e2:38:e2:
                    f0:cb:7e:7c:68:c3:30:60:2b:c9:55:2f:73:b0:3c:
                    41:2a:e9:a3:d5:dc:67:79:d4:cb:8a:7a:46:40:de:
                    14:34:d8:36:91:99:1c:8d:5c:fb:44:26:7b:63:a5:
                    f5:07:26:27:e3:14:28:24:27:3d:22:42:58:d6:4c:
                    88:d6:6b:fe:5b:d4:df:62:d0:e0:e8:ef:dd:57:cf:
                    69:4e:c3:c7:e3:d9:80:68:0d:ee:4a:8a:33:05:1c:
                    73:c7:13:88:d7:68:10:ad:30:b3:ad:94:85:eb:7c:
                    88:bc:b2:5f:cf:6b:f0:72:2c:39:e9:95:01:70:c8:
                    2c:7b:e6:80:8f:05:fb:da:a0:69:86:f5:af:67:97:
                    46:5c:55:e6:f6:45:33:aa:2f:7b:76:a7:d8:99:c2:
                    8c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:24:66:8E:7D:08:20:51:50:51:A1:BB:79:5C:6E:2D:C9:42:A7:01
            X509v3 Authority Key Identifier:
                keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:33:01:71:4a:55:ec:44:d8:2d:da:0b:f2:30:7c:09:60:13:
         e4:8a:2d:9b:c4:8b:23:37:25:03:ff:54:2e:dc:1f:dc:2f:23:
         44:41:6e:ac:a5:1f:1e:e8:fa:d7:8e:a2:18:df:ca:54:6a:a6:
         d6:6c:97:77:21:69:ef:1e:64:39:6b:ac:a7:5c:28:72:3e:ef:
         d4:9a:ac:d1:79:cf:11:6c:b2:44:bf:ff:8e:53:51:65:89:74:
         18:19:16:60:34:f5:a4:12:6a:70:b2:3f:3a:ad:ad:88:0b:cc:
         17:1d:dc:62:4f:f1:10:68:13:2f:46:46:8e:d3:49:49:4c:9b:
         39:08:36:8d:94:cb:d8:5d:a9:d0:5f:c4:2a:3f:a0:db:12:de:
         0e:cf:2e:e3:75:23:21:24:44:df:a9:b9:3b:50:79:f0:71:5b:
         7f:00:4f:5b:01:bb:7f:66:f2:d0:73:63:0d:88:03:42:4a:58:
         1e:19:15:da:0a:6b:b3:ab:aa:21:aa:e5:6d:d9:df:03:07:59:
         80:c8:3e:eb:c7:d7:f0:5e:b3:3e:53:e0:b9:59:8f:82:94:d5:
         fc:38:dd:82:2e:18:1d:13:14:b6:21:78:0c:9f:f5:b7:56:b4:
         b1:1c:e4:44:e7:99:c9:c9:e1:c3:da:93:06:ba:3c:82:49:38:
         d3:fd:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:44 2025 by rpki-client