This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
File:                     B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json)
Hash identifier:          QD8mU22p6QK40uHlD20Yp7guGtpxmcEdBSMOdCDFHCo=
Subject key identifier:   12:3A:68:67:AE:DA:5D:05:82:B0:04:79:D9:1D:DF:7C:AA:F5:37:8A
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       5A05A70BB3DDE3F6B8DF413AFB444613DFAE8651
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
Manifest number:          0536
Signing time:             Sat 06 Dec 2025 11:50:04 +0000
Manifest this update:     Sat 06 Dec 2025 11:45:04 +0000
Manifest next update:     Tue 09 Dec 2025 18:16:04 +0000
Files and hashes:         1: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=)
                          2: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=)
                          3: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=)
                          4: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=)
                          5: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=)
                          6: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=)
                          7: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: PF7l/jH2t0CCOpSGe2OcE+e4z8FDboE6DdUh2Fiira8=)
                          8: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=)
                          9: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:05:a7:0b:b3:dd:e3:f6:b8:df:41:3a:fb:44:46:13:df:ae:86:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Dec  6 11:45:04 2025 GMT
            Not After : Dec  9 18:16:04 2025 GMT
        Subject: CN=123A6867AEDA5D0582B00479D91DDF7CAAF5378A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:b7:b4:1c:8e:32:19:8f:4f:c2:43:0d:f6:
                    ac:0a:bc:c3:d3:d0:19:5b:b9:45:8f:a5:d1:8f:84:
                    0e:c3:e9:cf:b2:b4:3e:f9:9e:c4:37:ee:92:56:ba:
                    41:0d:c6:6d:ad:b6:34:c4:23:db:47:88:92:48:d9:
                    ae:cd:9e:4e:ea:06:c2:19:47:0b:74:5b:13:a3:d1:
                    ca:97:c6:1d:6b:1d:63:ab:40:0b:a7:48:f8:4f:78:
                    16:06:4b:bc:4b:48:b7:90:2c:e1:76:fc:52:7f:c4:
                    20:6e:6e:b9:9a:39:00:85:e4:c2:2a:0a:e5:3d:56:
                    f8:02:05:53:66:bb:37:5b:57:c1:e8:23:1a:73:96:
                    47:5f:de:c9:e4:bf:c3:b8:8b:b1:18:7e:ff:92:eb:
                    8a:f2:d8:47:4d:33:80:5d:54:47:82:db:c3:25:d6:
                    b5:6f:11:44:3c:8c:97:17:e8:68:98:f3:36:23:79:
                    cb:0b:c2:83:9b:54:76:df:f4:9e:dd:3a:8f:b6:84:
                    48:25:2e:03:3e:96:0d:02:3d:73:be:96:be:db:7b:
                    d8:d5:ac:b4:0c:c6:74:d0:3b:be:6b:5a:a7:f5:4c:
                    20:46:26:bb:b2:d4:bc:b3:0e:3a:df:56:81:cb:d8:
                    a9:15:ed:f2:01:74:2b:21:8b:6e:2b:61:6b:c1:ed:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:68:67:AE:DA:5D:05:82:B0:04:79:D9:1D:DF:7C:AA:F5:37:8A
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0a:33:b8:ed:cc:7f:2d:1c:e9:69:d0:21:db:f4:fa:18:5c:
         bd:48:26:f7:ae:8d:d9:c4:82:3a:58:a6:3e:d8:e7:65:75:22:
         0a:11:5c:30:1c:1a:51:22:52:6c:cd:61:aa:34:c2:86:c0:54:
         ae:ba:0b:22:18:16:e6:d5:fb:cc:bd:c2:f8:4b:e6:32:2d:9f:
         d9:f1:0b:34:3b:24:30:b5:a9:ee:5e:93:b7:14:fd:91:ff:31:
         c3:58:2f:09:3e:4a:82:fa:30:04:08:f1:98:29:dd:87:de:4c:
         0d:c6:90:b6:36:74:96:33:c8:dc:10:f0:59:d8:46:a8:40:71:
         94:b4:bf:b1:38:40:70:d9:9d:03:68:29:83:ca:48:c7:04:25:
         22:d5:fc:b1:3d:ac:14:c6:eb:9f:db:ac:b2:b9:f9:49:49:85:
         b5:a4:6f:ea:ec:2f:f5:4d:92:2f:51:86:a5:f2:43:7f:a1:a3:
         02:6a:2c:9e:6b:6d:5e:ee:92:34:29:af:4a:c7:ba:5e:70:e5:
         f7:6f:63:9d:81:2f:47:e9:5a:cc:cc:a3:6a:df:5b:9b:1a:a9:
         96:8c:9b:25:c8:f6:f9:47:24:c0:ee:14:ca:c7:34:cb:84:2a:
         12:24:ac:58:cf:8c:1a:2e:f5:a7:81:af:84:96:df:89:86:d0:
         96:6b:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:36:31 2025 by rpki-client