This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
File:                     6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft (raw, json)
Hash identifier:          pZ+uY34eFcdDLEmlcuEXzdI8ZWKnDISBN+CFNHFLnhQ=
Subject key identifier:   21:9A:CE:AB:85:B4:A9:CB:0D:1A:F8:BE:1D:22:F5:61:4F:B6:56:10
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       301C171003653EE9B7E560928F42BCECEDDE53F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
Manifest number:          05D7
Signing time:             Thu 04 Dec 2025 18:42:08 +0000
Manifest this update:     Thu 04 Dec 2025 18:37:08 +0000
Manifest next update:     Mon 08 Dec 2025 04:47:08 +0000
Files and hashes:         1: AS137346.roa (hash: PdCcl7m4oX+SJS93oiHUxTuOW/ltjw+gLpTGiEDO7T8=)
                          2: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl (hash: Qk+emUEVJuDVo68LicRZo80l6o3FDPb5jXFF/RMAeqc=)
                          3: AS38768.roa (hash: 1MWEV5tgHs2Zer2TXzzjNIdBv6VOof5lbDzM+kS3Zcs=)
                          4: AS138885.roa (hash: /n3QwdVfZD0QCe9dNF/CT2sxuwEtNa1/FhrwvyPZKsA=)
                          5: AS24520.roa (hash: /X2OowKvSum0rz+umcdT3kPQkSHfCFlWzy8KzFiLuzk=)
                          6: AS38755.roa (hash: js+OcGH/znL82r1Bq/i751nV9v0ky8Qg2sTbyo8OyDQ=)
                          7: AS38496.roa (hash: /3jwPUeHZHeKbNPRAhNW3g9EUNPkE+tEwzoJ3uFU9Sk=)
                          8: AS135457.roa (hash: Laio/RIOlqnhOFofbIiXLzFmTpeQDF+7GIIdTet4ZB8=)
                          9: AS140421.roa (hash: RfoESpxBfC9xRwHZO2fU/8RUGYVevfom5f/XSg00ECU=)
                          10: AS46024.roa (hash: RvDi/1OUXku9iMI9XICXFmVL8uaJ9Apq/2DjS740ogA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 04:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1c:17:10:03:65:3e:e9:b7:e5:60:92:8f:42:bc:ec:ed:de:53:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Dec  4 18:37:08 2025 GMT
            Not After : Dec  8 04:47:08 2025 GMT
        Subject: CN=219ACEAB85B4A9CB0D1AF8BE1D22F5614FB65610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:62:10:52:df:c3:4f:28:74:15:03:b1:47:
                    e4:33:40:be:9e:8f:08:ca:b8:4f:7a:6d:67:0c:bd:
                    ee:f4:89:a8:0d:be:af:6a:1c:f0:4d:69:76:43:7d:
                    80:8d:64:9e:7e:7b:8a:a6:a5:c2:f1:20:d3:4b:be:
                    54:e5:11:72:34:30:b6:6d:3a:4a:c4:1b:19:af:14:
                    b5:5d:88:91:36:7d:57:1e:1b:0c:72:80:24:52:f1:
                    e6:0a:f0:81:dc:d1:93:63:06:86:70:38:36:1a:86:
                    4e:f0:64:15:24:8b:20:d9:f0:b3:f9:33:50:9f:33:
                    fb:25:44:ab:0e:cd:29:8a:e0:54:ac:5b:b2:b7:80:
                    b0:cd:ce:a7:33:48:ea:26:cc:dd:63:98:7b:1e:0b:
                    1a:17:d4:68:d2:59:0c:c3:5a:e6:21:43:53:f3:1c:
                    e9:26:44:91:31:c3:72:fc:11:51:97:44:cf:ff:92:
                    48:d4:e2:07:f6:36:a7:1d:34:7f:10:2a:13:f4:37:
                    58:84:93:71:72:dd:46:4e:9d:e5:ed:71:d4:6b:d3:
                    d9:c6:3a:ed:8e:67:47:53:71:9b:0b:37:01:7f:a3:
                    a1:ec:e0:c8:58:bd:a1:a3:b5:65:07:1a:45:f1:fa:
                    30:31:89:de:e9:92:a3:56:8a:f1:d8:8b:16:b5:c9:
                    e4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9A:CE:AB:85:B4:A9:CB:0D:1A:F8:BE:1D:22:F5:61:4F:B6:56:10
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:09:51:db:16:69:14:f3:60:40:12:07:0d:22:c6:75:2b:30:
         06:1d:70:a4:74:f4:a5:f9:5c:23:02:69:29:b0:a9:07:a5:dc:
         75:de:f2:a9:7d:36:b2:39:0c:47:81:37:34:b7:a6:e2:d3:00:
         32:db:10:36:30:2e:d3:b8:f9:4c:02:59:ea:34:5c:cc:aa:e1:
         d7:1e:10:ed:a0:1e:1b:fa:f5:7f:42:ae:1a:a2:83:71:79:54:
         84:17:78:15:c0:7f:a5:ab:0c:71:5f:f4:89:ea:ef:d9:dd:99:
         58:9f:86:d8:a3:e4:5b:e6:76:dc:74:8f:2d:60:11:8f:5c:6d:
         a3:aa:55:bb:15:be:f2:67:fd:a9:4f:28:1e:9f:43:ca:eb:a2:
         bb:73:bb:7d:99:f7:e5:fd:a2:e5:8d:9d:9a:ef:18:55:33:53:
         30:11:23:c2:00:3f:aa:77:0c:c7:5b:fd:fb:6d:ed:f3:84:79:
         a3:1c:68:97:09:45:47:b4:da:fb:4a:61:1f:2a:81:1b:a6:ad:
         5c:3e:b5:00:22:3e:9a:4e:bb:45:00:9d:30:3f:70:58:ed:c5:
         39:2b:63:a2:16:72:0b:ea:92:79:4a:03:0b:5c:e4:a0:1a:7c:
         5a:4b:6c:8c:93:fb:3b:71:14:62:88:e9:f2:fe:51:89:a6:27:
         83:af:e2:d9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMBwXEANlPum35WCSj0K87O3eU/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNTEyMDQxODM3MDhaFw0yNTEyMDgwNDQ3MDhaMDMxMTAvBgNV
BAMTKDIxOUFDRUFCODVCNEE5Q0IwRDFBRjhCRTFEMjJGNTYxNEZCNjU2MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtmIQUt/DTyh0FQOxR+QzQL6e
jwjKuE96bWcMve70iagNvq9qHPBNaXZDfYCNZJ5+e4qmpcLxINNLvlTlEXI0MLZt
OkrEGxmvFLVdiJE2fVceGwxygCRS8eYK8IHc0ZNjBoZwODYahk7wZBUkiyDZ8LP5
M1CfM/slRKsOzSmK4FSsW7K3gLDNzqczSOomzN1jmHseCxoX1GjSWQzDWuYhQ1Pz
HOkmRJExw3L8EVGXRM//kkjU4gf2NqcdNH8QKhP0N1iEk3Fy3UZOneXtcdRr09nG
Ou2OZ0dTcZsLNwF/o6Hs4MhYvaGjtWUHGkXx+jAxid7pkqNWivHYixa1yeQnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIZrOq4W0qcsNGvi+HSL1YU+2VhAwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5
NzQtOTBlOTM5YmNiMGZiLzAvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZE
NTFGOEZDMDZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACUJUdsWaRTzYEASBw0ixnUrMAYdcKR09KX5
XCMCaSmwqQel3HXe8ql9NrI5DEeBNzS3puLTADLbEDYwLtO4+UwCWeo0XMyq4dce
EO2gHhv69X9Crhqig3F5VIQXeBXAf6WrDHFf9Inq79ndmVifhtij5Fvmdtx0jy1g
EY9cbaOqVbsVvvJn/alPKB6fQ8rrortzu32Z9+X9ouWNnZrvGFUzUzARI8IAP6p3
DMdb/ftt7fOEeaMcaJcJRUe02vtKYR8qgRumrVw+tQAiPppOu0UAnTA/cFjtxTkr
Y6IWcgvqknlKAwtc5KAafFpLbIyT+ztxFGKI6fL+UYmmJ4Ov4tk=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:42 2025 by rpki-client