This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
File:                     6B35526165718CDFDDCB202D241332F565BEE7B0.mft (raw, json)
Hash identifier:          2KRN2HCH+c74vc43G6RE+X/9UUumpEJY0YcMds2HNmM=
Subject key identifier:   B5:C6:7C:E5:E1:66:EA:EA:E3:C4:50:39:9C:15:22:F9:06:1B:12:EF
Authority key identifier: 6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
Certificate issuer:       /CN=6B35526165718CDFDDCB202D241332F565BEE7B0
Certificate serial:       67F3F15A1C616614CA93411814C3088DDE4F1FF3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
Manifest number:          F2
Signing time:             Sat 06 Dec 2025 21:51:25 +0000
Manifest this update:     Sat 06 Dec 2025 21:46:25 +0000
Manifest next update:     Wed 10 Dec 2025 05:52:25 +0000
Files and hashes:         1: 6B35526165718CDFDDCB202D241332F565BEE7B0.crl (hash: 1KSUvprj1cZEy+C0v59cUhn+eJjUknRcwmCXczvKpOA=)
                          2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: mKIqmd/EOitm2VkjJ4/rdItHB7wxpB5sjP3tcWKMCX8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl
                          rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f3:f1:5a:1c:61:66:14:ca:93:41:18:14:c3:08:8d:de:4f:1f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B35526165718CDFDDCB202D241332F565BEE7B0
        Validity
            Not Before: Dec  6 21:46:25 2025 GMT
            Not After : Dec 10 05:52:25 2025 GMT
        Subject: CN=B5C67CE5E166EAEAE3C450399C1522F9061B12EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:2e:de:34:62:99:ca:0f:71:f5:81:3d:b6:
                    5d:6d:b7:63:e3:b0:b3:84:e2:e9:27:6e:bd:9e:fa:
                    5b:23:8e:66:58:ae:52:a4:48:6b:21:ba:96:01:7a:
                    d3:e8:b3:4e:30:74:08:2a:70:84:00:15:d6:84:f8:
                    29:9e:54:e3:be:27:b9:3b:70:8a:f8:9c:6d:80:9e:
                    32:66:f9:59:fa:cf:3e:b2:eb:7f:04:df:f4:f1:eb:
                    4e:60:91:61:d7:ed:12:e8:db:0c:f3:af:d4:5f:20:
                    66:0b:f8:3f:45:4c:dc:9a:fa:e5:67:b2:62:dd:c5:
                    9e:b9:fc:3b:38:5f:8a:8f:06:15:d8:c3:53:b1:f1:
                    a1:af:b7:b8:16:dc:18:f4:10:2b:05:ba:ee:99:54:
                    fc:f2:48:29:9c:54:ba:a3:dd:7e:82:97:9d:4b:37:
                    5a:0e:41:f2:bc:d7:72:72:dc:67:d1:62:f9:cd:81:
                    99:33:cc:e3:59:82:4b:62:3d:e0:53:5d:ad:b2:bd:
                    12:14:63:bb:4a:63:98:b1:04:1b:1f:7f:4d:b9:de:
                    ec:9b:67:df:99:e6:f6:58:37:33:29:28:eb:4f:d3:
                    b4:d1:f9:72:86:7d:08:42:10:27:c6:8b:d0:1d:59:
                    01:eb:62:0b:e6:fc:57:60:92:6f:17:eb:c1:81:74:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C6:7C:E5:E1:66:EA:EA:E3:C4:50:39:9C:15:22:F9:06:1B:12:EF
            X509v3 Authority Key Identifier:
                keyid:6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:3b:af:f4:1a:a0:49:42:31:e0:58:23:4c:37:53:50:78:
         09:97:c6:92:64:e1:45:98:c2:33:17:08:c1:af:90:61:7b:f4:
         5e:be:a6:8b:ad:09:1c:e8:9f:ff:70:d7:b1:0b:84:a7:00:b6:
         52:55:db:5c:8e:70:93:d4:6b:74:3c:54:ce:5c:5a:1b:e0:c1:
         80:24:f0:18:8a:1d:ef:04:96:86:d7:3b:d4:0d:82:d0:94:7b:
         c1:73:93:57:73:25:0d:37:c1:fb:e4:e1:ed:b4:4d:1d:c0:9e:
         1f:7d:c3:50:52:6a:d0:b1:cd:d5:b4:58:16:68:33:e6:39:f6:
         ed:97:a3:ac:f8:8c:29:97:af:ca:74:37:9d:90:45:63:4b:fe:
         b8:b5:7f:c9:ad:77:73:de:de:bb:d9:96:b2:50:2c:85:30:9a:
         e4:f9:95:dc:cd:0c:ae:64:ca:02:26:cd:02:13:96:9b:71:ef:
         a7:c8:c2:39:e1:b9:bc:47:cf:a7:0c:65:bc:22:df:99:92:2c:
         c7:8f:c3:27:d8:80:57:8e:f7:1a:d3:9a:27:3b:da:df:a2:73:
         22:a8:5f:a7:69:8c:31:81:b9:c4:a4:3b:ea:81:78:01:47:fd:
         a5:ea:1f:ef:21:49:6e:8a:2a:54:df:73:76:ab:70:ff:8d:82:
         68:43:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:58:03 2025 by rpki-client