This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
File:                     619EF55758C22775EDCEBA183A59715E1452FD8B.mft (raw, json)
Hash identifier:          3rRr3GmidXZgWNnlFRa6Zc2qPuIF6/9XjLvlUjTH3WU=
Subject key identifier:   D6:A7:00:32:FA:A3:FE:1F:E6:D4:1B:DD:A7:E6:B1:09:3A:25:45:F8
Authority key identifier: 61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
Certificate issuer:       /CN=619EF55758C22775EDCEBA183A59715E1452FD8B
Certificate serial:       70D0839EBADFC4A113B80D0C38467504663785D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
Manifest number:          0201
Signing time:             Thu 18 Dec 2025 10:01:16 +0000
Manifest this update:     Thu 18 Dec 2025 09:56:16 +0000
Manifest next update:     Sun 21 Dec 2025 17:16:16 +0000
Files and hashes:         1: 619EF55758C22775EDCEBA183A59715E1452FD8B.crl (hash: jSZTWka5kRrbKpIgKDhsPlSAlOUswxnZSA4pmGf9G6A=)
                          2: 3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (hash: XOCdIAMKDMLBpRxTU+JgAZ5zHO8OEenWLT9fS6FfdlU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl
                          rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 17:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d0:83:9e:ba:df:c4:a1:13:b8:0d:0c:38:46:75:04:66:37:85:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619EF55758C22775EDCEBA183A59715E1452FD8B
        Validity
            Not Before: Dec 18 09:56:16 2025 GMT
            Not After : Dec 21 17:16:16 2025 GMT
        Subject: CN=D6A70032FAA3FE1FE6D41BDDA7E6B1093A2545F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:04:6a:a2:9d:cf:bc:9c:82:6f:2c:47:c0:
                    ab:0a:e8:9a:e3:00:91:d9:70:f7:0f:f6:a1:7b:7c:
                    28:30:37:33:83:f6:2d:b8:e8:3e:ec:18:f6:4e:58:
                    f9:a3:38:3f:40:c6:e1:70:d8:13:62:ed:3d:18:dc:
                    f6:9e:f7:01:ea:8e:3d:3c:25:4c:17:b8:e9:2d:58:
                    0e:57:0c:1e:20:6e:2c:a2:b1:60:6f:fa:b1:09:da:
                    4e:81:ef:75:01:66:ef:32:a3:70:db:f2:c1:49:84:
                    e4:76:d7:83:f5:ad:38:54:16:07:69:62:0c:ca:45:
                    46:f2:23:66:94:c7:7e:63:67:54:79:55:24:59:71:
                    b6:3d:b8:d6:fd:1f:cd:df:15:76:cc:8b:f8:13:60:
                    e4:90:90:29:9c:5b:22:37:33:28:1a:31:b1:cb:d6:
                    18:ad:4c:55:a3:0c:89:a9:1c:31:05:0c:74:4e:2f:
                    65:28:7c:88:0e:2e:42:3f:ce:8f:5b:1a:95:2b:9e:
                    63:30:8c:94:4b:a0:97:fa:7a:31:8f:f3:8a:3b:ee:
                    17:b1:5b:32:8d:bf:4b:c8:e5:74:29:35:9f:94:9e:
                    43:12:90:61:3f:02:d4:a1:8f:fe:9b:98:0c:d0:3b:
                    5e:59:d0:d9:bf:c9:8b:b0:66:7d:67:1c:de:19:8d:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A7:00:32:FA:A3:FE:1F:E6:D4:1B:DD:A7:E6:B1:09:3A:25:45:F8
            X509v3 Authority Key Identifier:
                keyid:61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:77:d5:4b:74:f2:43:5e:47:d9:a3:bc:0c:5d:c9:3e:88:e1:
         8b:46:41:ba:e1:39:30:bb:cb:46:59:9c:fb:ee:81:d2:a1:03:
         c6:bd:ca:d9:79:8f:a8:c4:b9:47:73:a0:0c:1d:ec:19:6e:bd:
         84:dd:77:21:0b:f2:df:08:1c:03:92:37:1e:0f:81:7a:fd:f5:
         44:91:4c:f9:27:57:f8:b9:4a:39:18:c0:49:9a:5a:92:f6:27:
         1f:d2:33:0b:ad:ea:a7:08:4f:5a:e2:54:9b:ff:9f:f9:04:a2:
         03:b9:1f:b0:f1:5c:9c:e5:0d:3b:7f:51:4b:21:50:44:26:2d:
         d9:a9:5c:af:9c:86:ce:ce:85:6e:59:bd:f5:d4:c2:22:9b:b7:
         f3:4e:a0:94:df:6f:6f:c8:7c:57:dc:e5:b2:8d:cb:ce:5a:14:
         9a:ec:d2:da:b6:c4:9c:93:3b:e5:b9:bb:b8:e9:b3:8c:9b:a9:
         ac:10:ab:6c:ec:c5:b8:11:96:89:f1:92:29:47:7a:1e:43:3c:
         15:10:98:e5:77:f6:6c:03:1f:99:bb:06:51:7a:97:79:9b:ae:
         b6:c5:cf:0b:fc:5b:18:6d:af:0b:a3:75:26:3c:65:d1:d9:57:
         ee:09:f5:35:3c:88:03:9b:9c:8c:81:d9:d4:56:e6:5b:c8:8a:
         98:59:9a:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcNCDnrrfxKETuA0MOEZ1BGY3hdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5RUY1NTc1OEMyMjc3NUVEQ0VCQTE4M0E1OTcxNUUx
NDUyRkQ4QjAeFw0yNTEyMTgwOTU2MTZaFw0yNTEyMjExNzE2MTZaMDMxMTAvBgNV
BAMTKEQ2QTcwMDMyRkFBM0ZFMUZFNkQ0MUJEREE3RTZCMTA5M0EyNTQ1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgwRqop3PvJyCbyxHwKsK6Jrj
AJHZcPcP9qF7fCgwNzOD9i246D7sGPZOWPmjOD9AxuFw2BNi7T0Y3Pae9wHqjj08
JUwXuOktWA5XDB4gbiyisWBv+rEJ2k6B73UBZu8yo3Db8sFJhOR214P1rThUFgdp
YgzKRUbyI2aUx35jZ1R5VSRZcbY9uNb9H83fFXbMi/gTYOSQkCmcWyI3MygaMbHL
1hitTFWjDImpHDEFDHROL2UofIgOLkI/zo9bGpUrnmMwjJRLoJf6ejGP84o77hex
WzKNv0vI5XQpNZ+UnkMSkGE/AtShj/6bmAzQO15Z0Nm/yYuwZn1nHN4ZjY//AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1qcAMvqj/h/m1Bvdp+axCTolRfgwHwYDVR0j
BBgwFoAUYZ71V1jCJ3XtzroYOllxXhRS/YswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MjcxODA2Yy00M2QwLTQ2NDYtOGM4ZC02MTExN2MyMzQxYTAvMC82MTlFRjU1NzU4
QzIyNzc1RURDRUJBMTgzQTU5NzE1RTE0NTJGRDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE5RUY1NTc1OEMyMjc3NUVEQ0VCQTE4M0E1OTcxNUUxNDUy
RkQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MTgwNmMtNDNkMC00NjQ2LThj
OGQtNjExMTdjMjM0MWEwLzAvNjE5RUY1NTc1OEMyMjc3NUVEQ0VCQTE4M0E1OTcx
NUUxNDUyRkQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADB31Ut08kNeR9mjvAxdyT6I4YtGQbrhOTC7
y0ZZnPvugdKhA8a9ytl5j6jEuUdzoAwd7BluvYTddyEL8t8IHAOSNx4PgXr99USR
TPknV/i5SjkYwEmaWpL2Jx/SMwut6qcIT1riVJv/n/kEogO5H7DxXJzlDTt/UUsh
UEQmLdmpXK+chs7OhW5ZvfXUwiKbt/NOoJTfb2/IfFfc5bKNy85aFJrs0tq2xJyT
O+W5u7jps4ybqawQq2zsxbgRlonxkilHeh5DPBUQmOV39mwDH5m7BlF6l3mbrrbF
zwv8WxhtrwujdSY8ZdHZV+4J9TU8iAObnIyB2dRW5lvIiphZmhs=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:03 2025 by rpki-client