This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
File:                     6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json)
Hash identifier:          90I9bT0PIbcS8VOb7gaN+eZpT0dkiFpiDBEYiFAMmC4=
Subject key identifier:   69:3E:2B:F7:E3:E8:08:A7:5B:19:3D:39:76:D6:01:66:BE:44:82:4D
Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95
Certificate issuer:       /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95
Certificate serial:       072AAD096532C085E234387541981589E7EC419A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
Manifest number:          053B
Signing time:             Sat 03 Jan 2026 11:52:13 +0000
Manifest this update:     Sat 03 Jan 2026 11:47:12 +0000
Manifest next update:     Tue 06 Jan 2026 21:36:12 +0000
Files and hashes:         1: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: LqkqlZbFHNNaC9LTpy60eTz3G5lDY2NEKrwEjJQGN2Y=)
                          2: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl
                          rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 21:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2a:ad:09:65:32:c0:85:e2:34:38:75:41:98:15:89:e7:ec:41:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95
        Validity
            Not Before: Jan  3 11:47:12 2026 GMT
            Not After : Jan  6 21:36:12 2026 GMT
        Subject: CN=693E2BF7E3E808A75B193D3976D60166BE44824D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:77:4d:e4:ef:bb:7c:01:05:c2:63:4a:be:
                    ad:b8:98:63:f4:08:da:7e:f3:46:92:31:37:ec:b4:
                    8e:1b:ae:d7:80:47:59:dc:91:02:a7:46:9b:39:95:
                    4b:93:37:76:f3:ad:a8:9a:20:14:3c:d0:50:67:cc:
                    b9:db:b6:c4:81:08:a2:13:12:ff:4c:dc:2f:f8:d5:
                    29:e3:0c:3b:42:00:e2:27:e3:d1:53:78:6f:f0:2c:
                    cd:e7:91:0a:ee:0d:c0:01:93:b2:4d:97:68:f2:bf:
                    80:70:04:aa:81:b6:2f:53:e0:f4:58:04:e6:24:b7:
                    50:35:de:f0:37:2e:de:b4:3f:e5:ea:9b:43:45:c0:
                    ee:21:94:41:09:75:a6:c3:14:9c:bf:6c:31:a6:b5:
                    ce:52:91:17:7c:f5:96:75:c6:2c:30:6d:19:fa:5f:
                    f9:5d:23:46:0b:82:a0:0d:9d:21:cb:f2:28:d6:dd:
                    32:da:8a:78:03:72:38:59:2c:e8:ad:6e:25:a3:b3:
                    a3:c8:a6:17:62:46:33:fe:71:d5:8f:24:d2:7a:3c:
                    6f:a7:05:f5:14:2b:c8:99:ef:bf:eb:3e:3a:9c:cc:
                    00:4f:de:1d:00:fb:d2:bc:41:ee:fe:73:5e:65:49:
                    26:6e:fe:94:4a:a5:04:13:a2:f4:4e:90:8e:df:85:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:2B:F7:E3:E8:08:A7:5B:19:3D:39:76:D6:01:66:BE:44:82:4D
            X509v3 Authority Key Identifier:
                keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:a5:e6:6b:35:76:b4:7c:ed:42:6f:82:6d:22:2c:5e:6e:
         c1:15:a6:e5:dc:b1:94:15:2a:89:94:04:bf:08:36:1f:4a:d9:
         b3:ac:b5:ea:73:fd:46:36:30:f2:24:d9:46:72:09:84:97:0c:
         4d:7c:c8:19:e7:3c:2c:22:d4:da:35:a3:31:13:7a:d6:36:31:
         5a:38:85:ed:03:5e:38:27:d0:e4:67:05:1e:14:3e:4d:d3:63:
         bf:ac:ef:86:df:2a:a8:4b:3d:34:a2:bc:0a:4c:77:db:33:5b:
         03:33:4a:04:a4:9d:81:92:58:32:66:67:40:f7:70:ba:f7:78:
         26:50:fb:41:5b:98:62:40:78:51:5a:4d:56:da:a3:fa:60:09:
         ca:1c:93:0c:b5:29:39:7f:e0:a3:ad:cc:6a:18:82:a8:90:b2:
         27:1d:92:06:29:36:68:80:f8:c9:f5:72:af:a2:57:c0:e2:f0:
         45:be:db:38:a9:a7:40:d6:5e:09:6a:3d:c6:f6:2b:33:aa:01:
         2a:42:6f:bb:de:40:ce:90:be:f3:43:44:2a:8d:a8:62:a6:ae:
         0f:b1:eb:30:04:20:5c:89:bc:57:c8:61:13:69:60:83:c5:33:
         52:03:df:50:53:95:d0:b8:08:46:f7:0f:62:ef:2e:4b:4f:e5:
         44:03:45:25
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUByqtCWUywIXiNDh1QZgViefsQZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgy
RTVDMEE5NTAeFw0yNjAxMDMxMTQ3MTJaFw0yNjAxMDYyMTM2MTJaMDMxMTAvBgNV
BAMTKDY5M0UyQkY3RTNFODA4QTc1QjE5M0QzOTc2RDYwMTY2QkU0NDgyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrXdN5O+7fAEFwmNKvq24mGP0
CNp+80aSMTfstI4brteAR1nckQKnRps5lUuTN3bzraiaIBQ80FBnzLnbtsSBCKIT
Ev9M3C/41SnjDDtCAOIn49FTeG/wLM3nkQruDcABk7JNl2jyv4BwBKqBti9T4PRY
BOYkt1A13vA3Lt60P+Xqm0NFwO4hlEEJdabDFJy/bDGmtc5SkRd89ZZ1xiwwbRn6
X/ldI0YLgqANnSHL8ijW3TLaingDcjhZLOitbiWjs6PIphdiRjP+cdWPJNJ6PG+n
BfUUK8iZ77/rPjqczABP3h0A+9K8Qe7+c15lSSZu/pRKpQQTovROkI7fhXJzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaT4r9+PoCKdbGT05dtYBZr5Egk0wHwYDVR0j
BBgwFoAUap3FZsjL8dfOsX/JkXrNWC5cCpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC82QTlEQzU2NkM4
Q0JGMUQ3Q0VCMTdGQzk5MTdBQ0Q1ODJFNUMwQTk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgyRTVD
MEE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz
MzYtYmU0NzE0ODE2ZmFkLzAvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNE
NTgyRTVDMEE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG+YpeZrNXa0fO1Cb4JtIixebsEVpuXcsZQV
KomUBL8INh9K2bOstepz/UY2MPIk2UZyCYSXDE18yBnnPCwi1No1ozETetY2MVo4
he0DXjgn0ORnBR4UPk3TY7+s74bfKqhLPTSivApMd9szWwMzSgSknYGSWDJmZ0D3
cLr3eCZQ+0FbmGJAeFFaTVbao/pgCcockwy1KTl/4KOtzGoYgqiQsicdkgYpNmiA
+Mn1cq+iV8Di8EW+2zipp0DWXglqPcb2KzOqASpCb7veQM6QvvNDRCqNqGKmrg+x
6zAEIFyJvFfIYRNpYIPFM1ID31BTldC4CEb3D2LvLktP5UQDRSU=
-----END CERTIFICATE-----
Generated at Mon Jan 5 19:10:39 2026 by rpki-client