This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
File:                     F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json)
Hash identifier:          iWvZ+VaYtoD8obC53HruhIgKETFMPuhO98RGOfofGaA=
Subject key identifier:   6A:7C:CA:6C:DA:76:D0:FD:39:03:E7:A9:0C:4F:D5:8D:C1:BD:3C:6C
Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
Certificate issuer:       /CN=F69535097C181B143312D8EA1A6A52D500443902
Certificate serial:       04F8F0E4800333258A6C5053143D50EB096D5462
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
Manifest number:          E2
Signing time:             Wed 31 Dec 2025 12:51:22 +0000
Manifest this update:     Wed 31 Dec 2025 12:46:22 +0000
Manifest next update:     Sat 03 Jan 2026 19:30:22 +0000
Files and hashes:         1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=)
                          2: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: KE3sqfZUiKicXVCxb7Bk+8gtBTUWrF7peYMumpqAsgk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
                          rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 10:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f8:f0:e4:80:03:33:25:8a:6c:50:53:14:3d:50:eb:09:6d:54:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902
        Validity
            Not Before: Dec 31 12:46:22 2025 GMT
            Not After : Jan  3 19:30:22 2026 GMT
        Subject: CN=6A7CCA6CDA76D0FD3903E7A90C4FD58DC1BD3C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:ea:26:fb:1b:56:c3:30:84:2c:57:48:d2:
                    4b:3e:d8:e8:48:ee:b7:2d:48:7f:5a:d8:5d:4e:ff:
                    14:5f:b7:2c:68:5e:c2:0e:e1:88:b7:2b:ae:38:5f:
                    57:57:ad:6c:d8:b1:37:6a:95:8f:9c:e1:33:b6:eb:
                    ce:22:6b:c7:5d:e4:b5:5a:b3:4d:f8:b2:68:cc:61:
                    00:e4:16:f1:43:ae:ba:e1:26:36:c0:c5:4d:48:f8:
                    7f:aa:f3:b8:fc:d5:8d:ed:e0:b1:0b:3f:76:90:20:
                    25:20:13:5c:90:9d:57:9d:d4:d8:00:83:ea:ec:e2:
                    3f:85:be:20:6a:35:4f:ed:0d:92:4b:f9:63:4b:ba:
                    f9:33:d4:35:a2:b6:16:79:4a:b9:94:25:7e:ef:c1:
                    ab:39:1e:6d:3a:2e:f8:7f:00:c2:51:7b:40:7a:48:
                    7c:9d:be:20:e2:9d:21:f8:53:7d:6b:28:97:28:a3:
                    11:40:d3:45:4e:ce:7c:10:bc:c7:b1:5a:07:71:b4:
                    03:c7:63:39:79:4b:e6:37:3f:d2:f6:73:24:58:1c:
                    6e:33:10:80:49:18:2b:34:ad:5c:44:11:40:75:ec:
                    3c:2b:74:06:f3:d8:da:18:de:61:63:6e:d9:3b:ae:
                    d8:1d:64:1f:bd:d0:42:7e:23:83:30:92:58:4d:6b:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7C:CA:6C:DA:76:D0:FD:39:03:E7:A9:0C:4F:D5:8D:C1:BD:3C:6C
            X509v3 Authority Key Identifier:
                keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3e:bc:c3:40:af:4f:fc:84:80:d9:6c:c0:f9:76:07:16:6e:
         7f:e5:10:60:26:1a:54:91:67:57:0d:de:f8:b8:ed:de:67:9d:
         62:68:90:bd:7c:4d:fe:e5:d6:13:fc:21:c3:96:6e:c6:ec:ec:
         c0:7a:9e:f9:8f:b1:b9:e9:a3:45:d7:dd:67:c0:b1:5a:c2:cb:
         77:54:af:f6:fe:bf:c8:52:f0:21:d6:0c:e1:44:ad:9a:4d:17:
         ec:39:d1:ef:53:b7:21:74:9b:81:99:48:1a:1c:3e:fc:00:36:
         b1:24:96:7f:d5:d7:de:9d:73:ac:3e:43:3c:7e:18:de:03:f5:
         86:d7:2b:eb:8e:d9:ba:57:cb:65:e3:3f:43:77:9a:ec:bb:2d:
         0c:25:63:6d:38:40:ad:bc:f0:77:88:72:32:76:19:a7:8e:b7:
         c2:d5:13:96:6b:34:a5:9a:2b:25:f9:a4:b7:35:68:53:63:fe:
         db:70:2b:32:2f:f3:cd:e8:f2:ee:aa:cb:4d:05:ac:56:1d:44:
         62:b0:b5:a5:30:c8:2a:5a:5b:76:ea:c3:88:ed:49:e9:20:a2:
         79:e2:2e:41:6e:c8:90:00:ef:15:7a:ef:9b:1a:a9:53:1c:62:
         d6:da:b4:d2:9a:1b:a0:84:1b:a5:88:de:e5:ce:2b:b0:f2:a8:
         e7:0c:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 21:13:24 2025 by rpki-client