This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
File:                     6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json)
Hash identifier:          7xm5tE8n68gm4XSXoVvAaVux3S8bzf9hy8DCCFMnHB8=
Subject key identifier:   A4:BF:50:06:AB:D7:44:43:17:08:20:8C:7F:79:F0:F3:03:C4:24:CF
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Certificate issuer:       /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial:       6D4E1DA2F1AFA36D2A93912CC3EF082874BBF51A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
Manifest number:          A6
Signing time:             Tue 16 Dec 2025 17:02:25 +0000
Manifest this update:     Tue 16 Dec 2025 16:57:25 +0000
Manifest next update:     Sat 20 Dec 2025 03:00:25 +0000
Files and hashes:         1: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: H33ymI9ju2NfQ2pOTJN+8hPqJ6LyJFP7aCyIqWIccfg=)
                          2: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: 2bo14asIeMFuulQFAuyOMWvwruZszgFyWNm1gWivGps=)
                          3: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: qHrXMqQTucTeofIinh+6AXijbtXSBcDb8eithAS0vbA=)
                          4: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: qZQ4FJYs46n/+hOc10zmPRfwJHK6+NPt/Sqykb6up2s=)
                          5: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: jZM60p+ihsOsnG/o5i9hHgFmzFPD3WS1aTcQqe2yPLg=)
                          6: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: +hUiKGjNBdX0t5XyVoEGWfbtJN2Ytj7Rbwxf8+Ephlk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
                          rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4e:1d:a2:f1:af:a3:6d:2a:93:91:2c:c3:ef:08:28:74:bb:f5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
        Validity
            Not Before: Dec 16 16:57:25 2025 GMT
            Not After : Dec 20 03:00:25 2025 GMT
        Subject: CN=A4BF5006ABD744431708208C7F79F0F303C424CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:a6:54:57:73:82:2a:23:09:3a:33:48:2e:
                    af:74:01:6a:fa:d2:6f:9d:91:ff:71:41:35:61:92:
                    bd:fd:b5:ff:19:ee:85:e8:29:e0:3e:1e:eb:c1:f9:
                    32:fb:50:2d:c8:75:91:fd:43:f0:dc:b8:47:7e:bc:
                    cf:80:b4:64:0f:f6:47:96:c5:c9:46:61:4a:7e:e1:
                    9d:63:e1:2d:64:c5:1e:28:80:e0:c3:47:bf:3d:02:
                    0a:f7:56:6f:fd:ef:2b:7b:16:d6:c0:ce:b9:28:a7:
                    37:91:c1:d1:cf:94:f9:9d:18:21:82:8c:23:1d:3d:
                    5c:43:af:f2:9b:6c:42:2d:11:0d:c0:07:4c:32:54:
                    80:0a:79:2e:60:3d:9a:ee:87:fa:75:94:f8:32:34:
                    b2:38:68:7e:36:1f:e6:42:2a:18:ba:aa:ee:b8:28:
                    1d:85:51:30:7d:e9:4d:0f:80:fe:bf:c0:b9:29:0b:
                    8e:58:79:c5:88:3a:a8:fa:58:d9:ab:b8:66:31:c4:
                    f6:c0:ab:af:20:6e:57:47:18:b7:c8:7d:6d:4b:bc:
                    85:e2:e6:32:89:35:af:2e:b4:d7:10:88:0e:da:fc:
                    c4:f7:b8:9f:90:d6:d5:c1:a9:8b:4d:39:1e:db:0a:
                    f7:5c:fe:58:f4:40:8f:94:27:17:49:a0:60:f2:3d:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BF:50:06:AB:D7:44:43:17:08:20:8C:7F:79:F0:F3:03:C4:24:CF
            X509v3 Authority Key Identifier:
                keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:23:14:50:2c:d0:f4:60:9a:81:83:68:78:85:50:58:51:
         04:71:75:3c:d8:8f:d3:01:7c:cf:b6:1b:7b:75:c6:bf:f9:c4:
         f5:49:b5:ce:49:47:bb:d5:a4:74:63:67:4a:8b:64:04:4a:ad:
         b8:42:42:32:09:96:77:6f:20:ce:01:18:52:13:56:d0:ef:c8:
         90:97:8a:a0:5e:21:bd:57:46:f4:b8:74:83:d2:44:e1:6e:d0:
         3a:c1:47:eb:a6:27:5d:89:e5:26:10:19:a3:af:dd:b9:ff:d9:
         43:cc:26:dc:fa:ef:8c:ff:21:bb:92:9c:78:4e:25:d7:6e:42:
         14:0a:18:34:9e:8c:0e:44:0b:c3:b5:60:d8:88:f7:63:6f:bc:
         f7:f5:f3:1f:86:0c:fc:28:c2:e1:55:b6:6b:8f:a6:c6:9b:d3:
         fb:b9:f2:61:f4:d4:bf:14:40:dd:df:b0:ff:05:73:89:c7:88:
         b8:fc:fd:5e:0b:04:d3:3c:54:48:c6:7f:cb:d8:8d:08:b4:36:
         30:b5:5a:2a:50:f7:3c:ed:af:77:88:ae:2a:34:5e:76:8d:fc:
         a9:fb:14:41:89:b0:12:39:9f:28:91:36:6e:a6:2d:c5:4e:bd:
         3d:43:23:20:b2:e4:e0:df:9b:fb:e4:ea:e6:8d:40:62:b1:16:
         91:cb:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:33:12 2025 by rpki-client