This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
File:                     C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json)
Hash identifier:          +wvHYkYvzeipmdGZCHQBHco97lTVXoYcKsQhgnqlDK0=
Subject key identifier:   1B:CA:56:BA:06:79:8D:D8:E9:D5:D8:0F:59:20:99:5A:2D:7A:93:F9
Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7
Certificate issuer:       /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
Certificate serial:       7456E039274A247434730EBA81357B212E7F3503
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
Manifest number:          0137
Signing time:             Thu 18 Dec 2025 06:01:06 +0000
Manifest this update:     Thu 18 Dec 2025 05:56:06 +0000
Manifest next update:     Sun 21 Dec 2025 17:47:06 +0000
Files and hashes:         1: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: U1KZBrdXT3ldrtH1TIKb7rNmLYgy5UUIQY91pET2VY4=)
                          2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: V1YXnZ8RaD7jZMTPv9sl3RlMQ1DjfCA6C5B7VF3kpxc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl
                          rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 17:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:56:e0:39:27:4a:24:74:34:73:0e:ba:81:35:7b:21:2e:7f:35:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
        Validity
            Not Before: Dec 18 05:56:06 2025 GMT
            Not After : Dec 21 17:47:06 2025 GMT
        Subject: CN=1BCA56BA06798DD8E9D5D80F5920995A2D7A93F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:53:2d:a4:04:2a:35:fd:bf:95:1a:6e:a0:
                    82:bb:b6:b8:e5:c6:0d:86:f0:72:7e:fc:f9:7e:7d:
                    67:80:94:19:84:37:68:51:6b:7f:bd:db:70:46:f4:
                    22:49:45:af:06:1e:f6:8a:4b:44:ce:8c:b8:33:8a:
                    6f:25:13:62:03:53:96:c4:98:d4:04:19:fd:2c:a0:
                    d3:78:7d:a9:0a:fd:0b:e5:f8:7a:53:18:f5:5c:2e:
                    af:13:c6:39:ea:e0:2a:43:ac:87:08:50:42:35:b0:
                    e9:3b:33:ba:2f:0f:61:8b:18:7b:1c:dd:b5:35:5e:
                    2d:92:a3:3e:af:3f:fa:bd:b9:30:1d:30:df:83:9f:
                    e2:24:5d:5f:d5:38:44:e3:59:a7:3e:4c:11:b7:ba:
                    89:4e:8c:c0:34:3f:66:74:d6:6e:3e:b0:44:35:62:
                    1f:1b:77:55:04:3b:2e:9d:83:b1:d9:89:88:19:08:
                    a7:ae:c3:c3:00:22:9a:18:12:aa:16:7a:a6:39:1e:
                    3f:84:e4:c5:2e:c9:b5:8d:62:37:95:66:a6:df:38:
                    ab:54:ce:5d:6f:ed:ba:d8:ed:f2:d2:18:dd:6b:09:
                    59:a2:cd:27:75:1e:a8:d0:33:8c:51:57:bc:98:df:
                    17:41:0c:18:03:38:23:db:59:e7:14:55:7c:bd:5e:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:56:BA:06:79:8D:D8:E9:D5:D8:0F:59:20:99:5A:2D:7A:93:F9
            X509v3 Authority Key Identifier:
                keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:41:fc:60:f5:a5:34:81:56:6d:2e:dc:a9:87:15:4d:57:
         d1:88:1a:b3:e6:4f:6b:ce:c3:41:e4:9c:16:42:f6:08:d0:ee:
         91:c5:2c:aa:9d:54:48:73:5c:f8:78:2f:fc:10:e4:bd:c8:5a:
         d8:86:dd:16:65:86:ee:bc:71:82:4a:c7:c1:a8:58:60:16:69:
         d5:5e:15:28:aa:a8:f3:45:51:d8:ba:85:0a:89:9d:40:b4:87:
         74:e7:67:60:60:30:81:89:e5:4b:bb:0d:7c:7c:4a:22:de:b3:
         b4:d8:03:ab:38:61:66:aa:c2:5c:00:bd:f4:01:90:93:50:66:
         ea:86:e2:6d:bf:00:60:4d:62:ff:e9:96:e6:6c:82:ea:0e:d5:
         84:1a:0e:f7:58:68:5e:f4:49:55:5f:d0:96:50:37:84:c6:8b:
         16:da:16:03:a2:31:76:54:54:a1:b2:01:b8:17:78:c3:52:ec:
         8b:0f:bf:cc:02:84:3d:ff:4c:f5:84:31:c0:a6:c1:78:99:d0:
         c5:4b:e4:02:4a:cd:72:9a:c2:1e:4e:b7:49:fa:3a:d2:8c:f5:
         7b:15:9f:6a:8e:bf:b0:e9:16:9b:ab:06:b5:e2:0b:60:ab:ff:
         4e:62:75:d2:ba:62:20:2a:70:05:ac:da:d7:15:0c:6d:ae:f4:
         f9:23:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:51:48 2025 by rpki-client