This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft
File:                     B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft (raw, json)
Hash identifier:          U4h6kYBxoutElRxbBweI9WnRVLWzhNxx8nsRO8UZ1DM=
Subject key identifier:   38:FA:3F:BC:1A:40:7D:12:DC:EC:B7:EA:07:60:89:DC:1E:C5:B8:A7
Authority key identifier: B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B
Certificate issuer:       /CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B
Certificate serial:       077E576A7796E95E435D7E073A6DD422F73466B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft
Manifest number:          04C2
Signing time:             Mon 29 Dec 2025 10:42:10 +0000
Manifest this update:     Mon 29 Dec 2025 10:37:10 +0000
Manifest next update:     Thu 01 Jan 2026 13:11:10 +0000
Files and hashes:         1: B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl (hash: fVnelnidvo8pSZgjFT+Ryn4RWlU3dI7UK6GqhJgX57c=)
                          2: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: NqObVqd5RFS36G2zVhBk4F5X4p1gzlJwj4/LivREaBM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl
                          rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 13:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7e:57:6a:77:96:e9:5e:43:5d:7e:07:3a:6d:d4:22:f7:34:66:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B
        Validity
            Not Before: Dec 29 10:37:10 2025 GMT
            Not After : Jan  1 13:11:10 2026 GMT
        Subject: CN=38FA3FBC1A407D12DCECB7EA076089DC1EC5B8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:6b:66:2f:19:d7:c3:7b:cb:20:36:84:42:
                    d5:c4:4f:9e:e1:d2:29:9a:11:06:27:9f:88:cf:6f:
                    73:e3:8f:aa:3c:b8:88:cf:d0:68:63:82:a6:13:f3:
                    bc:16:05:b0:59:9e:5f:15:57:2f:96:fd:c7:13:a6:
                    8b:d9:da:49:ab:a6:43:77:fa:d9:63:df:45:a4:a1:
                    db:51:d4:8b:7f:11:40:c6:3b:b5:9a:31:ec:04:80:
                    ab:be:92:0c:49:9b:2d:5d:03:8d:4c:3c:bb:94:f5:
                    e9:a6:0c:35:86:1a:b8:12:d5:36:e9:e3:6d:e0:5c:
                    e3:97:69:60:c9:c7:e5:42:2d:71:69:85:a8:60:82:
                    d4:d3:04:b3:ac:aa:66:1d:ea:b9:f8:8c:59:d5:f9:
                    da:1f:05:14:2d:b7:44:63:88:bd:9a:b1:c3:fb:36:
                    c8:a2:ca:e4:d0:22:90:98:e5:60:7f:12:05:2a:30:
                    fa:3d:ec:02:7b:57:f5:b3:c6:2e:bc:f2:4e:b2:91:
                    2f:a0:95:fa:19:94:06:c6:9e:3a:ec:a3:17:29:99:
                    69:a2:01:df:3a:6b:a5:ec:1b:0c:63:ba:1a:4a:dd:
                    c3:15:77:23:94:6c:73:1a:2d:49:c7:c3:f6:5e:51:
                    e2:75:0e:57:67:4f:42:72:fa:a3:24:62:09:e2:7d:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FA:3F:BC:1A:40:7D:12:DC:EC:B7:EA:07:60:89:DC:1E:C5:B8:A7
            X509v3 Authority Key Identifier:
                keyid:B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:77:0b:ec:a7:18:f8:5a:8e:1a:af:44:f4:50:95:04:a1:eb:
         7f:68:76:a3:df:68:ee:03:ec:82:87:8f:c2:42:b0:46:2a:be:
         6f:83:41:44:87:25:0d:96:0e:6e:89:66:ed:4d:d8:c6:b1:4b:
         83:de:d7:19:12:d0:6c:2a:79:d6:d4:85:38:46:c4:2a:3f:9e:
         9d:2d:1c:1c:27:9a:61:49:48:8d:25:e4:41:bf:a2:fb:c0:da:
         f0:d7:8b:1c:51:82:93:51:1f:63:ea:c3:a4:aa:d0:33:2b:3a:
         dc:63:8c:50:b7:b8:e3:80:11:44:67:94:f3:18:15:7b:83:d7:
         08:30:9b:60:9a:bb:fe:13:59:68:24:4a:bd:5d:d6:7f:f4:0c:
         d4:c0:db:ac:93:62:1f:99:52:d7:c4:ea:7f:a7:c3:f3:a0:bc:
         e7:30:e7:16:8c:cd:f8:63:31:7d:24:39:59:8c:b4:94:f4:b8:
         b2:8b:38:66:56:e5:03:55:ec:4e:ae:22:8b:cb:aa:e2:c0:a7:
         12:f2:62:b7:7e:2e:a5:01:c4:01:f3:a2:1a:e3:92:2e:a6:f3:
         b1:7d:89:f6:89:4a:8a:5d:e7:4b:95:61:3d:ca:8a:a8:46:3d:
         da:06:33:98:74:21:b6:35:2b:92:bf:cf:95:42:18:93:92:69:
         5b:7b:35:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:10:35 2025 by rpki-client