This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
File:                     A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json)
Hash identifier:          jy7RHyIWooqEQjUex7h86jGKkhXq9YHy2TxVHOspT5c=
Subject key identifier:   06:F2:DA:34:E4:5B:96:77:32:BB:62:2F:50:97:1F:32:F8:73:36:D7
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Certificate issuer:       /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial:       3114E55846D970D6E3CBDD951124A0EB7FA68931
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
Manifest number:          011D
Signing time:             Tue 30 Dec 2025 17:11:19 +0000
Manifest this update:     Tue 30 Dec 2025 17:06:19 +0000
Manifest next update:     Sat 03 Jan 2026 01:31:19 +0000
Files and hashes:         1: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: mU76rW1SPdbeY0vYKph0+ZYnuy9KVgVLM4KatGsd2D4=)
                          2: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
                          rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 01:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:14:e5:58:46:d9:70:d6:e3:cb:dd:95:11:24:a0:eb:7f:a6:89:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
        Validity
            Not Before: Dec 30 17:06:19 2025 GMT
            Not After : Jan  3 01:31:19 2026 GMT
        Subject: CN=06F2DA34E45B967732BB622F50971F32F87336D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:5a:17:fc:80:f3:98:88:34:c8:cb:33:3a:
                    dd:bc:26:74:29:bd:6a:df:7b:c8:6b:cc:4c:9f:e6:
                    bd:a3:64:6f:e3:74:ff:10:20:52:db:20:92:a3:58:
                    c4:39:39:25:73:36:b9:39:99:4a:76:dd:77:c8:21:
                    ce:9e:8c:01:2b:e7:57:84:22:4b:ac:05:b5:d4:41:
                    96:41:a3:2b:18:e7:32:f7:63:ea:40:da:bb:3d:b2:
                    02:29:ee:8d:0e:4e:cc:88:b5:7e:7b:f9:65:77:7a:
                    c2:52:ea:76:c9:ce:7b:34:a5:5b:cc:f7:3e:dc:30:
                    c2:f7:29:f1:80:30:81:6c:32:6c:14:43:0a:de:21:
                    fb:a3:86:b9:7f:75:c3:84:09:ce:bd:d7:c8:89:e9:
                    2d:ac:9e:78:c8:df:5f:45:c4:ae:4e:f2:7c:0f:46:
                    ff:13:89:57:48:de:fe:7d:87:40:af:4c:4a:84:07:
                    f3:a7:4f:b8:28:87:fb:a3:6b:15:50:9b:3d:18:9d:
                    b9:a9:23:a6:a3:41:ca:1e:76:03:7b:b4:66:5a:ce:
                    62:e4:22:92:95:4d:35:d1:d9:93:ed:de:f9:ef:8d:
                    e5:8e:4c:06:b1:a6:67:dc:d0:9e:56:57:e5:1c:19:
                    70:2b:cb:23:6e:fc:62:4f:3d:11:56:a6:3a:1a:4e:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F2:DA:34:E4:5B:96:77:32:BB:62:2F:50:97:1F:32:F8:73:36:D7
            X509v3 Authority Key Identifier:
                keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c8:66:03:8f:8f:ab:a0:e3:ea:57:8e:d4:4e:99:6b:d3:a6:
         0f:3d:64:65:60:9d:b9:05:22:b9:59:fb:76:29:47:45:cf:37:
         ef:e3:17:36:6b:54:bc:df:ed:ff:e1:c1:ac:3d:b7:22:99:49:
         87:08:6f:3d:30:aa:e7:cb:ea:24:4a:35:3c:0c:f9:51:65:25:
         24:f2:4e:bd:ef:90:ce:c8:d5:38:3b:d1:d8:00:80:60:d4:f6:
         a2:d6:32:35:aa:ee:1d:53:c1:a8:da:52:09:09:0d:af:0f:d8:
         d1:3e:55:cc:a4:3f:0e:0f:7b:a5:da:23:af:46:5c:e2:47:a5:
         1f:77:6d:19:9e:80:1a:28:f8:dd:9b:ff:bc:f2:70:21:d8:d4:
         34:12:49:72:54:22:f8:bf:a6:1a:20:fe:d9:ff:d9:4b:14:9d:
         fd:82:d9:b6:ce:e9:f8:1f:63:42:c4:75:97:58:e0:a6:35:05:
         6c:bc:76:b0:dc:58:41:e3:05:e5:20:0b:b1:82:f3:1e:2e:d7:
         95:16:14:57:65:25:19:61:1f:04:f9:8a:3b:06:03:dd:34:03:
         25:11:da:36:f9:ff:60:4e:f9:39:05:51:4b:c6:32:54:a2:8d:
         d4:bb:99:1a:7e:63:d0:c8:67:0d:03:2b:e9:a8:5a:5d:fa:e0:
         87:22:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 01:04:54 2026 by rpki-client