This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
File:                     BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json)
Hash identifier:          y+/c6TxzdRD/pWPxIQnfTP4U7sJcY54IaIUIgIy2Yig=
Subject key identifier:   6E:6E:4D:7A:42:8C:1A:40:B0:FE:93:CB:17:70:79:34:B6:5D:91:76
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       7C86498AEFA6473CD9BC9D871754DEA3D0106AA5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
Manifest number:          0536
Signing time:             Mon 22 Dec 2025 09:00:52 +0000
Manifest this update:     Mon 22 Dec 2025 08:55:52 +0000
Manifest next update:     Thu 25 Dec 2025 20:21:52 +0000
Files and hashes:         1: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=)
                          2: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: lYXAKTIKfqZ7vRFVINt00ulxTrlIbI62p3ONPAeyfuw=)
                          3: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=)
                          4: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=)
                          5: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=)
                          6: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=)
                          7: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=)
                          8: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=)
                          9: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:86:49:8a:ef:a6:47:3c:d9:bc:9d:87:17:54:de:a3:d0:10:6a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Dec 22 08:55:52 2025 GMT
            Not After : Dec 25 20:21:52 2025 GMT
        Subject: CN=6E6E4D7A428C1A40B0FE93CB17707934B65D9176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:ad:98:5e:1a:53:01:36:d6:6e:0f:2b:46:
                    a8:85:be:42:14:24:55:5e:41:78:c0:a2:aa:4c:3d:
                    86:eb:9a:e5:cc:86:ab:10:79:fa:95:ea:76:cd:a8:
                    01:a5:ac:17:85:1c:96:75:95:f1:0a:65:8b:72:03:
                    27:dc:83:c8:70:d3:25:c4:db:62:fd:da:e6:66:aa:
                    18:74:87:b1:9d:b9:02:2a:07:5f:bf:24:15:60:81:
                    d5:ba:a8:d8:bd:98:5b:12:ca:81:fd:5c:ca:c3:6c:
                    21:29:71:87:e5:6b:b6:16:ad:a0:a5:ab:aa:eb:70:
                    88:99:37:c7:e1:c1:e9:fb:50:d0:78:71:91:d9:5f:
                    9f:7a:94:b2:62:b4:58:05:e9:db:f5:4d:33:42:92:
                    80:35:72:4b:82:03:3a:eb:41:fb:c4:29:59:67:f6:
                    01:d3:57:7c:c4:d6:22:5b:4e:e7:3d:ac:23:ea:e2:
                    5c:c3:77:96:e3:71:44:dd:69:0c:be:96:4a:bc:a3:
                    24:78:cd:71:38:2f:cc:4f:2d:1e:ed:58:59:ba:a7:
                    1f:8e:c2:4b:5b:60:b5:a5:62:a0:42:1e:ba:08:50:
                    54:f0:d6:be:f9:dc:e9:71:67:7a:c9:c9:ca:db:4b:
                    ba:44:27:0b:ba:b3:13:c8:b1:5b:15:d0:f0:16:73:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6E:4D:7A:42:8C:1A:40:B0:FE:93:CB:17:70:79:34:B6:5D:91:76
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:18:a5:a9:d2:95:0e:c2:cc:a3:e4:54:ce:68:4e:4f:62:79:
         a9:5a:45:a7:89:55:df:69:bf:34:cc:8b:8d:41:89:7e:ca:cb:
         71:f1:76:be:69:d0:ef:0f:5a:82:1a:89:a5:c9:ab:b6:af:94:
         06:36:c5:f9:fa:bc:58:8c:01:61:61:bf:81:3d:20:17:cc:df:
         1f:7e:0b:24:3d:6e:29:7c:25:b3:1f:4d:80:ba:e4:b1:3c:81:
         6f:f2:67:08:96:53:f4:18:ed:68:e8:9e:94:23:72:19:a2:a1:
         2b:43:4f:99:15:14:6d:66:1c:d2:a6:67:69:5b:19:00:ff:39:
         43:97:5c:e7:9e:b7:c7:7e:20:ca:e7:fc:34:5a:a4:e5:e7:9a:
         19:2b:2a:4e:c4:39:8c:58:22:b7:cf:91:28:8c:2d:f4:da:0b:
         a3:d2:8f:6b:cd:ba:85:59:aa:bb:4e:c5:8b:c9:11:d5:e6:fc:
         72:60:ed:59:41:c2:ac:87:af:8c:ea:2a:86:2a:de:15:83:ca:
         bc:63:f1:b9:c7:9a:95:33:ed:24:1d:bf:81:6b:cb:0c:6d:90:
         21:e1:bf:85:05:13:2a:11:3c:dd:47:e6:70:62:3f:d5:14:0b:
         80:5a:50:1e:69:12:55:98:69:e7:0f:4c:13:46:06:7a:50:bf:
         b2:73:15:f9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfIZJiu+mRzzZvJ2HF1Teo9AQaqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw
RjFDNDg5RTAeFw0yNTEyMjIwODU1NTJaFw0yNTEyMjUyMDIxNTJaMDMxMTAvBgNV
BAMTKDZFNkU0RDdBNDI4QzFBNDBCMEZFOTNDQjE3NzA3OTM0QjY1RDkxNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oa2YXhpTATbWbg8rRqiFvkIU
JFVeQXjAoqpMPYbrmuXMhqsQefqV6nbNqAGlrBeFHJZ1lfEKZYtyAyfcg8hw0yXE
22L92uZmqhh0h7GduQIqB1+/JBVggdW6qNi9mFsSyoH9XMrDbCEpcYfla7YWraCl
q6rrcIiZN8fhwen7UNB4cZHZX596lLJitFgF6dv1TTNCkoA1ckuCAzrrQfvEKVln
9gHTV3zE1iJbTuc9rCPq4lzDd5bjcUTdaQy+lkq8oyR4zXE4L8xPLR7tWFm6px+O
wktbYLWlYqBCHroIUFTw1r753OlxZ3rJycrbS7pEJwu6sxPIsVsV0PAWc8iXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbm5NekKMGkCw/pPLF3B5NLZdkXYwHwYDVR0j
BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC
RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD
NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx
ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG
NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEcYpanSlQ7CzKPkVM5oTk9iealaRaeJVd9p
vzTMi41BiX7Ky3Hxdr5p0O8PWoIaiaXJq7avlAY2xfn6vFiMAWFhv4E9IBfM3x9+
CyQ9bil8JbMfTYC65LE8gW/yZwiWU/QY7WjonpQjchmioStDT5kVFG1mHNKmZ2lb
GQD/OUOXXOeet8d+IMrn/DRapOXnmhkrKk7EOYxYIrfPkSiMLfTaC6PSj2vNuoVZ
qrtOxYvJEdXm/HJg7VlBwqyHr4zqKoYq3hWDyrxj8bnHmpUz7SQdv4FrywxtkCHh
v4UFEyoRPN1H5nBiP9UUC4BaUB5pElWYaecPTBNGBnpQv7JzFfk=
-----END CERTIFICATE-----
Generated at Tue Dec 23 16:57:25 2025 by rpki-client