This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
File:                     AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json)
Hash identifier:          a1VJ8NGXvUM+9yI40VC1udA1mdn+6TvzqAewaiYWwVM=
Subject key identifier:   C2:0B:CD:29:36:0D:28:6A:42:8D:5B:66:00:B2:23:F3:F6:4A:E7:2C
Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5
Certificate issuer:       /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
Certificate serial:       765C4923252E00F26A03035C09602188E501852B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
Manifest number:          BD
Signing time:             Mon 22 Dec 2025 23:10:16 +0000
Manifest this update:     Mon 22 Dec 2025 23:05:16 +0000
Manifest next update:     Fri 26 Dec 2025 05:49:16 +0000
Files and hashes:         1: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: llbK8JVFmbrLSSzLv9Ovv2C1Mqs66Yxl6xm9VnsVOAw=)
                          2: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: 9Rk+bLwCtN8F40lqmzQmjy2Qn3pf5qNIMJVV2njhbNk=)
                          3: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: lVGKPJnCKdYLFWYhdbbJQaeUsraOdM/snE5Q21lHrTM=)
                          4: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: 3Egq3cRo6EJ7UqcOfpeiiHWc5fNhn+xEtBo+/Cw0jbA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5c:49:23:25:2e:00:f2:6a:03:03:5c:09:60:21:88:e5:01:85:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
        Validity
            Not Before: Dec 22 23:05:16 2025 GMT
            Not After : Dec 26 05:49:16 2025 GMT
        Subject: CN=C20BCD29360D286A428D5B6600B223F3F64AE72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:48:5c:46:79:d7:57:c0:a2:09:5d:14:ae:
                    8d:a5:67:2f:58:31:2f:d1:ba:e7:d7:b8:83:13:1b:
                    d8:db:16:a2:c8:86:bd:e7:a3:bf:0f:5c:6e:0b:9b:
                    8a:3c:9f:75:94:3e:aa:ff:4a:36:6a:28:3c:20:ef:
                    f9:c4:19:0d:2b:b4:a0:4f:46:f0:78:ad:c7:95:0c:
                    8e:35:97:b6:41:4e:8f:4b:9d:be:d8:f9:8a:13:87:
                    08:dd:25:23:39:b3:6a:6a:05:20:0e:b8:4b:93:87:
                    21:ad:ec:e7:b1:82:d6:ed:7f:b2:c1:e1:41:0f:1e:
                    34:f0:f4:56:36:24:5f:54:9d:43:c2:27:80:75:7a:
                    8a:94:df:e4:f9:90:28:89:91:c6:9b:5a:01:4a:3d:
                    0f:c6:20:0e:72:c4:e6:41:2e:2d:b1:a2:78:b0:3a:
                    c1:7a:8f:43:63:3c:b5:d5:2d:2f:59:c9:72:28:9d:
                    20:99:b5:80:4f:cd:09:35:5e:c6:22:2f:c6:60:b2:
                    b7:3b:20:97:3b:1f:44:c5:7d:21:bf:7c:cf:27:21:
                    cc:14:bd:c3:e8:c7:5c:b9:58:49:7e:a5:75:05:e2:
                    17:39:f4:5d:38:1d:14:b0:2c:43:b4:58:1f:48:d4:
                    7a:08:b1:93:24:a9:bd:30:97:6e:a8:6d:bc:36:9c:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0B:CD:29:36:0D:28:6A:42:8D:5B:66:00:B2:23:F3:F6:4A:E7:2C
            X509v3 Authority Key Identifier:
                keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:30:81:99:e1:7c:82:86:0c:08:fc:2f:31:48:52:d1:de:cf:
         1c:1f:47:bd:2e:2d:05:f5:61:c3:ee:47:ba:d0:8e:5a:b4:06:
         23:17:21:9f:80:55:31:bc:61:e1:66:0c:ef:de:80:f2:a6:d8:
         3e:ef:1b:c6:30:5c:fe:3a:d8:a5:1c:aa:34:ce:6f:4c:37:75:
         8a:f8:df:bc:a6:63:32:47:be:20:32:a6:b8:0d:07:ed:39:04:
         09:90:59:e9:89:56:04:4d:5a:94:d1:75:5d:da:a0:a7:59:8e:
         5b:ec:ab:d3:57:6e:32:df:59:41:e3:31:16:e3:9f:ce:f6:4c:
         7d:a3:a6:9a:f4:d5:86:86:45:5e:10:96:e0:30:1f:59:71:b7:
         a0:56:a1:e0:80:41:59:ae:bd:f1:1d:8f:f1:81:b0:a7:85:ba:
         25:26:29:8a:be:d5:58:7d:06:30:a8:89:92:4e:10:65:5b:4e:
         a6:e2:1a:a5:d6:29:cc:ea:42:74:4c:03:d7:4d:49:04:b3:08:
         ef:d3:c0:42:4a:c2:f5:23:c6:02:45:d2:62:94:27:7f:b2:f7:
         95:6c:71:e8:ea:54:57:2e:2e:a4:60:e4:d5:52:6e:94:99:e8:
         e5:5f:93:3c:fa:47:da:e0:06:8e:bd:11:7e:13:c0:c2:51:c9:
         15:e3:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----