This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
File:                     6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json)
Hash identifier:          jjMcdi8vN+AfLv6riSWBa1GvyWvtit4oV519Q4Ys6KQ=
Subject key identifier:   A0:E1:BF:5A:23:CF:B3:EB:93:2D:66:48:51:46:3E:01:1E:CB:0E:7B
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       3B6F524C07C6CB371DC477E37AAD2065FA5B9590
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
Manifest number:          02A4
Signing time:             Thu 18 Dec 2025 16:01:33 +0000
Manifest this update:     Thu 18 Dec 2025 15:56:33 +0000
Manifest next update:     Sun 21 Dec 2025 19:28:33 +0000
Files and hashes:         1: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: +1/NKTo1zjk1P1ZAkPLDaaCsjoolxhbaib5j0otnVl8=)
                          2: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: 7skPXD0GcBP0y8K0CJN6k0vAhi8+IRcH6Kcm8uU8vVs=)
                          3: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: 929HjZKM2U9NGhLwvwm0FcNGWgTaQuzqUiYIP79SHw0=)
                          4: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4=)
                          5: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: fJ4g0K772WVp53tZH6Cr6nPqsZvGnVS3VfLvicif+Ms=)
                          6: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: PpAfKuTLC2LZflDGFc6yX8hZy8hNL9DWJF0ArhdPsJs=)
                          7: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: kIaQGWL5YUwAplbYF3rxqdRNmuWMqoQK88/zSxpS0Qk=)
                          8: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: M2pyi/IMF/9bDLHyO64naWXcT6UxKr+6hMI7b6iDcRY=)
                          9: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 19:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6f:52:4c:07:c6:cb:37:1d:c4:77:e3:7a:ad:20:65:fa:5b:95:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Dec 18 15:56:33 2025 GMT
            Not After : Dec 21 19:28:33 2025 GMT
        Subject: CN=A0E1BF5A23CFB3EB932D664851463E011ECB0E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:2a:70:6d:3f:87:2f:d0:db:cb:49:fd:73:
                    fe:22:89:c5:ca:89:6b:c0:9d:cc:01:29:31:e9:8a:
                    d7:74:92:df:6d:6c:41:ef:d4:34:c4:43:f7:f7:40:
                    66:af:e9:35:9e:18:99:4f:ad:0c:fe:84:2e:e8:49:
                    da:f2:82:8c:8f:83:16:a0:b7:ce:79:02:36:b5:00:
                    14:54:77:e9:34:80:d4:ce:62:fc:31:be:8d:8a:70:
                    b3:0f:13:8c:91:a7:dc:58:e9:f2:e6:65:69:3d:f3:
                    99:b2:5e:58:dd:7c:f7:da:02:91:fc:08:96:35:0d:
                    85:46:b2:1b:49:57:4b:5a:2d:da:1a:60:ff:07:b3:
                    7f:b6:e2:5f:bf:88:34:fa:cb:9e:bc:e9:a5:89:1e:
                    a3:96:c0:0e:ff:f5:d7:ae:c8:ea:24:bb:74:5b:db:
                    33:7f:08:7c:ba:96:94:e1:fa:57:d2:fa:2d:6f:0b:
                    52:44:a7:9a:57:7d:d4:21:29:69:52:aa:9e:73:d2:
                    dc:fd:11:0a:39:cd:72:cd:3b:c8:41:77:47:1d:16:
                    15:59:57:9e:78:cd:3b:08:3a:4d:ef:e4:87:95:0c:
                    23:d2:e5:75:60:ae:c1:af:df:dc:a7:99:20:cf:d6:
                    23:42:4b:ed:c6:21:63:48:2c:39:7c:71:2d:31:2e:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E1:BF:5A:23:CF:B3:EB:93:2D:66:48:51:46:3E:01:1E:CB:0E:7B
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:66:f7:bc:b8:b9:dd:bd:46:16:a2:20:7e:97:bd:02:58:f3:
         ec:2d:4f:06:23:96:4c:bf:95:05:78:d0:5c:c9:2a:db:73:7b:
         21:4f:2f:60:80:4f:23:96:ac:9b:35:7f:07:52:46:53:f2:a1:
         7f:8b:1e:83:a1:d4:f0:d0:35:8c:d0:8c:62:5e:f6:93:57:13:
         14:be:77:62:0a:dc:5c:20:7b:1b:f1:09:af:5b:e5:95:2a:a3:
         ea:66:0d:6a:3e:9b:d1:6b:70:f3:68:9d:53:8e:4f:ff:33:cf:
         49:f4:0b:02:f1:23:42:57:2c:0b:ae:3a:58:6e:9f:7b:d1:27:
         f9:55:cd:53:fc:0d:b3:a3:86:b1:02:80:da:b0:8c:61:31:03:
         8a:9a:9b:5b:39:ed:19:25:21:3e:92:41:8f:13:21:01:04:33:
         34:ec:4a:c6:bd:b6:68:60:49:12:25:83:23:1d:ef:c1:52:7b:
         1f:38:32:53:76:5c:5d:bd:60:7d:92:00:c7:7a:6e:d8:1f:60:
         c5:d6:4a:00:6a:57:91:6e:4d:17:ee:31:24:5b:d4:e8:3c:a6:
         92:db:13:6d:aa:d1:23:c8:20:d6:12:67:be:0c:0a:3a:28:29:
         2c:97:cd:ab:7e:77:3a:7f:9e:24:d1:b2:09:09:8f:f2:c9:77:
         2a:17:9c:82
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO29STAfGyzcdxHfjeq0gZfpblZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx
QkYxMzA2MTAeFw0yNTEyMTgxNTU2MzNaFw0yNTEyMjExOTI4MzNaMDMxMTAvBgNV
BAMTKEEwRTFCRjVBMjNDRkIzRUI5MzJENjY0ODUxNDYzRTAxMUVDQjBFN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChkipwbT+HL9Dby0n9c/4iicXK
iWvAncwBKTHpitd0kt9tbEHv1DTEQ/f3QGav6TWeGJlPrQz+hC7oSdrygoyPgxag
t855Aja1ABRUd+k0gNTOYvwxvo2KcLMPE4yRp9xY6fLmZWk985myXljdfPfaApH8
CJY1DYVGshtJV0taLdoaYP8Hs3+24l+/iDT6y5686aWJHqOWwA7/9deuyOoku3Rb
2zN/CHy6lpTh+lfS+i1vC1JEp5pXfdQhKWlSqp5z0tz9EQo5zXLNO8hBd0cdFhVZ
V554zTsIOk3v5IeVDCPS5XVgrsGv39ynmSDP1iNCS+3GIWNILDl8cS0xLhaHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUoOG/WiPPs+uTLWZIUUY+AR7LDnswHwYDVR0j
BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz
OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx
MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh
MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF
NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGFm97y4ud29RhaiIH6XvQJY8+wtTwYjlky/
lQV40FzJKttzeyFPL2CATyOWrJs1fwdSRlPyoX+LHoOh1PDQNYzQjGJe9pNXExS+
d2IK3FwgexvxCa9b5ZUqo+pmDWo+m9FrcPNonVOOT/8zz0n0CwLxI0JXLAuuOlhu
n3vRJ/lVzVP8DbOjhrECgNqwjGExA4qam1s57RklIT6SQY8TIQEEMzTsSsa9tmhg
SRIlgyMd78FSex84MlN2XF29YH2SAMd6btgfYMXWSgBqV5FuTRfuMSRb1Og8ppLb
E22q0SPIINYSZ74MCjooKSyXzat+dzp/niTRsgkJj/LJdyoXnII=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:16:53 2025 by rpki-client