This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft
File:                     6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json)
Hash identifier:          pIt33ZL4zwmXoYtusue4+KK2y884+L+f8Xv0pyEfdJo=
Subject key identifier:   4C:99:D2:D7:2F:DF:A3:C2:8A:99:30:41:37:1D:F1:09:C3:82:48:04
Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32
Certificate issuer:       /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32
Certificate serial:       36DB6261F26371BBD00D9962EF84ABEB0A1EF8F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft
Manifest number:          0159
Signing time:             Mon 29 Dec 2025 22:22:25 +0000
Manifest this update:     Mon 29 Dec 2025 22:17:25 +0000
Manifest next update:     Fri 02 Jan 2026 09:14:25 +0000
Files and hashes:         1: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: 49tnEtk1VDYdXCqWBbzNfumQxkluYR26o1ckBjNgp5U=)
                          2: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc=)
                          3: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl
                          rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 05:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:db:62:61:f2:63:71:bb:d0:0d:99:62:ef:84:ab:eb:0a:1e:f8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32
        Validity
            Not Before: Dec 29 22:17:25 2025 GMT
            Not After : Jan  2 09:14:25 2026 GMT
        Subject: CN=4C99D2D72FDFA3C28A993041371DF109C3824804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:d9:cc:db:1c:97:85:07:f0:f5:4c:3a:31:
                    a6:cf:5f:9d:c0:c6:c6:2f:11:19:26:5b:4e:8e:5c:
                    64:0d:44:c8:88:4d:c2:9f:30:a1:b6:e4:11:ef:66:
                    df:7f:c8:7b:9b:a9:7a:c1:c4:43:26:9c:5f:3e:6c:
                    9e:51:47:88:51:bd:6d:82:a3:b7:e9:74:e9:a0:22:
                    5d:5a:54:74:e4:7d:b9:34:52:e2:3c:df:58:fb:c8:
                    c1:42:39:a5:b5:b2:b9:ab:30:ce:57:29:7f:10:eb:
                    53:20:6c:ac:f9:9a:22:f2:0a:ad:17:11:c2:f4:14:
                    b4:b6:d6:e5:19:5b:50:1b:f3:16:f8:a4:be:0e:ff:
                    31:89:d6:4a:aa:9f:2a:85:d4:8a:dc:97:9a:1e:dc:
                    d0:84:58:88:ea:ed:62:f5:99:44:6c:d4:9f:01:aa:
                    51:1f:be:5f:eb:34:6d:d4:cf:df:f1:8f:fc:4c:f5:
                    26:eb:4d:41:f0:32:08:01:82:96:9d:40:19:a0:8c:
                    a8:9f:1d:95:84:68:9c:d5:69:f8:ba:49:a9:95:d2:
                    e6:4b:90:5a:b9:67:e2:15:b6:3b:1a:b6:e3:37:b7:
                    94:b2:cf:56:ac:ae:89:d1:ea:e3:81:7c:22:b2:1e:
                    9d:05:63:52:ff:b7:74:7f:75:6b:6f:66:34:cc:44:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:99:D2:D7:2F:DF:A3:C2:8A:99:30:41:37:1D:F1:09:C3:82:48:04
            X509v3 Authority Key Identifier:
                keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:87:bc:6f:2b:26:8f:b6:10:1e:06:c6:df:3e:2c:da:e1:
         04:8f:c5:02:70:a6:06:7d:41:48:32:05:27:02:09:52:0b:5f:
         6c:4d:75:67:5c:b1:c7:d5:5b:32:97:dc:26:c3:a5:f1:b8:16:
         e6:16:05:31:3a:e0:ed:cf:4a:5c:de:82:ba:08:21:13:16:b5:
         50:66:39:81:6f:6e:28:b8:c1:eb:ba:a0:96:b6:07:0f:e7:28:
         cb:f9:34:01:11:83:5a:e4:eb:a3:c4:bb:3f:3d:8a:46:6c:9c:
         ab:0b:9b:21:2a:0f:57:d5:b7:31:9d:ee:dc:81:10:94:c0:6d:
         99:84:c2:5d:99:df:7c:e9:7e:27:0c:9e:04:c9:75:5e:c5:10:
         d4:3c:e1:e7:10:8c:92:54:1e:bb:9a:e1:65:17:d7:13:a6:49:
         18:5b:45:e4:66:36:0a:36:d4:60:7b:22:0f:c8:9d:07:c7:8a:
         9e:81:91:24:e2:48:ef:12:f0:a0:96:5d:a7:50:89:a0:ba:d3:
         60:50:ec:35:b2:63:41:a5:ad:bd:35:3c:e1:9d:11:73:03:ad:
         4e:a8:86:18:36:eb:d1:2b:96:6f:ba:d8:8c:77:14:2d:ed:b1:
         12:7f:08:bf:89:b0:a3:4f:2f:bf:3c:16:7e:dc:48:8b:f1:12:
         6f:ba:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:14:20 2025 by rpki-client