This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
File:                     DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json)
Hash identifier:          qwTLzARxLo2BjCk7aoe/zG0P/0ZERdTUg3n1LKL+5Sg=
Subject key identifier:   7E:F4:01:6D:66:C3:FD:B4:95:70:44:8F:36:2D:30:8A:2B:DF:BA:46
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Certificate issuer:       /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial:       77703CA4C260DA54104F2F95EB939E4279DC5AC8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
Manifest number:          0537
Signing time:             Tue 23 Dec 2025 06:52:18 +0000
Manifest this update:     Tue 23 Dec 2025 06:47:18 +0000
Manifest next update:     Fri 26 Dec 2025 07:47:18 +0000
Files and hashes:         1: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=)
                          2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=)
                          3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=)
                          4: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: lmdU/jQPq2Fp1ivia7wLoDlLJ9sf8IiCkl1H+ZSupD8=)
                          5: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
                          rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:70:3c:a4:c2:60:da:54:10:4f:2f:95:eb:93:9e:42:79:dc:5a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
        Validity
            Not Before: Dec 23 06:47:18 2025 GMT
            Not After : Dec 26 07:47:18 2025 GMT
        Subject: CN=7EF4016D66C3FDB49570448F362D308A2BDFBA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:dd:bb:5d:ca:ee:f0:3c:0c:e9:0c:0e:08:
                    87:a9:fc:5a:28:78:38:b0:e9:19:20:c6:83:01:b4:
                    a4:cf:ea:82:11:1c:c8:8e:ca:cd:83:62:4d:59:c6:
                    57:cc:5b:33:a9:b2:53:f8:0a:2a:df:ec:44:d4:4e:
                    ba:d0:fd:49:b8:c3:eb:da:13:09:48:ca:57:a8:25:
                    7c:69:fe:a3:5f:66:a9:24:71:15:de:56:ea:39:2c:
                    4b:15:d0:1b:18:c5:5f:30:38:dc:a2:18:0d:bf:88:
                    7a:fc:1d:81:02:d6:d8:0f:bc:70:14:ed:3a:7b:d0:
                    c7:17:88:97:b8:1e:ff:83:4d:3d:0d:09:fc:a3:fb:
                    8b:f6:6d:db:38:d3:ed:60:23:25:81:51:bb:7f:b8:
                    35:18:3f:5a:19:95:0a:ef:2a:e6:f5:15:48:a6:f6:
                    fd:f6:4e:60:0e:c6:1a:72:e7:e7:ca:3c:b1:f3:92:
                    c9:3d:1f:c4:1f:1b:0e:0a:63:39:ec:cf:ed:bd:23:
                    ad:d7:6f:82:59:52:10:51:cb:e8:39:0c:3d:a1:62:
                    f3:4f:f3:94:f3:b3:c0:51:ec:3c:0e:53:5a:de:b2:
                    92:dc:6e:d5:8a:26:2c:d3:93:9e:0b:04:75:45:cc:
                    22:02:09:8f:a6:dc:54:43:d9:f9:19:dd:c1:c4:42:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F4:01:6D:66:C3:FD:B4:95:70:44:8F:36:2D:30:8A:2B:DF:BA:46
            X509v3 Authority Key Identifier:
                keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c2:8e:85:12:09:58:10:e7:3c:8f:f6:26:c4:7f:32:dc:b7:
         d8:3b:b7:6d:f2:59:78:6b:c1:df:ea:b0:97:7e:b1:b1:50:ad:
         02:e4:cb:b8:cb:07:7e:90:4f:79:37:98:ae:f0:43:7a:ac:f9:
         b2:ff:2b:1c:63:f0:1f:34:25:13:97:28:82:35:33:3c:aa:33:
         a8:1b:50:1b:70:15:7c:bd:28:d3:6d:55:ed:c5:7d:12:c6:02:
         5e:5c:a4:76:87:39:f4:94:01:fc:a5:b5:62:7d:d3:58:67:24:
         92:65:16:46:49:7e:1e:be:4f:a8:1d:9e:cc:f0:66:28:bd:93:
         8c:0f:95:8f:2d:e4:fc:ab:ad:f1:cb:5e:b8:d2:dc:fe:c6:a4:
         6a:35:6b:4f:18:b4:8c:9e:7b:6d:a5:eb:da:9d:95:aa:01:85:
         9c:24:f8:77:f8:dd:f4:65:80:11:81:fe:48:da:d6:ee:57:51:
         af:5b:0b:e0:58:57:f6:f1:27:2c:21:08:26:54:1d:3f:6a:9b:
         72:62:0f:e9:e9:0d:46:27:14:97:e7:d2:28:a6:74:b2:10:86:
         66:7e:27:ab:e4:5b:95:ff:a9:b8:b7:d6:8e:67:11:2a:f1:f3:
         3d:0b:58:76:fb:2b:cd:59:be:d9:07:28:ba:96:9f:af:1e:41:
         e9:52:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:21:59 2025 by rpki-client