This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
File:                     6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json)
Hash identifier:          HSx7rR2jjvhtBAQNCNudoMdRhjYYvuq2PdCyxGQ7bSQ=
Subject key identifier:   3C:4A:AF:1D:59:D3:02:33:F5:C7:F5:08:41:82:15:31:A6:65:B3:8B
Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21
Certificate issuer:       /CN=6862B9697E607C0C4861E56917A18D87AC33A721
Certificate serial:       360183656D218BD947F3C9387E1C16B0D407CC5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
Manifest number:          01E8
Signing time:             Wed 24 Dec 2025 04:23:29 +0000
Manifest this update:     Wed 24 Dec 2025 04:18:29 +0000
Manifest next update:     Sat 27 Dec 2025 15:51:29 +0000
Files and hashes:         1: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: V+zWDsrbwBmUVhU4VdpSea6SlgKf8SocgLax3n7LSr0=)
                          2: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: Z9x86L9cvYXdwPWT7FHQP4GKwyxq3AVT2OalSxbymqQ=)
                          3: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: IbLWzBm08AS4RfKW9sTYAdOcxbZNJ6mrAM/VuC4qUdw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl
                          rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:01:83:65:6d:21:8b:d9:47:f3:c9:38:7e:1c:16:b0:d4:07:cc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721
        Validity
            Not Before: Dec 24 04:18:29 2025 GMT
            Not After : Dec 27 15:51:29 2025 GMT
        Subject: CN=3C4AAF1D59D30233F5C7F50841821531A665B38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:c4:76:51:4f:b9:2a:77:5f:2e:10:0f:17:
                    91:44:78:f1:85:d9:9b:d8:04:b2:c3:07:10:7c:ad:
                    f9:d3:b7:26:67:66:e6:9d:4d:06:be:db:ff:4a:ee:
                    ee:a6:8e:f7:ec:32:e5:00:32:e1:78:d8:eb:b7:6d:
                    43:84:ab:88:78:70:44:d8:06:f9:c4:f6:bc:7d:35:
                    95:08:ca:54:4d:dd:bf:c0:f6:63:2d:2c:4d:bc:b7:
                    35:df:e8:23:fb:95:8e:c4:2f:05:90:ec:17:79:15:
                    4d:94:25:24:39:57:56:21:d1:d5:4c:c2:6e:b4:80:
                    f6:12:a1:45:c5:96:50:52:e0:6a:02:37:d7:1c:de:
                    d8:d1:cd:01:a6:16:1b:42:2d:90:9d:17:cc:02:f9:
                    e9:6e:cb:a6:67:f3:64:54:8c:e1:62:d3:95:59:d4:
                    6d:2e:ef:5a:58:2a:06:da:cb:ec:90:b8:7a:a6:70:
                    04:65:8e:01:b2:6e:35:a9:28:9e:8b:5a:46:60:32:
                    80:bd:18:34:bb:b4:b1:9f:32:3e:47:39:1d:d9:5b:
                    43:cc:6f:7f:f4:80:1b:49:bc:54:d0:da:9e:00:52:
                    3d:9e:11:05:9c:38:af:fe:c9:d7:4e:52:18:a6:79:
                    68:52:1b:4c:0c:ff:8f:e7:8c:29:b8:18:14:1f:88:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4A:AF:1D:59:D3:02:33:F5:C7:F5:08:41:82:15:31:A6:65:B3:8B
            X509v3 Authority Key Identifier:
                keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:da:c4:e6:91:b5:de:ed:be:f4:f9:d9:0b:63:eb:f2:a9:f3:
         be:48:de:59:9a:be:51:8d:c3:8d:cd:d6:1c:67:ff:fa:04:78:
         19:3a:fc:f5:7d:2f:7c:b2:78:74:f2:44:48:fb:66:7a:40:b4:
         96:f2:52:0a:ee:48:ff:9e:38:ac:34:12:e8:63:f1:d5:c7:8e:
         a9:9c:4b:93:ea:c3:03:2e:22:12:f9:48:b7:eb:d8:df:85:3e:
         3b:24:51:a0:2d:4a:7c:8a:76:88:2e:51:e9:eb:7b:2a:3f:ef:
         77:f4:ef:ca:0b:4e:64:5f:a1:de:27:e7:dc:00:2c:fe:e4:3c:
         b6:03:e9:ca:74:24:96:2a:40:b5:21:e8:12:eb:4a:f5:78:1b:
         ae:be:3a:35:a2:5e:18:8d:55:9b:f5:a0:a7:00:66:52:c3:09:
         c1:54:50:58:af:3f:88:4d:58:6e:d2:5f:29:51:40:99:7a:f8:
         e4:fe:25:09:f2:e7:62:47:15:c5:79:7c:16:38:5f:5b:97:91:
         79:01:9a:3a:b0:c6:ba:ef:4f:1d:97:a5:bc:70:e6:f5:d5:85:
         18:ac:89:87:fd:6b:fa:9b:27:26:a7:23:9f:78:43:81:08:ec:
         ce:ff:df:56:a0:dc:1a:78:9f:7d:d4:0e:1e:13:f0:95:39:fa:
         00:b4:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 02:45:04 2025 by rpki-client