This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
File:                     6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json)
Hash identifier:          IIHIb86N579xQB+iCoS0jfGHNzDduM0vi/3VtYIrdjk=
Subject key identifier:   93:A1:E4:75:D9:2D:EE:4A:D2:B6:0B:31:7D:85:03:D6:42:7F:02:EC
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       251CC48114C65B4FBF8D871D13EF13E00A481FC7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
Manifest number:          052E
Signing time:             Wed 17 Dec 2025 20:30:41 +0000
Manifest this update:     Wed 17 Dec 2025 20:25:41 +0000
Manifest next update:     Sun 21 Dec 2025 01:00:41 +0000
Files and hashes:         1: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: OXqPT/YK5i9WqVYq36W80mCSOuXpr3r9EeEpmZPUSqg=)
                          2: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=)
                          3: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=)
                          4: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=)
                          5: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=)
                          6: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=)
                          7: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=)
                          8: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1c:c4:81:14:c6:5b:4f:bf:8d:87:1d:13:ef:13:e0:0a:48:1f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Dec 17 20:25:41 2025 GMT
            Not After : Dec 21 01:00:41 2025 GMT
        Subject: CN=93A1E475D92DEE4AD2B60B317D8503D6427F02EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:3a:5e:6b:42:e5:8c:d7:55:c9:82:dc:eb:
                    09:92:17:c2:2a:94:4b:87:94:bd:08:d9:e9:7b:cf:
                    9a:3e:e4:bf:05:ba:0d:47:a2:8f:de:f6:06:39:7d:
                    a5:b2:84:ac:ce:61:d2:9e:32:85:b2:e5:b6:83:80:
                    fb:82:23:99:57:a1:5a:f6:5e:f8:25:ad:ac:43:fe:
                    ac:55:91:69:3b:25:c7:a6:20:cc:66:83:c5:a8:2d:
                    88:9f:d6:e0:44:b2:84:c4:ed:2b:95:e3:20:ea:ba:
                    b2:9b:6e:a7:6a:18:09:36:41:2f:0b:a6:e3:8c:42:
                    28:6b:e3:f3:b8:26:2f:20:8c:bc:d9:a5:f0:49:59:
                    6e:c0:a8:f1:11:40:38:a1:85:74:b6:a7:d3:31:16:
                    85:00:02:75:63:9d:de:69:ea:b2:b0:2b:de:4c:42:
                    a8:cd:75:62:74:8e:ab:ad:4d:84:10:87:72:87:6c:
                    ec:1c:9c:fd:44:ba:23:d5:93:9e:c4:09:32:47:01:
                    87:ab:0f:a5:3a:8f:84:07:66:94:86:dd:cd:df:c8:
                    84:ab:fc:c0:33:7a:50:56:e7:00:b9:83:0f:f9:2b:
                    47:29:14:b0:f8:2e:e1:ba:cf:5c:bb:12:a7:e1:03:
                    ab:33:80:f4:e4:07:f7:c5:52:01:45:57:0c:54:20:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:E4:75:D9:2D:EE:4A:D2:B6:0B:31:7D:85:03:D6:42:7F:02:EC
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:50:ba:d8:5a:5f:cb:4e:5e:85:ef:30:a8:af:28:4c:ae:
         e3:d5:db:e2:c5:03:69:11:55:d1:fa:7e:5b:8c:1f:b2:66:43:
         39:06:63:e4:b2:da:ce:a2:08:cc:8e:1b:2d:25:1e:d2:c7:1e:
         df:8f:5c:39:5b:38:51:47:5b:dc:81:85:23:ee:8c:9a:fc:9b:
         b9:4c:f5:5d:7b:ff:c4:60:d6:1e:fe:9e:24:91:17:a7:c2:83:
         c7:fd:72:78:45:a9:35:12:72:d8:21:fe:8b:e0:0c:92:eb:92:
         0a:c5:65:46:23:de:e6:aa:00:77:bf:85:f6:2f:43:96:88:6d:
         2b:cc:c4:df:8e:3d:2b:db:a0:a7:cc:7d:df:91:3a:2b:72:14:
         3a:03:1f:d7:31:aa:a5:a7:34:f0:bb:52:c8:bb:ce:88:fc:8f:
         18:54:f8:8e:ed:0f:eb:97:63:b8:93:11:f7:3b:f9:bf:3e:5e:
         2f:36:0a:27:93:7b:3d:95:f4:aa:50:b3:f7:30:00:54:62:10:
         cc:b9:e0:f6:99:09:13:3e:f1:59:3f:d2:da:4f:41:df:a1:39:
         d4:a7:83:99:a5:51:78:eb:99:b4:4d:c6:d2:5a:5b:ab:a4:bc:
         61:77:b0:97:a7:cf:f7:bb:52:68:61:fb:c5:a2:34:63:16:87:
         4b:a6:39:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJRzEgRTGW0+/jYcdE+8T4ApIH8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy
N0JFN0IxOTAeFw0yNTEyMTcyMDI1NDFaFw0yNTEyMjEwMTAwNDFaMDMxMTAvBgNV
BAMTKDkzQTFFNDc1RDkyREVFNEFEMkI2MEIzMTdEODUwM0Q2NDI3RjAyRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGnTpea0LljNdVyYLc6wmSF8Iq
lEuHlL0I2el7z5o+5L8Fug1Hoo/e9gY5faWyhKzOYdKeMoWy5baDgPuCI5lXoVr2
XvglraxD/qxVkWk7JcemIMxmg8WoLYif1uBEsoTE7SuV4yDqurKbbqdqGAk2QS8L
puOMQihr4/O4Ji8gjLzZpfBJWW7AqPERQDihhXS2p9MxFoUAAnVjnd5p6rKwK95M
QqjNdWJ0jqutTYQQh3KHbOwcnP1EuiPVk57ECTJHAYerD6U6j4QHZpSG3c3fyISr
/MAzelBW5wC5gw/5K0cpFLD4LuG6z1y7EqfhA6szgPTkB/fFUgFFVwxUIBVHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUk6Hkddkt7krStgsxfYUD1kJ/AuwwHwYDVR0j
BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE
QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF
N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj
ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3
MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHDQULrYWl/LTl6F7zCoryhMruPV2+LFA2kR
VdH6fluMH7JmQzkGY+Sy2s6iCMyOGy0lHtLHHt+PXDlbOFFHW9yBhSPujJr8m7lM
9V17/8Rg1h7+niSRF6fCg8f9cnhFqTUSctgh/ovgDJLrkgrFZUYj3uaqAHe/hfYv
Q5aIbSvMxN+OPSvboKfMfd+ROityFDoDH9cxqqWnNPC7Usi7zoj8jxhU+I7tD+uX
Y7iTEfc7+b8+Xi82CieTez2V9KpQs/cwAFRiEMy54PaZCRM+8Vk/0tpPQd+hOdSn
g5mlUXjrmbRNxtJaW6ukvGF3sJenz/e7Umhh+8WiNGMWh0umOek=
-----END CERTIFICATE-----
Generated at Fri Dec 19 03:06:19 2025 by rpki-client