This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
File:                     2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json)
Hash identifier:          EZWQZwkq4JWDnyS5k/8Jex9XX+FqPut9ydwbYJBRCdk=
Subject key identifier:   24:D1:77:3A:86:8A:B3:B9:43:DA:31:6D:60:07:89:D5:32:16:CC:CB
Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9
Certificate issuer:       /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
Certificate serial:       6452B0AF371252CA06D1A86BAFE60AC826CC7DCF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
Manifest number:          C6
Signing time:             Sun 21 Dec 2025 09:00:40 +0000
Manifest this update:     Sun 21 Dec 2025 08:55:40 +0000
Manifest next update:     Wed 24 Dec 2025 16:03:40 +0000
Files and hashes:         1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=)
                          2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: L4fACFmwHWDGHoA4JkuSLJl5sOdjT6KExZFIFlyYSqM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:52:b0:af:37:12:52:ca:06:d1:a8:6b:af:e6:0a:c8:26:cc:7d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
        Validity
            Not Before: Dec 21 08:55:40 2025 GMT
            Not After : Dec 24 16:03:40 2025 GMT
        Subject: CN=24D1773A868AB3B943DA316D600789D53216CCCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:e5:41:91:bf:96:22:60:39:1c:02:db:1a:
                    5d:02:34:94:e5:63:cc:25:ca:de:79:72:9c:55:f9:
                    8e:bc:90:57:a5:8d:94:d2:f0:6b:49:78:11:2a:19:
                    91:ec:cb:81:24:75:ce:da:e1:ac:fd:05:29:ed:43:
                    7a:bf:22:bc:69:0a:cf:f2:2d:43:69:a9:4f:46:67:
                    ee:c1:d0:f3:38:71:a6:7e:30:2f:98:50:e7:af:30:
                    9d:a2:ad:d1:47:71:51:f4:0a:13:3e:1b:94:92:15:
                    4a:db:48:2e:6a:d4:4b:69:d1:41:45:7b:18:b8:3c:
                    be:17:cd:cf:c0:b2:61:cc:6b:ae:85:60:c6:f3:f3:
                    9b:48:cb:85:51:ef:2f:de:78:97:29:3b:ed:89:80:
                    46:d8:07:2b:89:02:9a:da:b7:01:e2:68:dd:1a:fb:
                    fa:33:86:cb:10:a0:1b:69:c6:7a:3e:2f:06:a2:80:
                    05:f4:a8:af:92:7c:67:12:38:80:fe:f7:f7:35:03:
                    23:21:51:20:f5:fd:18:8c:01:82:b3:7f:0b:8f:8f:
                    14:d3:d8:39:18:02:39:07:ce:85:be:14:61:f0:ca:
                    aa:75:eb:0d:f0:4c:e0:27:2a:f2:dc:c5:07:5c:cc:
                    47:a7:c3:76:b0:dc:f6:4e:2b:85:f6:30:8e:96:4c:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:77:3A:86:8A:B3:B9:43:DA:31:6D:60:07:89:D5:32:16:CC:CB
            X509v3 Authority Key Identifier:
                keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:26:cb:4d:dd:30:55:dc:c1:3a:94:ca:7d:c0:b7:fe:09:4d:
         3a:18:e0:8e:bb:fc:a6:70:da:77:49:da:2e:57:e7:10:53:68:
         a2:88:a9:58:e3:ce:76:78:f8:86:20:2f:0a:48:d5:a1:f7:fe:
         b9:0b:78:7c:a5:63:7c:eb:0c:cc:ef:78:d9:0b:17:fb:25:ed:
         32:de:d0:91:ae:86:87:01:c9:ca:12:a7:19:eb:a8:37:3d:4e:
         17:83:17:28:73:82:ac:e6:92:ae:44:b6:42:eb:a2:00:46:e5:
         04:df:9b:f5:78:d2:98:24:23:90:1b:e6:41:e3:af:80:fa:dc:
         67:ef:6c:ac:f4:da:d7:fa:b0:4d:46:51:8d:ee:db:b9:e2:14:
         98:58:4f:c0:30:a0:f2:d4:4b:d3:7d:b7:c8:d5:31:e8:9c:45:
         32:47:a3:8c:fb:14:6e:d2:39:d5:4a:ac:ba:a3:e2:ca:a6:08:
         35:65:df:6c:38:12:cb:c2:a5:98:74:3e:07:dc:c8:71:6d:93:
         e2:7d:42:6c:af:84:9c:b7:2b:21:f8:86:78:88:0a:33:8c:b7:
         ea:dd:a5:b0:1d:39:a4:15:00:9e:6a:0d:3d:31:a6:0d:a7:8d:
         8a:52:3e:69:02:99:00:64:59:3f:88:9b:59:c0:97:78:f6:98:
         09:fd:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----