This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft
File:                     6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft (raw, json)
Hash identifier:          CTNEbAoQh3RjdR1Z9zfjbwuLpcr2DxyQ3lqDDsmfX9s=
Subject key identifier:   B4:6E:93:12:9B:A4:30:59:CB:AB:FC:DF:BB:5A:05:8C:92:B5:59:AB
Authority key identifier: 63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5
Certificate issuer:       /CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5
Certificate serial:       6087838F00FA74892B71EC66758B593BFEB14C62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft
Manifest number:          0534
Signing time:             Fri 19 Dec 2025 01:13:11 +0000
Manifest this update:     Fri 19 Dec 2025 01:08:11 +0000
Manifest next update:     Mon 22 Dec 2025 02:39:11 +0000
Files and hashes:         1: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: wXEz476nIlWr9YPVy2btympb5pWVJFYVSK12JD1WOHw=)
                          2: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl (hash: kYP+vJ4EL9sMxstRv+PHljCoXZOErdxV5Fb8pTU5BAs=)
                          3: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: SbBH9iTpUtpzzN5O4OhEDgeY5fcovsIykBLv8n0W4Zc=)
                          4: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: o6odkvAl/hKTp4KI63oh9m6EF8ypSkoU3xcKf1Jgr6o=)
                          5: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: wsoWIFyHCCxFH3XNJUeG9ugUuWzjgmc/VUDFsG2yPyg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl
                          rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 02:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:87:83:8f:00:fa:74:89:2b:71:ec:66:75:8b:59:3b:fe:b1:4c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5
        Validity
            Not Before: Dec 19 01:08:11 2025 GMT
            Not After : Dec 22 02:39:11 2025 GMT
        Subject: CN=B46E93129BA43059CBABFCDFBB5A058C92B559AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:72:92:a6:53:47:d5:b1:44:3c:58:02:ef:
                    3d:25:6d:0b:3d:c7:b6:36:f5:53:ca:0a:f3:d1:e2:
                    81:37:59:f3:69:2a:67:91:cf:f2:e8:e3:39:9d:3c:
                    83:d6:1c:b3:6d:28:2a:86:af:90:de:44:1d:65:c5:
                    a5:47:ea:67:30:7d:8b:54:10:a8:6e:4b:6e:3d:1b:
                    d3:4d:17:37:08:73:9d:90:a9:bc:28:c3:1a:73:48:
                    0e:99:7a:0c:93:c8:37:94:5b:5d:ea:c1:16:3a:1e:
                    13:59:30:65:00:02:e0:12:3c:23:5c:0a:a7:6d:66:
                    0d:56:65:31:14:17:4c:46:ec:c8:67:3a:d7:92:ea:
                    4c:55:c9:60:99:63:48:e0:62:3d:b8:d9:66:bf:eb:
                    77:71:76:31:e3:8a:07:2c:fb:d6:56:50:a5:18:e3:
                    25:c4:46:6b:71:98:32:03:33:34:03:41:11:3f:bf:
                    26:14:23:d2:fc:24:45:24:a2:f8:dd:65:d6:98:53:
                    36:d9:ed:b1:42:ea:b0:b5:aa:b4:2f:79:fb:ec:bc:
                    60:0b:21:8c:42:06:3f:5d:12:54:51:4c:62:d9:7c:
                    0c:9b:28:1d:1a:4a:02:85:5c:a9:4f:d0:5f:7d:09:
                    21:7b:ad:81:35:9f:ec:9d:29:a9:8c:86:68:0c:ed:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6E:93:12:9B:A4:30:59:CB:AB:FC:DF:BB:5A:05:8C:92:B5:59:AB
            X509v3 Authority Key Identifier:
                keyid:63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:14:84:3e:28:7d:07:ba:52:84:61:6b:85:19:14:8f:72:b9:
         a1:d8:50:f1:f3:a3:a7:35:fc:9a:4d:62:4c:38:44:b0:69:74:
         46:f9:16:cb:20:27:e2:08:aa:45:75:fe:d1:36:1c:2a:e9:20:
         ce:59:92:c0:37:4a:0c:aa:8a:3b:3d:d0:07:d4:f1:52:2f:6d:
         6f:25:5e:58:65:0b:a9:84:bb:8f:ef:df:28:46:35:e6:be:8e:
         56:5b:c0:f9:0a:4d:e7:71:52:98:c9:22:3e:2e:ab:5b:fd:c2:
         2f:0d:a5:31:9e:f1:8a:1a:e8:e6:54:83:c2:64:6f:b2:f5:dc:
         59:7c:e7:14:e0:fa:6e:d9:e3:62:e3:4c:27:44:84:58:bd:72:
         8e:da:3a:7b:29:0c:b0:6f:f2:b5:6f:cb:90:96:e5:82:0b:eb:
         c2:37:7a:da:a2:12:05:9c:dd:4f:bd:30:d1:4a:c8:f4:bf:de:
         23:25:c4:d2:de:a4:1b:59:f4:38:29:e5:f3:01:d1:f3:55:59:
         22:92:64:52:cd:de:e5:4b:c1:25:db:2b:45:d9:60:eb:3f:99:
         ef:76:d9:43:89:f9:0e:c9:66:97:59:83:99:e7:e7:c2:f4:b6:
         c3:6e:6b:a6:75:54:09:55:5e:d8:7f:11:19:68:49:b8:32:b9:
         6a:d3:03:41
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYIeDjwD6dIkrcexmdYtZO/6xTGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4
NzlBNzRFNTAeFw0yNTEyMTkwMTA4MTFaFw0yNTEyMjIwMjM5MTFaMDMxMTAvBgNV
BAMTKEI0NkU5MzEyOUJBNDMwNTlDQkFCRkNERkJCNUEwNThDOTJCNTU5QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJN3KSplNH1bFEPFgC7z0lbQs9
x7Y29VPKCvPR4oE3WfNpKmeRz/Lo4zmdPIPWHLNtKCqGr5DeRB1lxaVH6mcwfYtU
EKhuS249G9NNFzcIc52QqbwowxpzSA6ZegyTyDeUW13qwRY6HhNZMGUAAuASPCNc
CqdtZg1WZTEUF0xG7MhnOteS6kxVyWCZY0jgYj242Wa/63dxdjHjigcs+9ZWUKUY
4yXERmtxmDIDMzQDQRE/vyYUI9L8JEUkovjdZdaYUzbZ7bFC6rC1qrQvefvsvGAL
IYxCBj9dElRRTGLZfAybKB0aSgKFXKlP0F99CSF7rYE1n+ydKamMhmgM7bfPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtG6TEpukMFnLq/zfu1oFjJK1WaswHwYDVR0j
BBgwFoAUYxm3f9jrfslo3Vn+lK4UaoeadOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZjU0MmJjNC03NGRjLTQ1ZGQtYjY1OS03NDVjYTJhY2EzMzMvMC82MzE5Qjc3RkQ4
RUI3RUM5NjhERDU5RkU5NEFFMTQ2QTg3OUE3NEU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4NzlB
NzRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2
NTktNzQ1Y2EyYWNhMzMzLzAvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0
NkE4NzlBNzRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIcUhD4ofQe6UoRha4UZFI9yuaHYUPHzo6c1
/JpNYkw4RLBpdEb5FssgJ+IIqkV1/tE2HCrpIM5ZksA3Sgyqijs90AfU8VIvbW8l
XlhlC6mEu4/v3yhGNea+jlZbwPkKTedxUpjJIj4uq1v9wi8NpTGe8Yoa6OZUg8Jk
b7L13Fl85xTg+m7Z42LjTCdEhFi9co7aOnspDLBv8rVvy5CW5YIL68I3etqiEgWc
3U+9MNFKyPS/3iMlxNLepBtZ9Dgp5fMB0fNVWSKSZFLN3uVLwSXbK0XZYOs/me92
2UOJ+Q7JZpdZg5nn58L0tsNua6Z1VAlVXth/ERloSbgyuWrTA0E=
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:26 2025 by rpki-client