This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
File:                     F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json)
Hash identifier:          PjPcTPBSqXCWzaqJgGEM3gl3JGWYGjIta8PLliTcbtQ=
Subject key identifier:   73:87:25:5A:BE:02:3C:E5:A4:03:EB:88:CE:34:D6:56:E2:E9:1F:4F
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Certificate issuer:       /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial:       2599B0AAF63D5FCA397C8E879F0B52AF11122D45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
Manifest number:          0254
Signing time:             Thu 18 Dec 2025 12:42:24 +0000
Manifest this update:     Thu 18 Dec 2025 12:37:24 +0000
Manifest next update:     Sun 21 Dec 2025 22:08:24 +0000
Files and hashes:         1: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: kHI75bwIvIzicsWXh5XwN4lPfHoKJB9bI/nvUR/Wzmg=)
                          2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: eoTBfzq8y4bEDLADbH3GXH2pd0CIGqJzNCdlfnqwOuA=)
                          3: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
                          rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 22:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:99:b0:aa:f6:3d:5f:ca:39:7c:8e:87:9f:0b:52:af:11:12:2d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
        Validity
            Not Before: Dec 18 12:37:24 2025 GMT
            Not After : Dec 21 22:08:24 2025 GMT
        Subject: CN=7387255ABE023CE5A403EB88CE34D656E2E91F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:fc:69:ad:91:a3:37:be:5d:e3:9e:b3:5b:
                    11:3d:40:f6:3a:fd:18:9c:3d:10:99:db:33:f6:d5:
                    25:42:88:ad:08:f3:94:6d:a1:3e:76:8b:84:09:21:
                    0f:be:ad:8e:a6:7c:1c:1c:1e:4c:7c:d4:79:71:f1:
                    80:01:c8:07:eb:2a:ba:63:3c:84:a7:3d:a4:45:de:
                    98:7e:55:fe:30:9f:d6:a1:20:a9:55:b4:35:3a:9b:
                    a8:42:0d:43:23:81:4f:93:0e:71:6f:fb:07:c1:0e:
                    88:7d:77:14:91:2d:f6:f6:9a:2b:3c:b4:46:ba:5b:
                    65:95:df:8e:96:89:dc:29:78:c1:d1:7e:90:f6:6b:
                    55:c2:ca:fb:04:45:d9:2c:f8:39:a8:82:f8:f2:9c:
                    12:99:16:a2:c3:c3:3e:b7:f4:89:85:0d:08:98:d8:
                    59:41:a0:87:60:68:44:42:18:5a:cf:ee:ff:be:b2:
                    08:2f:17:b9:ab:66:50:21:d5:21:ec:96:29:b4:dd:
                    06:26:55:7f:2e:c9:d5:49:98:87:24:50:76:d1:10:
                    02:fc:2d:f5:12:7c:ff:81:79:3f:3d:16:4f:96:95:
                    3b:5b:e2:0c:05:96:32:3a:c5:00:02:27:68:3d:b0:
                    3b:5b:9c:58:d0:95:4f:c3:c7:90:66:00:7a:42:d5:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:87:25:5A:BE:02:3C:E5:A4:03:EB:88:CE:34:D6:56:E2:E9:1F:4F
            X509v3 Authority Key Identifier:
                keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:38:0f:f6:2a:79:d7:6e:4d:f9:ae:3e:0e:12:b9:0c:c9:
         8a:ab:9d:07:40:ae:b4:2e:11:bc:30:63:5d:61:6a:36:98:0c:
         b3:db:e3:d9:29:fc:df:a4:b8:9d:87:58:4a:d3:0b:f4:43:24:
         fd:6a:e4:ba:6c:b9:0d:ad:8a:73:2a:af:a4:e4:36:25:42:d9:
         0c:77:42:58:f4:ae:ac:a2:ca:d2:52:5c:3c:6c:94:2c:77:5d:
         32:28:32:4f:3d:00:07:8a:1f:12:c9:cd:a0:ca:92:68:cb:f1:
         d3:79:93:0d:9f:e3:8f:ad:e6:a1:4f:70:c1:4f:0c:5d:26:35:
         34:16:fd:ef:57:5a:c5:07:14:b6:82:5e:12:a6:46:09:ba:af:
         5f:d3:17:8a:bf:05:a1:a2:3d:46:3b:bb:08:45:35:14:81:fb:
         2a:d8:7a:60:53:41:a2:7b:2e:fa:65:c6:48:93:99:29:e4:3e:
         9b:a6:30:1b:f5:69:f3:b5:83:70:98:68:64:24:27:1a:e5:8f:
         cf:fa:47:81:eb:a7:64:11:aa:b7:cd:4b:f9:9c:17:54:bc:5e:
         a9:36:85:47:e2:36:18:1f:a3:fd:3d:91:34:35:a3:27:d2:30:
         fb:75:cb:5c:8d:fb:f0:f2:26:20:39:da:18:e4:96:e4:1f:9c:
         08:1e:e9:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJZmwqvY9X8o5fI6HnwtSrxESLUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1
OTY4MDMyNDAeFw0yNTEyMTgxMjM3MjRaFw0yNTEyMjEyMjA4MjRaMDMxMTAvBgNV
BAMTKDczODcyNTVBQkUwMjNDRTVBNDAzRUI4OENFMzRENjU2RTJFOTFGNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIfxprZGjN75d456zWxE9QPY6
/RicPRCZ2zP21SVCiK0I85RtoT52i4QJIQ++rY6mfBwcHkx81Hlx8YAByAfrKrpj
PISnPaRF3ph+Vf4wn9ahIKlVtDU6m6hCDUMjgU+TDnFv+wfBDoh9dxSRLfb2mis8
tEa6W2WV346WidwpeMHRfpD2a1XCyvsERdks+DmogvjynBKZFqLDwz639ImFDQiY
2FlBoIdgaERCGFrP7v++sggvF7mrZlAh1SHslim03QYmVX8uydVJmIckUHbREAL8
LfUSfP+BeT89Fk+WlTtb4gwFljI6xQACJ2g9sDtbnFjQlU/Dx5BmAHpC1Yc3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUc4clWr4CPOWkA+uIzjTWVuLpH08wHwYDVR0j
BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1
NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4
MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli
YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0
RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGPtOA/2KnnXbk35rj4OErkMyYqrnQdArrQu
EbwwY11hajaYDLPb49kp/N+kuJ2HWErTC/RDJP1q5LpsuQ2tinMqr6TkNiVC2Qx3
Qlj0rqyiytJSXDxslCx3XTIoMk89AAeKHxLJzaDKkmjL8dN5kw2f44+t5qFPcMFP
DF0mNTQW/e9XWsUHFLaCXhKmRgm6r1/TF4q/BaGiPUY7uwhFNRSB+yrYemBTQaJ7
LvplxkiTmSnkPpumMBv1afO1g3CYaGQkJxrlj8/6R4Hrp2QRqrfNS/mcF1S8Xqk2
hUfiNhgfo/09kTQ1oyfSMPt1y1yN+/DyJiA52hjkluQfnAge6Tg=
-----END CERTIFICATE-----
Generated at Fri Dec 19 16:57:29 2025 by rpki-client