This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft
File:                     061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft (raw, json)
Hash identifier:          jSdW+4KdIk+qkxOi7dKMHC87BlROkbf/YsMV1FmtN6w=
Subject key identifier:   AC:62:01:40:84:7B:61:F9:9B:D2:F2:7D:48:25:85:6A:5B:D9:C7:FF
Authority key identifier: 06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59
Certificate issuer:       /CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159
Certificate serial:       5E811A01284E3CA2BF9A1B9419C91D7921735DAB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft
Manifest number:          02DB
Signing time:             Thu 18 Dec 2025 05:21:28 +0000
Manifest this update:     Thu 18 Dec 2025 05:16:28 +0000
Manifest next update:     Sun 21 Dec 2025 10:24:28 +0000
Files and hashes:         1: 061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl (hash: p7FdS6sGtU2EkjF0RS5rYVrgxMyO71xFODBN/81xm00=)
                          2: 3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa (hash: HPAI2gh/1HuKjzOsiopIeCg4F+M7JZClMF/J1ZpnE0M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl
                          rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 10:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:81:1a:01:28:4e:3c:a2:bf:9a:1b:94:19:c9:1d:79:21:73:5d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159
        Validity
            Not Before: Dec 18 05:16:28 2025 GMT
            Not After : Dec 21 10:24:28 2025 GMT
        Subject: CN=AC620140847B61F99BD2F27D4825856A5BD9C7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:74:f2:41:87:30:00:ca:dc:c6:35:f6:ac:
                    33:bf:5b:6e:60:13:7a:26:2a:f2:1f:02:93:98:ac:
                    2b:0e:3e:66:e1:4a:d9:21:7b:75:5f:df:6c:45:82:
                    c5:f0:74:7c:67:76:0f:d4:7a:4c:e0:f5:19:22:31:
                    e3:38:85:c4:1c:9f:40:40:01:0c:89:3e:a7:3d:04:
                    ad:2a:e5:c1:65:ee:62:3f:2b:bc:7a:a6:73:40:00:
                    88:e3:50:9a:e6:9b:3b:93:0e:d4:24:a5:5a:c5:92:
                    9d:9d:0e:95:fc:7c:10:00:ee:e1:45:56:5c:1e:6b:
                    0a:a3:a7:d8:d9:81:fb:5a:d5:bf:11:1c:ab:e6:3e:
                    7b:32:67:47:aa:49:73:20:19:13:d6:64:b3:08:07:
                    39:3d:0e:87:e9:a7:d7:44:b7:cd:c6:bf:f3:55:49:
                    d0:80:61:03:02:ac:70:ed:c3:b5:07:0e:a1:33:93:
                    07:f2:d6:30:36:1e:1b:b3:c9:07:07:39:a5:4f:29:
                    14:a0:b1:08:bf:e3:06:cc:b5:73:ec:f9:93:50:36:
                    2f:40:6a:d5:79:40:07:6a:0e:d9:b1:68:e5:81:df:
                    74:f1:ae:d3:73:6c:78:c9:d9:8d:2c:a8:bc:55:74:
                    5d:66:cb:51:a6:0f:82:30:6c:f6:ac:12:ad:58:76:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:62:01:40:84:7B:61:F9:9B:D2:F2:7D:48:25:85:6A:5B:D9:C7:FF
            X509v3 Authority Key Identifier:
                keyid:06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a3:d5:a4:75:05:0a:5c:57:61:c0:73:59:93:06:e0:c2:82:
         78:b3:92:d2:6c:72:4c:54:8d:e5:a2:b1:0e:97:ab:28:da:48:
         dc:86:d7:c0:2c:e7:8f:2a:9e:29:1d:49:85:44:9d:8f:86:f3:
         97:1b:3b:72:91:94:6e:da:e1:09:69:c6:50:39:f9:b1:85:5c:
         00:69:4f:81:86:77:8c:73:62:20:20:5e:8b:c7:64:ad:9a:c5:
         4c:fc:e9:b6:0c:04:12:cd:34:a2:39:12:b6:c9:03:66:c5:0c:
         a8:78:6b:75:04:aa:7d:f8:99:dc:3b:0e:e7:1a:7d:c1:d4:6c:
         ef:98:dc:7f:2b:97:47:a0:0a:98:54:36:f3:65:23:bd:a5:53:
         26:7c:01:6f:16:d5:02:d1:47:ce:71:e3:fe:b5:b3:76:d1:72:
         24:c4:da:13:3c:d0:b7:50:ce:88:38:f5:38:b0:a6:75:e2:4f:
         7c:a3:cb:f3:d1:28:9a:78:bd:fb:d8:ed:7b:19:6a:da:18:d4:
         cd:03:85:34:08:08:e1:db:3e:dd:80:2f:38:11:4e:44:47:f8:
         13:67:cc:8f:c6:bd:d6:0f:fb:d5:7c:c7:f9:20:d3:b6:78:19:
         ed:f0:8f:f9:c5:cb:ea:52:69:a7:78:4a:38:f6:85:58:d5:f1:
         78:03:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:37 2025 by rpki-client