This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
File:                     6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft (raw, json)
Hash identifier:          T9df6NP2ftVYIwdlFkEeuG4yswu4YNMCz7MeZmZtPws=
Subject key identifier:   7D:CF:D1:89:D4:AD:A8:5B:B3:F4:51:CC:1C:78:73:A9:D4:69:63:5E
Authority key identifier: 6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B
Certificate issuer:       /CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
Certificate serial:       0318254836D974064E3D684B1725D5AA78020D78
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
Manifest number:          0210
Signing time:             Tue 23 Dec 2025 20:53:06 +0000
Manifest this update:     Tue 23 Dec 2025 20:48:06 +0000
Manifest next update:     Sat 27 Dec 2025 05:43:06 +0000
Files and hashes:         1: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl (hash: h9Ddzt7gOq2jFA6hNJdOmKM24Xq9+pWfhAxUzvqTWJA=)
                          2: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: 9yEpf7UptHKPtJGMSNZGjTG/u5N0H8I6F7MGckJB2CA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl
                          rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 05:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:25:48:36:d9:74:06:4e:3d:68:4b:17:25:d5:aa:78:02:0d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
        Validity
            Not Before: Dec 23 20:48:06 2025 GMT
            Not After : Dec 27 05:43:06 2025 GMT
        Subject: CN=7DCFD189D4ADA85BB3F451CC1C7873A9D469635E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:27:14:13:b8:0d:c2:50:b1:95:83:fa:21:
                    80:52:5c:9a:41:9b:e3:d5:90:5c:61:a4:1b:39:04:
                    75:c6:c3:62:88:44:39:7a:09:1c:ae:e6:4f:34:fc:
                    e8:3f:0b:de:02:6a:d9:0a:bd:c2:3c:30:14:ce:83:
                    d9:b7:b5:d6:bd:4f:49:50:cc:5d:94:f8:39:4e:8d:
                    76:6b:3f:4f:ed:ca:cd:47:51:2f:44:57:ee:94:72:
                    94:62:3a:36:f1:39:00:dc:5a:d2:66:74:e7:a0:b1:
                    92:4d:0f:71:07:ca:ee:8c:c2:ff:87:01:d0:c2:81:
                    a0:c3:0d:86:94:6c:61:87:b5:54:47:29:8b:bc:34:
                    97:cb:e2:d5:2e:02:fc:e0:eb:1a:48:6a:71:fb:61:
                    50:f0:ca:e1:68:2c:b5:69:93:f3:e3:ab:35:da:17:
                    5f:14:81:fb:0c:70:27:08:0e:92:87:de:46:de:fc:
                    af:14:39:b8:e2:67:5e:b1:1c:d7:c9:c2:76:dd:09:
                    e2:ee:f8:cb:38:59:74:8f:41:a3:e0:7d:1a:2f:3e:
                    e2:c3:3d:b7:97:f5:50:67:2d:32:64:a9:3f:28:a3:
                    67:99:6c:de:fa:d1:a7:05:02:e2:b2:fb:de:c2:dc:
                    e6:8e:b4:75:82:7d:63:c8:94:26:ec:e4:05:4c:38:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CF:D1:89:D4:AD:A8:5B:B3:F4:51:CC:1C:78:73:A9:D4:69:63:5E
            X509v3 Authority Key Identifier:
                keyid:6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:af:51:43:75:5a:89:57:bf:5e:9b:9a:57:03:7b:f0:41:
         e9:4e:13:f0:bc:de:3c:b8:c1:66:95:70:f8:36:f9:a2:cd:0d:
         83:1c:10:88:12:e9:51:5f:93:d7:7f:e8:6e:5f:5a:f3:93:61:
         36:9b:9a:8c:c3:ab:f1:98:1d:f0:a8:72:49:a8:19:4b:c3:5f:
         bf:12:61:32:8b:84:88:61:c0:66:17:87:cb:48:78:fb:43:80:
         ad:de:db:92:31:f4:c3:aa:6d:33:17:fa:5a:f5:b9:e8:25:10:
         5d:c9:59:79:b1:3b:f0:94:68:21:4f:c2:8b:1d:0d:ab:81:27:
         99:db:19:33:98:03:9a:33:ca:83:0f:ef:96:2c:71:57:c8:1a:
         30:a2:50:b9:14:e4:23:92:52:d6:21:b4:71:24:d1:d2:31:65:
         db:55:3e:c2:df:95:e1:5a:9f:c9:30:50:ee:f7:89:1c:32:97:
         46:0a:83:30:40:c5:9d:71:97:0e:79:52:f7:32:80:60:76:e4:
         7e:d9:4e:56:c0:de:b2:42:50:9d:6e:96:c4:4b:7c:6b:8f:67:
         89:14:67:58:1b:86:7a:3e:9f:87:21:3d:51:00:95:24:a1:8d:
         92:6e:bf:ef:3f:2e:ab:a6:e6:dc:b5:db:c4:51:f9:dd:8f:19:
         08:d9:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:07:00 2025 by rpki-client