This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
File:                     6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft (raw, json)
Hash identifier:          d7uL4nMwMN4AYTEbFc0JFrVkE/fta30EKJ0vdn0zptU=
Subject key identifier:   01:1C:1C:28:20:E4:63:87:ED:CF:F9:30:F1:81:5D:6A:53:DF:71:08
Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F
Certificate issuer:       /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F
Certificate serial:       120B77AF05727DDD34B3CBB34871ED066F1198EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
Manifest number:          053A
Signing time:             Fri 19 Dec 2025 21:40:49 +0000
Manifest this update:     Fri 19 Dec 2025 21:35:49 +0000
Manifest next update:     Tue 23 Dec 2025 06:56:49 +0000
Files and hashes:         1: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl (hash: QY9GubsjqZYZjLJ2Y+PIi+EI3w7gpP6++V7CyncuwHg=)
                          2: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: OYW0otw/C3geO3TMH4Vh+kOExJnpA1YbtcKJkivMvls=)
                          3: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: /yZJ48q5869CHyqd6SiEVpfiGq8gtKkTaa5YhAFQVoI=)
                          4: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: E4zG118v/qHLN7ZNOQGDXXsw7DicdH5quyuAOIhYJfs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl
                          rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 06:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:77:af:05:72:7d:dd:34:b3:cb:b3:48:71:ed:06:6f:11:98:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F
        Validity
            Not Before: Dec 19 21:35:49 2025 GMT
            Not After : Dec 23 06:56:49 2025 GMT
        Subject: CN=011C1C2820E46387EDCFF930F1815D6A53DF7108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:35:14:5c:b8:88:61:29:56:b5:75:01:b4:
                    57:2b:9a:77:47:ad:9a:2f:d6:41:d7:2a:8d:c4:76:
                    a0:6f:af:ce:a3:b5:ee:4e:cd:ad:f7:ba:a3:9b:be:
                    11:fa:28:4e:5d:f8:0c:5b:d8:7d:f3:79:49:0b:e5:
                    d5:18:23:c4:89:e2:93:5c:8c:11:2b:09:c8:59:fd:
                    40:dd:c7:b7:0c:b6:ca:f7:4e:22:28:c7:c6:aa:46:
                    4e:34:39:fc:88:d0:96:0b:f5:e3:92:5f:7f:af:4e:
                    71:6e:65:01:fd:86:48:2f:39:a7:17:a1:40:1b:e0:
                    9f:36:44:89:bc:f0:29:97:c6:14:9a:ac:77:86:89:
                    b8:b1:85:13:d7:98:34:d3:e0:f8:7d:e0:c0:06:a9:
                    99:2e:9d:9d:0e:21:39:28:59:5d:e6:ce:a1:87:6c:
                    a2:3c:a3:6f:54:b4:10:e9:bd:22:2d:57:4f:68:f3:
                    ba:9f:b3:39:d5:8a:ea:63:5a:97:d7:9a:87:a4:60:
                    53:07:11:c6:cc:9a:97:dc:49:5c:39:45:80:b7:fe:
                    11:98:4d:99:89:70:5f:a6:ef:b4:45:d4:71:d5:e4:
                    38:af:8b:ae:3e:17:2b:28:95:06:10:10:ed:a2:f1:
                    66:91:5d:cc:b9:77:0c:72:c7:53:45:44:a1:d6:50:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:1C:28:20:E4:63:87:ED:CF:F9:30:F1:81:5D:6A:53:DF:71:08
            X509v3 Authority Key Identifier:
                keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:a3:73:2b:ae:4e:0f:ef:7f:75:c0:a0:2e:1f:31:8b:5a:
         c1:46:dc:6d:16:56:19:8f:0d:5d:33:15:1f:21:e0:a7:92:0f:
         d0:8e:28:47:65:17:59:b6:71:90:f2:32:3e:b8:08:20:bd:bf:
         97:6b:ba:25:16:6a:88:61:e4:41:5e:5b:02:80:67:15:05:46:
         3f:0b:ea:e9:8d:e7:d5:26:56:85:a7:0d:1f:23:0e:7e:6d:5e:
         de:df:13:85:8f:ef:79:65:51:87:d6:dc:b3:81:5c:f9:1c:52:
         7c:fa:52:00:8c:98:9f:bd:54:17:9e:85:c7:0b:d3:5c:e8:1f:
         aa:8f:a2:90:6f:71:a2:f2:97:bd:f6:56:fc:24:31:a4:cf:c1:
         03:89:9e:bb:d5:04:a6:4e:66:47:f0:45:32:23:70:3e:8a:c2:
         d7:72:af:3d:95:3c:fa:ed:ec:c7:f0:03:cd:9d:22:4a:8c:06:
         36:d5:00:44:e5:e0:e3:12:4b:16:bc:7e:9d:80:78:c2:f7:1c:
         a8:11:b4:11:44:b2:9f:f4:81:86:68:a8:35:46:62:bc:5f:7a:
         1e:3d:23:14:21:6c:ff:6b:4b:dd:7a:f0:87:52:34:84:03:8c:
         8d:33:07:92:42:3f:57:c9:30:80:a1:65:b7:cf:c9:f0:6f:eb:
         b8:f1:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:16:36 2025 by rpki-client