This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
File:                     6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json)
Hash identifier:          srug+5cfisEBtc92BhlnUkio5p/K+xKizS6drSO/Z5o=
Subject key identifier:   61:07:29:7F:D1:A4:D6:B5:A5:63:39:9D:84:93:15:64:50:62:F9:05
Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
Certificate issuer:       /CN=6176447D40001B20E000D73A3B5E66B74A431374
Certificate serial:       3E94CDD8D8F4946CF74E1E3104796B45754B586F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
Manifest number:          FA
Signing time:             Thu 25 Dec 2025 00:31:27 +0000
Manifest this update:     Thu 25 Dec 2025 00:26:27 +0000
Manifest next update:     Sun 28 Dec 2025 06:39:27 +0000
Files and hashes:         1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=)
                          2: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: CnFWPxLBDg2autGwd8uFUbqEDQqwMZNtF2VjdC0E8SA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl
                          rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:94:cd:d8:d8:f4:94:6c:f7:4e:1e:31:04:79:6b:45:75:4b:58:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374
        Validity
            Not Before: Dec 25 00:26:27 2025 GMT
            Not After : Dec 28 06:39:27 2025 GMT
        Subject: CN=6107297FD1A4D6B5A563399D849315645062F905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:13:8d:1e:9c:9e:29:3f:98:e1:d2:4d:07:72:
                    fb:c9:2b:c7:99:6f:61:b5:5f:8b:d0:f6:f6:0f:be:
                    4f:28:17:d0:26:a9:1f:71:0a:98:82:07:3e:cd:8f:
                    64:00:bd:c9:4c:da:8b:ca:58:85:85:a8:2b:7d:2f:
                    8e:30:ee:af:88:48:4a:bc:14:f9:1d:c9:75:a8:1b:
                    9e:64:37:29:d1:4c:73:32:4a:47:05:3b:42:7a:21:
                    70:e8:36:ad:4d:12:65:9c:30:09:e1:fe:53:eb:05:
                    27:42:f4:fc:22:8a:6f:a6:d1:a4:a7:88:56:65:22:
                    2e:0c:a3:b6:90:7a:b1:d3:e1:58:7d:39:28:85:6c:
                    df:a7:87:10:ab:bc:96:6c:95:23:f0:c9:bc:18:a3:
                    a3:00:1f:74:1a:9a:5a:5f:50:a5:87:53:62:c8:08:
                    f2:60:c3:96:81:a3:46:fa:ed:08:6e:9b:e1:1c:f7:
                    f8:47:53:20:97:2f:f4:40:e1:8c:e6:99:fb:84:25:
                    26:a2:c4:f4:43:52:f5:64:28:cc:fd:01:1b:26:15:
                    18:5b:95:21:ef:e6:5e:b5:79:9a:5a:a4:33:60:38:
                    41:98:1e:2d:b5:37:0d:fb:d1:56:fe:93:26:0d:ab:
                    4c:9c:d3:9a:5a:01:74:56:b5:b2:97:78:b5:ae:3d:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:29:7F:D1:A4:D6:B5:A5:63:39:9D:84:93:15:64:50:62:F9:05
            X509v3 Authority Key Identifier:
                keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d8:1f:f6:48:bb:6b:81:03:d7:ae:30:b5:c4:99:21:44:b7:
         1c:f1:2a:18:33:b7:46:08:52:1b:80:e0:f2:65:c1:b7:05:96:
         5c:8d:5b:e2:6f:f9:59:69:38:33:a7:35:35:0a:00:1a:b2:a9:
         12:dc:1f:cf:8d:17:07:64:28:43:27:75:93:d3:ed:95:34:b8:
         74:76:29:ff:5f:49:74:64:91:b9:d0:95:23:16:c1:e2:9e:fa:
         5c:5f:38:59:28:a8:8f:8f:61:03:ae:d4:1d:5c:8a:08:4b:54:
         a9:da:77:c3:74:4c:ae:6e:f5:2b:7a:40:29:3e:b2:c7:7e:70:
         77:18:54:e8:2c:e1:64:95:0e:b6:39:3f:42:87:77:14:74:66:
         ee:aa:d0:b0:da:6e:37:75:1d:b5:3e:72:ac:91:02:77:56:d7:
         11:92:1c:9f:56:19:0d:e7:91:77:d7:58:12:1d:80:be:03:23:
         6d:5f:66:0f:42:19:be:a7:14:29:e8:6d:d7:ba:d3:89:aa:c5:
         4c:19:75:2a:bc:d7:45:f9:5c:b2:36:05:d4:b2:ab:2b:64:87:
         9a:78:5e:25:7a:da:ac:90:a6:e9:b4:8a:f2:e9:54:4d:6a:c2:
         94:4e:76:28:47:af:52:50:86:a6:be:72:1a:77:98:39:95:7e:
         8c:b4:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:32:42 2025 by rpki-client