This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft
File:                     6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json)
Hash identifier:          2a5x2QuSQYKLbYZrXVu1IiFOwhmQH4FvHoKeXJUqV5M=
Subject key identifier:   AB:20:E0:D0:E0:37:F8:A8:77:6B:7E:F1:7F:F6:13:23:10:DA:79:DC
Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40
Certificate issuer:       /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640
Certificate serial:       33506D611AF15B873340A16EEB57F0CE4BF59489
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft
Manifest number:          0528
Signing time:             Wed 03 Dec 2025 04:31:12 +0000
Manifest this update:     Wed 03 Dec 2025 04:26:12 +0000
Manifest next update:     Sat 06 Dec 2025 07:55:12 +0000
Files and hashes:         1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=)
                          2: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: Xfh7a1FSvlr1xsQ9FWt2wbGaNLk8scFJdhXJl/lNX7I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl
                          rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 07:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:50:6d:61:1a:f1:5b:87:33:40:a1:6e:eb:57:f0:ce:4b:f5:94:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640
        Validity
            Not Before: Dec  3 04:26:12 2025 GMT
            Not After : Dec  6 07:55:12 2025 GMT
        Subject: CN=AB20E0D0E037F8A8776B7EF17FF6132310DA79DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:23:7d:92:1b:48:b1:74:49:63:ca:4d:a7:
                    81:79:4d:6c:eb:f5:72:54:fa:7b:d7:7f:0e:2d:94:
                    b6:15:4b:56:d6:4e:f0:e5:85:46:67:22:b4:62:17:
                    f9:e7:89:ec:bf:7f:79:5e:f3:49:aa:aa:ce:be:69:
                    51:81:99:ac:07:e9:a9:eb:c7:6d:0b:cc:e6:56:67:
                    d1:ee:3c:3c:ec:36:bc:f0:16:7f:96:db:35:30:e6:
                    66:ef:7f:de:08:38:23:5c:f1:da:b1:ff:0c:1d:08:
                    99:44:01:c7:b6:84:61:25:76:91:f9:8f:e1:fb:c3:
                    8a:e1:2f:78:c3:1b:51:30:07:db:13:28:f8:e6:58:
                    35:35:7f:20:a3:19:80:9b:7b:df:2e:3a:0c:c5:c0:
                    cf:c8:94:b2:90:87:b4:d1:97:55:90:57:71:82:48:
                    1e:7f:d8:f8:23:4c:07:92:04:11:77:f8:f7:7f:2f:
                    71:03:61:71:df:6d:ea:7d:82:9c:c8:9b:be:6a:74:
                    a0:17:2d:9a:25:d4:2c:66:b9:f6:b8:14:be:8c:b2:
                    6d:7f:cc:db:c4:c3:82:fd:5f:f4:23:0e:dd:83:b8:
                    6d:dd:9a:a0:dc:e3:e8:ba:c1:f3:f3:40:d7:f7:d0:
                    d2:3f:a3:38:50:a6:9d:d9:04:0f:0f:31:07:ee:f3:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:20:E0:D0:E0:37:F8:A8:77:6B:7E:F1:7F:F6:13:23:10:DA:79:DC
            X509v3 Authority Key Identifier:
                keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2b:89:b7:d0:e3:81:b1:a2:b5:26:97:c6:86:0c:a4:e8:fa:
         86:1d:16:d6:41:52:d8:88:fa:59:23:11:a7:d7:c5:f6:54:91:
         92:7d:bb:ae:a7:46:ca:ad:55:37:5a:de:31:a4:94:2c:81:29:
         aa:f0:d6:fa:96:aa:98:df:a5:2e:86:e0:66:2e:0d:f0:29:77:
         b3:48:a2:dd:7b:f0:09:2c:74:74:e1:51:15:b9:29:c9:0a:76:
         af:8a:a6:40:d9:f8:d0:49:4f:0e:a7:5b:10:35:5c:f2:24:b0:
         7f:99:a0:df:b2:c2:20:55:7e:24:a6:15:46:4d:36:c2:1d:cb:
         01:94:09:f5:00:40:8f:92:30:ca:18:c0:3d:de:21:12:1d:70:
         85:92:da:e2:cb:dd:4b:c8:15:76:2c:25:6e:1a:4d:b1:eb:26:
         9b:1b:f5:45:7e:78:ad:25:c7:91:86:15:b1:f1:7e:fe:6e:75:
         06:f3:e1:7a:06:b8:04:2f:48:c0:53:17:6e:24:47:bd:1b:04:
         af:1d:3f:ac:fe:aa:23:c8:e5:8f:1b:4f:0e:2e:10:9a:34:89:
         bf:29:4d:25:d4:29:79:a6:6f:f9:ae:45:c7:e1:e5:14:46:b9:
         38:c8:2f:e0:7c:3b:2d:d2:08:ee:ea:7c:d3:51:d0:9c:43:00:
         ad:27:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:28:29 2025 by rpki-client