This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          Sd57RlirBVC7kaGD6VQ/h1vCDEQ0JymjbMhnNNgIjbE=
Subject key identifier:   95:98:57:6F:89:6A:4F:CA:E0:36:B1:CE:33:46:2C:AA:DF:C7:00:4B
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       68FB8C6DA9DBD9B7257CF026318F024B08953F34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          026B
Signing time:             Thu 18 Dec 2025 09:11:27 +0000
Manifest this update:     Thu 18 Dec 2025 09:06:27 +0000
Manifest next update:     Sun 21 Dec 2025 18:46:27 +0000
Files and hashes:         1: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: Kwpaf+CKy/I8FnORnVT5IekTJRHGpL8PR5cEot1/zac=)
                          2: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: AAfAK41bYgm/zJnOAM99b/7VZxCthhr1nADRxL8QtvA=)
                          3: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: O51+yh/myhmzBLnFSKrmxNaOkN9zLMNSiLH+jGUuyWg=)
                          4: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=)
                          5: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=)
                          6: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=)
                          7: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=)
                          8: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=)
                          9: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=)
                          10: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=)
                          11: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=)
                          12: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=)
                          13: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 18:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fb:8c:6d:a9:db:d9:b7:25:7c:f0:26:31:8f:02:4b:08:95:3f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Dec 18 09:06:27 2025 GMT
            Not After : Dec 21 18:46:27 2025 GMT
        Subject: CN=9598576F896A4FCAE036B1CE33462CAADFC7004B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:95:fc:72:2a:6a:1f:41:4f:e5:88:4c:a8:
                    e4:3e:ec:65:6e:fa:21:b1:26:65:55:03:8a:d8:c3:
                    5c:2f:f5:0e:12:05:44:86:eb:72:4a:3e:92:ca:77:
                    ed:ce:95:7d:f3:48:c3:b2:47:f4:ec:b9:35:69:85:
                    2d:59:03:e5:2f:65:1e:ec:a7:b1:61:5e:16:cc:a6:
                    15:6b:43:17:d7:93:91:07:b2:8d:fc:02:fc:e1:0a:
                    0c:1a:04:e7:08:a3:f4:90:2b:05:19:5f:0a:d2:4a:
                    43:0e:d8:8d:12:c3:33:58:28:d0:36:b3:6f:46:e7:
                    64:f2:f9:ef:ed:ab:ec:16:ec:2c:38:ba:32:8d:68:
                    fa:fe:6b:d6:d8:eb:40:a8:31:54:bb:dc:13:f0:13:
                    b4:17:a0:ef:f9:34:68:93:a2:80:44:7c:3c:02:3d:
                    13:25:6e:c0:a3:c6:fd:2e:b2:2a:2f:a2:5d:2f:37:
                    96:e5:3e:76:be:c8:25:56:e7:44:cb:3e:06:6d:df:
                    06:ca:4b:a3:10:d9:23:83:34:dc:84:ed:33:bf:43:
                    a2:6c:e5:04:b7:fe:49:8a:b6:4e:94:e3:77:02:ab:
                    50:d5:75:6e:54:98:d6:cd:cc:c3:50:c6:9e:28:aa:
                    74:e7:90:cb:e9:33:d5:bf:fe:3f:96:27:1b:37:4e:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:98:57:6F:89:6A:4F:CA:E0:36:B1:CE:33:46:2C:AA:DF:C7:00:4B
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:95:5b:b9:ec:93:2d:98:d3:9e:36:41:12:38:37:cf:99:2c:
         7f:80:c5:62:93:db:27:ca:c6:c1:77:52:0e:dd:1e:12:ce:71:
         6f:4b:ee:0b:0c:5e:7f:a4:fc:9d:22:1f:b0:16:21:35:a5:b1:
         ff:6b:25:71:9a:08:84:29:81:90:7f:e1:0d:e6:d7:4a:04:d4:
         eb:c5:24:a9:28:80:ab:84:60:b8:61:27:5b:28:2f:0e:3f:7c:
         92:8c:91:5a:c4:3d:d3:e3:eb:ad:f1:54:b7:9a:5b:ae:a5:29:
         4e:47:2a:9e:a1:24:2d:be:2e:a5:0b:e2:77:ed:12:47:2a:c0:
         50:5e:46:9a:77:3a:50:78:19:37:db:8c:8b:49:59:02:03:0e:
         84:d2:7c:ed:98:39:ed:69:29:7d:08:c7:88:c2:7f:de:c8:a8:
         fc:e4:a1:ff:f8:a6:c2:d9:ed:9e:3a:b3:01:27:f9:f7:b0:d2:
         5d:9b:74:1a:a3:53:d0:a9:69:b1:b2:20:c2:71:54:96:62:4b:
         a5:53:6a:d1:ea:79:0e:93:d4:50:30:fc:6c:0f:05:3e:3b:5f:
         16:fb:c7:0f:62:81:9f:c6:75:17:c2:7f:71:81:a4:82:cd:16:
         b1:30:70:91:fe:ff:7f:57:61:a8:a0:5b:32:e1:f1:1e:99:88:
         07:70:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:49:17 2025 by rpki-client