This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
File:                     ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft (raw, json)
Hash identifier:          wjgBzp2R8FU/krqXMUdmuCb+NdRN97ud6iMSZt1lPcI=
Subject key identifier:   6B:A0:67:50:81:DD:DD:5F:DD:C1:D6:C2:29:3B:FD:2E:7C:29:13:C5
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Certificate issuer:       /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial:       3978F03F5CE4E4BDCA262520029F3B91A245B3F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
Manifest number:          020E
Signing time:             Tue 02 Dec 2025 08:10:05 +0000
Manifest this update:     Tue 02 Dec 2025 08:05:05 +0000
Manifest next update:     Fri 05 Dec 2025 11:26:05 +0000
Files and hashes:         1: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: 874x7Ob+P1gnAjnP1blHxACfVuuuGxnGAVUEWJIVT2g=)
                          2: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: OjZssXYKrVMWzUnHRz7s+7gvCsjaEtAJXH0INXsIRL8=)
                          3: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 0MTgOgopjubbvpZEDfvpwMMJjT0ePI0/y4zgrFp+eQo=)
                          4: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl (hash: 1JsJic6e6uyGV8j2tovxzosTpyRIS/Km0vTxTayhgLI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
                          rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 11:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:78:f0:3f:5c:e4:e4:bd:ca:26:25:20:02:9f:3b:91:a2:45:b3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
        Validity
            Not Before: Dec  2 08:05:05 2025 GMT
            Not After : Dec  5 11:26:05 2025 GMT
        Subject: CN=6BA0675081DDDD5FDDC1D6C2293BFD2E7C2913C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:7a:d3:d9:df:a0:f8:a4:53:f8:a0:a8:fe:
                    46:c4:55:97:fb:6e:bf:3c:56:2e:cf:c9:76:f9:27:
                    e1:74:f0:c1:8f:de:9a:4b:8f:97:f4:1a:1a:ff:80:
                    be:d4:50:55:d0:79:64:ea:fc:0e:45:25:e5:78:11:
                    3f:a2:80:38:bd:47:98:2e:09:7a:77:bb:75:b9:47:
                    ff:41:1e:e6:5b:0f:be:62:13:f6:09:7b:e7:ba:66:
                    95:2b:9e:a4:2a:e6:5b:a7:47:91:d0:51:6c:db:3f:
                    59:10:3e:60:39:e1:71:1b:58:29:40:64:3a:ad:73:
                    fd:f3:72:fa:8b:50:b4:8f:9c:a8:15:cf:22:a9:ff:
                    f3:15:fe:b4:fc:ac:f2:aa:80:d8:fa:b5:10:36:7e:
                    af:e0:73:23:6a:ca:4b:5f:8f:8f:3f:86:dd:ab:04:
                    bb:61:ed:cc:57:2d:c7:75:62:90:ed:ba:5e:a0:68:
                    29:18:c7:d9:f8:24:36:1b:e1:05:d1:38:b0:21:84:
                    65:5c:0b:7e:c2:26:83:56:f9:52:e2:04:cc:7e:b5:
                    46:74:87:e9:04:0e:f5:24:ff:5b:d7:56:40:a1:64:
                    cf:59:90:f6:71:3b:ba:0f:6c:b3:ed:f0:08:d2:4e:
                    2d:50:1f:ee:f4:6b:84:7e:4d:db:83:69:ca:ca:04:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A0:67:50:81:DD:DD:5F:DD:C1:D6:C2:29:3B:FD:2E:7C:29:13:C5
            X509v3 Authority Key Identifier:
                keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:4b:b9:fe:b2:29:43:00:ab:bd:e0:5a:ef:35:e7:6b:fe:
         3e:6c:55:a9:13:a7:36:8b:d6:74:01:a5:99:87:ed:b4:f4:a5:
         26:d6:6d:f5:04:b6:bc:8c:b4:42:bd:08:3e:ed:d2:04:4c:18:
         73:6d:e4:e4:77:fc:80:38:c0:17:34:d5:71:0d:6b:1a:05:ec:
         75:55:1a:78:c0:a5:6c:86:6c:cc:f3:a3:e7:9a:f4:a0:36:c6:
         4b:1a:33:f2:c0:c8:26:bb:f8:06:80:92:3d:d6:66:a5:f2:f6:
         d7:a8:d0:76:74:1f:d9:02:a7:c6:ec:f4:40:bb:49:8b:d7:dc:
         35:7e:59:94:b4:94:01:27:ce:f4:7e:89:fc:89:1b:20:d3:2b:
         be:06:55:4d:5c:0f:a7:2d:4c:da:e4:9b:7c:36:a5:3a:d8:26:
         d8:6f:69:04:4a:6d:09:da:dc:33:ec:d1:6a:31:f2:48:03:0c:
         09:f0:0c:b1:1d:c1:78:0c:81:14:01:2d:ee:97:8c:e4:00:65:
         96:73:ec:cf:7f:84:fd:29:e2:24:0e:55:55:41:b3:93:6c:a5:
         31:3f:ec:58:29:b0:5f:25:bc:19:00:88:3a:aa:27:23:01:f7:
         c1:46:1f:78:09:df:32:ce:32:86:30:4b:50:35:4d:0a:67:73:
         50:15:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:26 2025 by rpki-client