This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
File:                     C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft (raw, json)
Hash identifier:          buKD2ooxy7cVRig///wTnKTUAT8M1BWftgqECfb2FyQ=
Subject key identifier:   5F:3F:A2:48:28:A9:D7:51:57:11:C8:46:CB:B0:8E:70:13:AB:45:A1
Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
Certificate issuer:       /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Certificate serial:       5CE90110CF059612302C8D715975C1AA709F2332
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
Manifest number:          02AE
Signing time:             Wed 03 Dec 2025 02:22:09 +0000
Manifest this update:     Wed 03 Dec 2025 02:17:09 +0000
Manifest next update:     Sat 06 Dec 2025 07:24:09 +0000
Files and hashes:         1: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: Ngt//yoU0gPCcUNIg6gz5GqlpjqLXC6sDwhwp1ku9U0=)
                          2: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: 0uhRI2twQUwOL4bXfxCRKkhSHjZlw1Z+9ZZ7PGpOhe4=)
                          3: C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl (hash: grii0ouailln7G4GkwftrtCaEiUQRwSXqHgu3dBlDVo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl
                          rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 07:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e9:01:10:cf:05:96:12:30:2c:8d:71:59:75:c1:aa:70:9f:23:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
        Validity
            Not Before: Dec  3 02:17:09 2025 GMT
            Not After : Dec  6 07:24:09 2025 GMT
        Subject: CN=5F3FA24828A9D7515711C846CBB08E7013AB45A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:5d:ad:d7:a0:c3:9e:38:95:96:bd:fc:9a:
                    87:49:d2:56:c3:fa:0d:a8:01:01:03:52:b5:b1:6a:
                    f8:b7:ec:b1:6f:8b:01:63:f6:58:15:a2:9f:c0:30:
                    55:e0:8c:72:37:67:3f:5a:c8:e8:a4:38:c4:45:d2:
                    9b:e0:4b:b8:3f:3a:7b:8f:6b:66:6f:b9:dc:c4:4d:
                    12:2a:54:21:6b:ca:a0:d6:12:7c:ce:2e:af:1c:41:
                    50:03:9a:92:78:8e:b6:8b:26:0c:4b:f2:50:92:86:
                    76:49:1b:39:f8:56:f7:1f:05:13:92:3e:83:af:84:
                    a3:ae:18:98:21:70:f8:e9:55:c6:80:77:6c:e5:86:
                    41:fc:d9:0d:13:28:fc:ca:04:8a:e8:81:9c:d3:da:
                    bf:e9:83:33:e2:c3:58:a8:9d:af:12:00:4a:36:c1:
                    20:26:99:f0:19:61:4f:4a:2f:fc:17:b7:69:80:0b:
                    d0:2d:fa:bc:f8:ff:d5:20:08:d7:5a:a5:7d:42:83:
                    5a:20:2f:11:93:17:a5:34:29:f8:99:86:ba:63:55:
                    73:ca:2d:4f:c1:e0:f0:a6:08:fc:53:f0:6a:9c:b7:
                    e8:d6:74:9a:34:da:1d:93:a2:fd:92:26:a4:00:60:
                    4b:44:5b:a7:4d:72:34:46:6a:04:14:81:39:15:17:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3F:A2:48:28:A9:D7:51:57:11:C8:46:CB:B0:8E:70:13:AB:45:A1
            X509v3 Authority Key Identifier:
                keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:78:ba:28:e5:10:d3:ad:2c:1c:7c:2c:25:0d:23:15:28:6f:
         a1:d3:7c:a5:ec:d6:2c:b7:b1:89:6e:c1:ad:e2:94:b4:66:fb:
         1b:44:04:ff:4c:68:f6:d7:b5:15:35:2d:1d:e1:d8:9d:da:bd:
         14:f7:9b:a5:0e:39:0b:0c:8e:7c:45:61:a8:d2:5a:aa:04:fc:
         71:27:ab:86:44:43:24:c7:b5:b8:8a:c6:0b:60:2b:b9:44:eb:
         4d:cb:4a:11:d9:75:95:27:29:9d:86:05:bb:a9:e4:c0:f6:61:
         9b:fd:55:a7:df:30:68:ff:ce:bb:ba:81:b9:57:85:dc:8a:57:
         ee:47:39:dd:34:b2:fb:6c:d9:0c:28:45:dd:3e:bc:6d:3b:dd:
         96:99:b3:21:88:e6:f2:1b:d1:51:37:51:d3:d4:c6:39:68:fa:
         a3:3d:ba:44:a5:fb:ac:82:0d:b1:9e:51:fb:10:ed:fa:2f:49:
         5f:43:64:e8:e1:56:22:21:15:58:e4:74:9d:36:30:ec:04:f7:
         83:e5:1f:a1:0f:87:40:a7:ed:f8:11:0d:d0:06:e0:32:2f:29:
         74:03:b9:f9:30:f4:19:2a:52:20:35:a6:64:78:6c:78:31:be:
         03:7e:d7:b6:aa:04:11:8a:e6:9c:1f:50:d2:3d:73:7f:9f:03:
         e4:4d:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:33 2025 by rpki-client