This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
File:                     66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json)
Hash identifier:          trQY8BYIghRSxQC7sE+UH37FZJnn2u8a/wMRa+MCurI=
Subject key identifier:   21:6F:94:DE:67:1A:59:9D:CA:30:AC:6C:D3:B9:AF:6D:EB:81:3D:E2
Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7
Certificate issuer:       /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
Certificate serial:       53FD80DCBF09E94057757FEC01E036272EB4650E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
Manifest number:          0284
Signing time:             Mon 01 Dec 2025 06:22:24 +0000
Manifest this update:     Mon 01 Dec 2025 06:17:24 +0000
Manifest next update:     Thu 04 Dec 2025 15:15:24 +0000
Files and hashes:         1: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=)
                          2: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=)
                          3: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: FBKftcy5u8WLMlpAhKDN3+/qY75MgpkD76kkG1AgdUE=)
                          4: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=)
                          5: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: tog7/y6q5zzjvM3AgnbGcEaMTs9RL09OkOeyDIV9n3s=)
                          6: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=)
                          7: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=)
                          8: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl
                          rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 15:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fd:80:dc:bf:09:e9:40:57:75:7f:ec:01:e0:36:27:2e:b4:65:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
        Validity
            Not Before: Dec  1 06:17:24 2025 GMT
            Not After : Dec  4 15:15:24 2025 GMT
        Subject: CN=216F94DE671A599DCA30AC6CD3B9AF6DEB813DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:df:88:56:7d:6e:58:cc:56:ed:c3:d1:08:
                    ab:6b:53:fb:8d:1d:3e:d0:6f:fb:66:ed:c5:12:ad:
                    f8:28:31:72:6b:82:62:75:5f:3d:06:68:46:a8:a5:
                    d5:c8:e6:ff:d5:ef:3a:82:e3:25:85:52:74:20:d7:
                    18:d6:af:cb:41:8b:29:48:ca:e4:4e:87:0f:19:d3:
                    31:7d:45:f3:0a:73:7c:cd:ab:3e:13:00:25:db:1a:
                    d3:a7:40:8d:09:5f:ac:e4:be:44:fc:f0:ad:ff:42:
                    8a:42:2d:c7:64:58:11:82:51:2c:64:dd:db:62:77:
                    a8:ac:37:13:3b:a7:89:c0:86:eb:72:75:53:d0:78:
                    d0:c5:9e:f9:ce:5d:21:da:42:b0:a7:3f:a1:c9:c3:
                    35:fe:4c:db:7a:1d:1a:08:5c:ae:5f:f3:d8:f3:a7:
                    a2:7c:e7:16:9c:a6:0f:cd:de:21:89:5b:a5:0b:9e:
                    42:6d:64:b5:18:15:7d:41:cf:12:b2:a0:c1:38:49:
                    45:4c:c9:2c:06:f3:8f:ca:a7:93:3e:54:25:c9:45:
                    40:23:bb:44:eb:37:25:a1:68:93:aa:11:01:94:26:
                    85:d4:13:0f:b5:b0:4c:d0:dc:a7:3a:98:5d:1b:1e:
                    a0:c4:29:ec:39:6d:27:19:5c:5e:bb:b1:9d:73:ff:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6F:94:DE:67:1A:59:9D:CA:30:AC:6C:D3:B9:AF:6D:EB:81:3D:E2
            X509v3 Authority Key Identifier:
                keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:cd:ab:f5:7d:6b:67:e5:f1:e8:d9:9b:2d:5a:64:8a:b7:
         af:47:4f:3b:0d:7d:53:9f:92:a1:88:82:f1:ea:b6:65:d4:60:
         ac:54:2f:58:7c:0a:bf:a0:9b:42:81:f6:18:31:c7:01:b3:bb:
         4e:c6:89:02:c0:87:82:44:91:e2:2c:66:aa:5d:a5:b1:79:fc:
         e6:c2:df:6f:5a:53:0d:84:b6:8b:3c:f4:c8:66:6d:fb:22:21:
         6c:08:31:e9:06:ea:66:ca:1f:11:ba:0c:5f:a0:b5:63:44:62:
         61:52:54:9e:a6:c6:a2:01:30:67:fc:a1:71:b6:34:9c:fc:f7:
         d5:ad:c8:0c:14:1c:84:a1:51:b5:ea:18:43:c4:02:ac:8a:95:
         6b:71:f5:9b:c5:b1:b1:f5:8a:c6:66:2f:5b:9e:6a:06:21:7d:
         63:3e:5e:1f:97:f0:fd:3a:c6:41:c5:8b:54:c6:0e:c2:4c:9d:
         a9:8b:49:26:f0:88:57:f9:c6:1e:04:17:bf:62:1f:53:26:f7:
         c4:b6:b9:84:5d:30:12:14:0a:73:8f:25:4c:0d:86:74:19:66:
         ba:84:dd:82:e0:cf:c8:01:1e:a1:30:07:bf:75:17:17:3b:3a:
         8b:0e:7e:59:8b:6f:e1:6d:60:f8:e7:bf:3f:70:c7:61:2b:de:
         4f:6e:6a:36
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU/2A3L8J6UBXdX/sAeA2Jy60ZQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5
QkU1NzBFNzAeFw0yNTEyMDEwNjE3MjRaFw0yNTEyMDQxNTE1MjRaMDMxMTAvBgNV
BAMTKDIxNkY5NERFNjcxQTU5OURDQTMwQUM2Q0QzQjlBRjZERUI4MTNERTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gt+IVn1uWMxW7cPRCKtrU/uN
HT7Qb/tm7cUSrfgoMXJrgmJ1Xz0GaEaopdXI5v/V7zqC4yWFUnQg1xjWr8tBiylI
yuROhw8Z0zF9RfMKc3zNqz4TACXbGtOnQI0JX6zkvkT88K3/QopCLcdkWBGCUSxk
3dtid6isNxM7p4nAhutydVPQeNDFnvnOXSHaQrCnP6HJwzX+TNt6HRoIXK5f89jz
p6J85xacpg/N3iGJW6ULnkJtZLUYFX1BzxKyoME4SUVMySwG84/Kp5M+VCXJRUAj
u0TrNyWhaJOqEQGUJoXUEw+1sEzQ3Kc6mF0bHqDEKew5bScZXF67sZ1z/8ZPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIW+U3mcaWZ3KMKxs07mvbeuBPeIwHwYDVR0j
BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw
MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1
NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk
ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy
Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHv2zav1fWtn5fHo2ZstWmSKt69HTzsNfVOf
kqGIgvHqtmXUYKxUL1h8Cr+gm0KB9hgxxwGzu07GiQLAh4JEkeIsZqpdpbF5/ObC
329aUw2Etos89MhmbfsiIWwIMekG6mbKHxG6DF+gtWNEYmFSVJ6mxqIBMGf8oXG2
NJz899WtyAwUHIShUbXqGEPEAqyKlWtx9ZvFsbH1isZmL1ueagYhfWM+Xh+X8P06
xkHFi1TGDsJMnamLSSbwiFf5xh4EF79iH1Mm98S2uYRdMBIUCnOPJUwNhnQZZrqE
3YLgz8gBHqEwB791Fxc7OosOflmLb+FtYPjnvz9wx2Er3k9uajY=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:09 2025 by rpki-client