This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
File:                     6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json)
Hash identifier:          8R5obaCCj1CtT0RhEZMqInvsIqY8ElKRGOfeq/0trn8=
Subject key identifier:   71:BD:A3:0E:6B:92:77:C9:51:42:B4:FD:83:3D:0D:7D:A5:FC:DB:7A
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       6E8499C9E36F255F97F2837318920321F9A462B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
Manifest number:          029D
Signing time:             Tue 02 Dec 2025 20:31:35 +0000
Manifest this update:     Tue 02 Dec 2025 20:26:35 +0000
Manifest next update:     Sat 06 Dec 2025 03:27:35 +0000
Files and hashes:         1: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY=)
                          2: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: 7skPXD0GcBP0y8K0CJN6k0vAhi8+IRcH6Kcm8uU8vVs=)
                          3: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: fJ4g0K772WVp53tZH6Cr6nPqsZvGnVS3VfLvicif+Ms=)
                          4: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: B5FIVhTLbcOj1WvEMgeUYSizQ6yFV6nENZ/9szfsWKQ=)
                          5: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: kIaQGWL5YUwAplbYF3rxqdRNmuWMqoQK88/zSxpS0Qk=)
                          6: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4=)
                          7: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: +1/NKTo1zjk1P1ZAkPLDaaCsjoolxhbaib5j0otnVl8=)
                          8: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: M2pyi/IMF/9bDLHyO64naWXcT6UxKr+6hMI7b6iDcRY=)
                          9: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: PpAfKuTLC2LZflDGFc6yX8hZy8hNL9DWJF0ArhdPsJs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 03:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:84:99:c9:e3:6f:25:5f:97:f2:83:73:18:92:03:21:f9:a4:62:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Dec  2 20:26:35 2025 GMT
            Not After : Dec  6 03:27:35 2025 GMT
        Subject: CN=71BDA30E6B9277C95142B4FD833D0D7DA5FCDB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:3c:a7:09:86:71:61:a0:9a:b3:61:70:1e:
                    8b:ea:28:26:dd:f6:a4:12:79:2f:95:9a:df:b0:c7:
                    e9:8c:28:a9:cc:1d:1c:60:91:b4:1c:4d:15:5f:05:
                    0f:ef:b6:6a:5b:59:82:47:d9:43:a9:f4:99:d3:3c:
                    a1:88:a2:b1:6c:ce:53:4e:49:4e:34:64:38:69:4f:
                    1a:6c:46:62:54:e0:7f:d0:3e:c0:8c:ed:aa:58:a8:
                    5b:a8:a4:aa:16:30:b5:7b:70:fa:55:8c:58:9d:5d:
                    ff:43:61:38:94:b2:db:aa:63:04:c8:e5:44:f4:06:
                    1b:c7:55:8e:91:87:5a:93:ea:89:2e:6b:3e:79:f2:
                    89:2a:52:01:de:0f:b7:fa:37:84:92:bc:4c:59:e9:
                    37:f5:5b:e7:3c:c5:8c:a1:09:4d:e7:9b:72:4d:55:
                    46:50:28:53:73:08:af:2c:cd:a6:88:2d:27:a9:d9:
                    fe:56:df:d2:31:3c:14:13:56:91:72:80:aa:66:e0:
                    ef:57:84:a2:8c:67:90:9f:65:ac:ac:92:c0:df:6d:
                    54:e7:9d:82:e4:76:c5:7f:de:cb:77:dc:64:f8:56:
                    ed:87:e3:e7:98:06:f7:0a:32:ec:cb:28:fb:ac:26:
                    1e:08:fe:ca:11:a5:ed:48:77:ba:8c:2a:4d:f7:32:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:A3:0E:6B:92:77:C9:51:42:B4:FD:83:3D:0D:7D:A5:FC:DB:7A
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9e:ff:0a:a6:49:97:a7:38:05:16:4c:86:27:bc:97:24:37:
         25:4a:95:07:60:16:c5:26:6e:14:0c:bc:f0:99:69:28:f9:bd:
         06:de:80:94:c5:3f:48:4a:05:fa:c5:6b:9f:27:3d:b6:c4:25:
         15:0d:2a:ac:d6:17:56:6b:48:24:86:f7:48:e6:d2:43:db:9c:
         b8:be:15:fa:ab:35:39:04:aa:a8:52:4e:cf:52:8d:5e:85:b4:
         c0:f8:e2:e0:dd:16:08:89:fd:5a:01:a4:10:81:77:dd:38:2f:
         5c:eb:04:7c:22:a0:91:d5:83:57:5f:1f:68:c6:b7:89:7a:72:
         cb:df:42:a8:a6:53:03:60:82:0b:5d:be:60:d9:e9:46:b3:16:
         a7:64:67:8b:14:13:62:6c:b0:d5:b4:29:9c:c8:7a:03:68:9a:
         c4:de:b1:ed:e0:0c:35:55:9d:6c:d4:fb:59:37:83:60:0c:28:
         d9:12:52:d3:4c:95:88:03:1e:82:14:c1:41:5f:a6:5d:c1:21:
         30:20:2c:b6:56:da:10:11:25:f6:66:07:f3:b8:d5:fd:29:49:
         2c:43:a1:6a:fd:0a:2d:44:d9:3a:69:66:2c:0a:30:53:8d:9e:
         0e:fe:67:5d:48:24:2f:0e:f0:bb:de:2c:98:6a:38:c9:3e:9f:
         63:63:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:47 2025 by rpki-client