This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
File:                     D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json)
Hash identifier:          e7AQ4UJbx6f8n3+6oIWMedx7UaxSXyDBxUz80jIcA5Q=
Subject key identifier:   F9:9D:5D:07:C1:E3:E6:01:23:A7:FE:6F:A2:40:94:26:48:7B:6A:7A
Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
Certificate issuer:       /CN=D6FA07102C8726922074D42DFF59946144A13506
Certificate serial:       76D74661BED17E8AEA33E84FAD4BFA99CB2E4A05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
Manifest number:          A5
Signing time:             Sat 06 Dec 2025 19:02:25 +0000
Manifest this update:     Sat 06 Dec 2025 18:57:25 +0000
Manifest next update:     Wed 10 Dec 2025 02:42:25 +0000
Files and hashes:         1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: uESMO/TYt62Dt8aSp2CJiXV+neuCP1d5wUeLAk5n95o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
                          rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d7:46:61:be:d1:7e:8a:ea:33:e8:4f:ad:4b:fa:99:cb:2e:4a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506
        Validity
            Not Before: Dec  6 18:57:25 2025 GMT
            Not After : Dec 10 02:42:25 2025 GMT
        Subject: CN=F99D5D07C1E3E60123A7FE6FA2409426487B6A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:61:12:eb:b9:ba:9a:b3:95:ca:9b:4b:d7:
                    bb:ba:94:2c:c8:29:2e:a7:42:0e:a2:05:48:10:ac:
                    66:08:52:8e:62:f4:48:5b:d1:64:0d:93:c5:ee:4e:
                    ec:22:33:25:41:91:32:d2:a9:a4:4f:05:37:e9:07:
                    3b:7c:b6:ba:af:ba:17:b1:fd:6e:61:37:9b:1e:45:
                    b0:31:c7:7a:e7:35:69:9c:8e:87:87:aa:dc:70:63:
                    f7:96:37:71:8b:72:ba:fb:75:89:59:09:99:c1:89:
                    30:20:30:e9:26:c5:a5:f0:0e:7d:72:c7:0d:d3:8b:
                    c4:c8:b0:ab:c3:96:e4:d5:ff:f8:96:4d:cd:64:ae:
                    93:57:53:ad:19:9c:50:a7:1d:74:dd:25:6f:46:db:
                    c7:5f:6b:b4:02:a2:e7:28:45:87:24:e1:1d:c4:01:
                    af:b3:bb:47:9b:38:bc:fb:d8:35:27:cf:bf:20:bb:
                    32:69:31:cb:ef:4c:62:01:2b:b7:cd:95:7e:23:58:
                    d2:fc:13:e1:7e:c7:fe:3d:c4:aa:6f:2a:5f:a2:e9:
                    e2:1b:91:1c:8f:68:9d:a7:16:65:b5:e4:c5:29:4d:
                    3e:0d:cb:1b:84:75:7a:fb:76:84:a7:24:f7:61:45:
                    09:26:9e:7e:d6:21:0e:4d:6b:63:c7:22:3f:b6:37:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9D:5D:07:C1:E3:E6:01:23:A7:FE:6F:A2:40:94:26:48:7B:6A:7A
            X509v3 Authority Key Identifier:
                keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:c3:ac:e9:1b:ac:61:df:03:72:46:a7:ba:ce:4f:c7:c6:bf:
         37:07:d7:66:f8:75:46:2f:5f:c9:54:af:2c:0e:f1:f5:8a:54:
         7a:52:3b:4d:e1:a1:81:92:30:d8:3d:61:7c:88:2f:42:19:c2:
         55:8b:15:39:ca:c9:45:e8:d9:15:8e:9c:29:fd:9d:47:33:9f:
         96:ff:e1:f4:23:51:56:21:ca:53:a3:66:62:de:bd:0c:b4:f7:
         2e:21:26:c0:23:9b:a8:1f:c6:e2:85:29:18:07:f4:33:63:c4:
         63:96:21:82:af:40:14:5a:62:93:08:1e:7f:60:c4:70:23:cc:
         e8:f7:ec:c5:1c:60:2c:ef:ca:88:c7:44:a4:7a:aa:98:6a:e3:
         c6:7b:27:f5:4c:a9:dc:d7:8f:76:3d:8b:e1:a9:9b:19:b2:1c:
         99:3f:c9:3d:f7:7e:b3:26:39:8c:00:3e:93:a4:a7:38:e7:51:
         12:c4:67:0c:99:8c:b3:64:1c:19:bf:9e:e7:67:db:61:cc:a5:
         98:b3:93:83:6b:48:25:3a:63:23:c4:bf:27:7e:bf:11:2b:8e:
         71:65:b0:27:06:3b:68:7f:dd:53:b3:34:e0:36:dd:be:42:9c:
         6f:c0:12:38:bb:fc:73:d6:9c:98:c9:de:6d:ed:81:a7:9d:d9:
         11:92:77:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:52:34 2025 by rpki-client