This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
File:                     DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json)
Hash identifier:          +W9NGZaIqHcKXRhGKaT3ANx1kTwtCT8iqb7ggClxTpU=
Subject key identifier:   F8:60:18:0A:73:79:AF:04:9E:BA:69:CF:90:4C:50:36:91:EA:33:D9
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Certificate issuer:       /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial:       4DF904080259DC524BD951A3DD93DAF12AE6EC25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
Manifest number:          0535
Signing time:             Thu 18 Dec 2025 18:01:47 +0000
Manifest this update:     Thu 18 Dec 2025 17:56:47 +0000
Manifest next update:     Mon 22 Dec 2025 01:05:47 +0000
Files and hashes:         1: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: 07xG5Lgy9sSzDM/xsk0oSmTGJfesBjF8Okyt4G+KYQo=)
                          2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=)
                          3: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=)
                          4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=)
                          5: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
                          rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 01:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f9:04:08:02:59:dc:52:4b:d9:51:a3:dd:93:da:f1:2a:e6:ec:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
        Validity
            Not Before: Dec 18 17:56:47 2025 GMT
            Not After : Dec 22 01:05:47 2025 GMT
        Subject: CN=F860180A7379AF049EBA69CF904C503691EA33D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:85:84:b2:ef:5c:25:e0:eb:b2:d2:5d:69:
                    b7:50:6e:de:6b:6f:5f:cf:2d:13:b5:6b:e0:d4:fb:
                    2b:b7:b2:b9:ed:80:ce:c3:11:c9:1c:83:c2:48:02:
                    82:1a:d2:43:ff:84:35:ee:37:23:1f:46:5e:af:43:
                    17:86:07:58:1c:32:a9:5d:78:9e:20:29:67:85:52:
                    c5:b3:cb:50:72:11:5b:92:8a:ab:e4:49:1b:8a:45:
                    e4:a9:c4:66:7c:2d:78:38:c6:84:71:c0:1d:8f:e4:
                    da:07:4e:18:f9:65:48:2a:83:d1:51:f9:41:60:57:
                    89:c1:8d:23:42:78:99:52:d8:d5:21:40:4e:20:56:
                    fb:26:3f:17:53:a6:2a:90:24:3d:56:37:bd:a5:5b:
                    c0:c6:5e:19:b9:78:66:f9:56:59:3c:dc:52:61:dc:
                    bb:f6:e5:d3:ec:0b:34:48:fa:31:79:a2:1b:59:f4:
                    52:71:2d:8f:75:fd:c2:df:ce:1c:d4:69:ab:fa:fd:
                    45:82:22:1b:a8:6e:49:dd:dd:1e:f5:02:9e:31:6c:
                    64:78:fe:08:75:e0:e0:b8:25:d8:76:e2:0c:3c:ac:
                    d4:03:8c:36:f9:d9:70:aa:d6:7d:41:83:7c:07:9b:
                    42:b7:ad:86:65:99:2b:98:62:54:ab:30:38:bd:a3:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:18:0A:73:79:AF:04:9E:BA:69:CF:90:4C:50:36:91:EA:33:D9
            X509v3 Authority Key Identifier:
                keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:17:13:42:56:3a:ec:fb:b2:25:a5:e8:ac:b3:95:e9:81:28:
         d5:24:e2:94:e1:de:65:7c:8b:be:a6:58:38:df:7a:d1:f7:2a:
         c8:d5:60:11:a9:23:0c:6e:e7:d5:7d:95:85:57:5e:b0:b1:4d:
         ac:9c:f5:38:4a:ac:7b:35:bf:86:0d:e8:0c:d6:c3:ca:8e:8e:
         3d:e9:79:0c:73:57:43:c2:0a:02:72:ca:61:df:ea:fc:d2:af:
         5e:b9:53:cf:ac:a9:7f:2d:23:2e:81:ff:2a:e1:42:bb:4e:9b:
         52:62:11:e0:86:49:85:b8:e1:da:07:8a:0b:eb:bf:28:7c:fe:
         10:2a:f8:42:7f:5c:8b:96:fc:fd:d2:db:a6:ba:0d:28:f7:08:
         ac:7a:92:22:da:00:a0:0d:78:f8:8a:a2:c4:fb:33:44:25:21:
         21:e8:84:da:67:58:2f:de:84:3d:f9:64:f0:b7:29:19:88:7a:
         6b:92:27:da:e3:14:c0:9d:86:01:3f:e2:31:8f:00:ab:07:89:
         d9:ac:c0:aa:10:ad:db:e9:2d:17:59:85:9c:49:42:fe:14:44:
         3f:d8:6e:44:8a:6d:61:b7:98:f1:8c:d0:60:9b:2e:37:ff:40:
         ae:ca:a6:2d:4b:63:ed:f6:f8:e1:01:4b:ed:54:45:08:9f:a9:
         62:29:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:57:25 2025 by rpki-client