This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
File:                     6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json)
Hash identifier:          Nps9ZVUldH0oi7pAMNAXADN34SIZFWPlRG1TyGAgKrE=
Subject key identifier:   BA:A9:7B:D5:43:8B:2D:F4:2C:8C:3E:1A:A1:51:10:93:F5:75:E8:C8
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       430F3D3562191E9CF9E07F8AB902AC92C7180A1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
Manifest number:          0527
Signing time:             Mon 01 Dec 2025 20:20:42 +0000
Manifest this update:     Mon 01 Dec 2025 20:15:42 +0000
Manifest next update:     Fri 05 Dec 2025 01:35:42 +0000
Files and hashes:         1: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=)
                          2: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: sSh9LakCtNOwBv9vkofzvQpNl/IGE16RBDesGOEA5eQ=)
                          3: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=)
                          4: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=)
                          5: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=)
                          6: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=)
                          7: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=)
                          8: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 01:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0f:3d:35:62:19:1e:9c:f9:e0:7f:8a:b9:02:ac:92:c7:18:0a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Dec  1 20:15:42 2025 GMT
            Not After : Dec  5 01:35:42 2025 GMT
        Subject: CN=BAA97BD5438B2DF42C8C3E1AA1511093F575E8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:a8:75:b1:c2:01:5e:1a:94:df:ea:53:f5:
                    f5:be:c2:30:44:ba:3b:a1:03:ce:97:f8:05:b5:83:
                    49:a6:8a:4b:b5:51:98:fa:69:94:c3:7f:6d:6b:f9:
                    be:65:ea:3d:b9:e7:45:55:03:65:9e:e7:96:0f:7f:
                    f7:aa:87:69:90:25:fb:a1:63:46:94:28:d5:2a:db:
                    d0:b0:47:43:bb:ee:8d:7b:35:b8:9a:c9:ef:e0:95:
                    02:de:25:56:55:ab:e4:ee:e7:47:a3:d3:d1:c9:00:
                    d6:9f:7a:1d:3f:a3:ff:94:40:1e:e1:4e:07:29:ee:
                    bf:e5:90:7d:31:36:a4:00:08:0e:64:69:fd:8d:de:
                    34:d4:81:85:db:ec:99:74:8c:dc:91:bf:de:9b:1c:
                    1a:b7:7b:d2:13:ff:4b:16:68:a0:ad:47:bb:14:b2:
                    6d:ee:c6:44:87:91:8c:a3:5c:0c:2a:79:54:fd:6b:
                    f6:cb:9f:db:40:2d:c0:98:e0:e8:63:e9:f8:1c:47:
                    1b:d9:c1:14:1d:41:ad:46:aa:a3:c1:a2:e6:e2:99:
                    42:84:45:4e:38:e3:f2:0b:a6:5e:57:f6:91:e2:ec:
                    1e:c2:f4:4e:06:18:a7:58:31:1d:1c:06:cf:28:93:
                    35:bd:1e:70:f8:b9:79:ef:30:41:be:81:9a:c1:72:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A9:7B:D5:43:8B:2D:F4:2C:8C:3E:1A:A1:51:10:93:F5:75:E8:C8
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ba:f1:68:bf:0c:81:c0:fa:0f:06:30:27:82:c9:c4:75:55:
         1a:b0:e9:f7:8b:48:f8:67:32:84:4b:d0:cf:aa:6d:fb:aa:1e:
         b1:ae:9b:68:85:4d:79:e2:41:42:d6:e0:08:9f:93:d2:89:00:
         dc:ad:af:b6:0a:5f:7e:d5:ff:66:47:de:48:3b:28:c8:12:c3:
         98:e6:c0:83:17:86:62:cf:f9:2c:3f:e8:3f:bd:2d:5b:54:a0:
         ca:c8:e0:7a:60:4f:96:02:8d:41:36:46:d6:85:5d:62:4c:50:
         60:74:91:fb:1c:73:17:8e:17:d2:47:fc:4c:0e:d8:d4:b5:0d:
         7c:c1:cb:4e:61:33:5a:c7:7c:dd:27:37:56:48:7e:5c:7d:ec:
         5a:48:b5:47:49:db:2a:ff:5d:ed:b5:04:6e:de:ff:d1:1f:00:
         47:36:d4:b5:17:95:13:a1:dc:1a:62:29:ac:34:46:17:72:7e:
         84:a0:3d:fd:38:e1:69:e2:6d:d1:b8:82:68:34:e1:ea:08:e3:
         7b:39:c3:85:43:11:3f:75:31:6f:05:9b:c6:06:cd:49:28:ee:
         45:6c:4c:52:b6:c5:3a:74:79:69:fb:a8:87:da:1a:3d:7e:3c:
         79:fc:6b:13:47:06:94:95:1d:9d:c0:f6:7c:ef:a2:90:46:66:
         3f:9d:51:4c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQw89NWIZHpz54H+KuQKskscYCh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy
N0JFN0IxOTAeFw0yNTEyMDEyMDE1NDJaFw0yNTEyMDUwMTM1NDJaMDMxMTAvBgNV
BAMTKEJBQTk3QkQ1NDM4QjJERjQyQzhDM0UxQUExNTExMDkzRjU3NUU4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3K6h1scIBXhqU3+pT9fW+wjBE
ujuhA86X+AW1g0mmiku1UZj6aZTDf21r+b5l6j2550VVA2We55YPf/eqh2mQJfuh
Y0aUKNUq29CwR0O77o17Nbiaye/glQLeJVZVq+Tu50ej09HJANafeh0/o/+UQB7h
Tgcp7r/lkH0xNqQACA5kaf2N3jTUgYXb7Jl0jNyRv96bHBq3e9IT/0sWaKCtR7sU
sm3uxkSHkYyjXAwqeVT9a/bLn9tALcCY4Ohj6fgcRxvZwRQdQa1GqqPBoubimUKE
RU444/ILpl5X9pHi7B7C9E4GGKdYMR0cBs8okzW9HnD4uXnvMEG+gZrBcjmrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuql71UOLLfQsjD4aoVEQk/V16MgwHwYDVR0j
BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE
QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF
N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj
ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3
MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAm68Wi/DIHA+g8GMCeCycR1VRqw6feLSPhn
MoRL0M+qbfuqHrGum2iFTXniQULW4Aifk9KJANytr7YKX37V/2ZH3kg7KMgSw5jm
wIMXhmLP+Sw/6D+9LVtUoMrI4HpgT5YCjUE2RtaFXWJMUGB0kfsccxeOF9JH/EwO
2NS1DXzBy05hM1rHfN0nN1ZIflx97FpItUdJ2yr/Xe21BG7e/9EfAEc21LUXlROh
3BpiKaw0RhdyfoSgPf044WnibdG4gmg04eoI43s5w4VDET91MW8Fm8YGzUko7kVs
TFK2xTp0eWn7qIfaGj1+PHn8axNHBpSVHZ3A9nzvopBGZj+dUUw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:04 2025 by rpki-client