This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
File:                     6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json)
Hash identifier:          lDVttAQcbaxAy1r9o/J4t4j+lI2Phu9nph9MF8qLKSI=
Subject key identifier:   93:F4:35:2A:3D:1D:4D:7C:EB:9C:C2:F7:29:9F:FB:99:83:7D:2F:B1
Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9
Certificate issuer:       /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
Certificate serial:       68AB010B8B048A5D79AC5E461DC602806B1C184C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
Manifest number:          0529
Signing time:             Tue 02 Dec 2025 21:20:43 +0000
Manifest this update:     Tue 02 Dec 2025 21:15:43 +0000
Manifest next update:     Fri 05 Dec 2025 21:24:43 +0000
Files and hashes:         1: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: g0wg8Deehkfr6iJjF1icldun4thvTysDD1uiOyWBYM4=)
                          2: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: OzViQgXk6BODgHMXdNk3jLCf963j+GbJFZ1IXO9XkfU=)
                          3: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: UN/a2XRTw8081uL/ZY93JqlCc8U4ClmN/ji+ij6yORg=)
                          4: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: GwFAfVLpG/ugaQYqpWQY09MQmCe9PdpSsGdhvKfZQm0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 21:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ab:01:0b:8b:04:8a:5d:79:ac:5e:46:1d:c6:02:80:6b:1c:18:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
        Validity
            Not Before: Dec  2 21:15:43 2025 GMT
            Not After : Dec  5 21:24:43 2025 GMT
        Subject: CN=93F4352A3D1D4D7CEB9CC2F7299FFB99837D2FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:ed:53:5f:5c:f9:ba:32:89:cb:5f:f4:55:
                    c0:67:fd:c9:b4:f8:79:2e:f1:4e:f8:0f:fb:5e:08:
                    af:0f:11:60:5e:57:8e:2e:df:7b:e8:99:19:d4:0e:
                    33:fe:2f:3e:e5:23:2c:af:8c:11:f8:26:92:d0:f9:
                    34:d3:07:b8:4f:a3:d8:46:92:ca:5f:c0:b7:1d:53:
                    59:81:5d:38:6f:4b:6a:82:4a:84:cd:3f:b7:07:12:
                    d4:93:e9:a8:c8:57:de:d0:5d:12:1e:e0:d8:ac:85:
                    e3:1d:f3:6b:09:a9:58:77:76:23:e6:a2:b9:b4:3c:
                    d4:3b:c1:26:82:d5:67:bd:66:95:92:e6:8f:59:a6:
                    7d:56:24:f4:d6:b7:fb:16:e1:d6:3a:d9:13:69:b6:
                    ca:a1:91:0b:ae:f6:9e:ac:1f:f2:5c:2e:25:ad:7b:
                    26:19:7d:ac:fb:a5:a6:d0:74:91:c5:f6:d4:2d:d8:
                    08:49:d7:d8:a5:30:67:0b:58:80:e4:7b:83:0f:2e:
                    65:23:0b:ba:d1:90:01:dd:8b:8d:f7:f1:18:40:a5:
                    d7:1d:82:74:7d:21:88:6e:71:ab:6b:e2:de:ea:82:
                    88:a0:90:ec:c2:9c:2c:4c:ef:db:2a:19:46:d1:23:
                    92:24:32:6b:0e:d0:9e:cb:ef:3c:23:af:28:c5:5e:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F4:35:2A:3D:1D:4D:7C:EB:9C:C2:F7:29:9F:FB:99:83:7D:2F:B1
            X509v3 Authority Key Identifier:
                keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:1f:74:d9:6c:64:a5:ca:1f:24:f9:de:08:18:33:4e:60:fc:
         6b:dc:c4:9b:bd:66:11:e7:48:4f:9d:1c:c9:31:c0:32:c9:ce:
         66:53:13:66:1a:41:fa:4f:ba:02:8e:51:03:a1:f5:fd:08:4c:
         bd:3a:f1:c0:54:4a:52:e8:33:b0:6d:38:d1:b1:f8:32:2c:99:
         3b:f8:fb:23:a8:b8:94:f8:7b:d9:eb:c0:eb:61:10:ea:61:5b:
         cf:e9:b1:83:7b:76:cf:f9:20:55:98:93:68:a2:38:c8:3d:19:
         88:6b:14:98:10:5a:69:f3:27:a4:4f:c0:36:bf:ae:2f:f2:81:
         4d:14:af:9a:e4:e0:c2:8a:da:0e:bd:ad:c3:f4:6c:83:8c:4e:
         55:3b:87:e3:6b:d2:21:9f:9a:70:49:d3:91:c9:31:5e:25:0b:
         96:0e:28:cd:7c:da:4b:2d:05:5e:32:4b:99:c7:a8:ad:29:10:
         2e:1c:be:dc:d6:6a:56:10:e5:8b:a6:75:dd:e7:16:31:16:88:
         8b:8c:0c:16:17:7a:83:4c:7f:5a:d2:b0:e9:18:ad:32:e6:2f:
         12:2a:97:67:92:0d:e8:cf:ac:58:1c:bb:b0:5a:79:b9:4b:d2:
         02:6a:38:18:55:97:21:6e:c2:0a:7c:c6:74:d2:61:b7:8c:2a:
         85:5f:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:27 2025 by rpki-client