This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft
File:                     6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json)
Hash identifier:          FQzEBWKhQS/YErEr2vET5y0tDWEKcFFqsFyt50pSei4=
Subject key identifier:   76:F9:56:6B:03:B4:E5:27:A4:F9:C2:33:C8:D0:BA:48:2D:8F:E8:EE
Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD
Certificate issuer:       /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD
Certificate serial:       7466EDD5902BD79214E203CE644444B716049A46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft
Manifest number:          0135
Signing time:             Tue 02 Dec 2025 21:31:32 +0000
Manifest this update:     Tue 02 Dec 2025 21:26:32 +0000
Manifest next update:     Sat 06 Dec 2025 01:38:32 +0000
Files and hashes:         1: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: cANzeF0jZw7+NO2sfRXhtzM+k1Ij7hcjtpHfHV/U8R4=)
                          2: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: +I5heW9usC3g2V3ncP2BbzxquKjOSk/cY9LMtr15d84=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl
                          rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 01:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:66:ed:d5:90:2b:d7:92:14:e2:03:ce:64:44:44:b7:16:04:9a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD
        Validity
            Not Before: Dec  2 21:26:32 2025 GMT
            Not After : Dec  6 01:38:32 2025 GMT
        Subject: CN=76F9566B03B4E527A4F9C233C8D0BA482D8FE8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:13:d3:5d:17:23:39:36:49:9f:fb:4b:60:
                    49:50:32:c1:4e:4f:83:5b:ce:0d:3f:12:d2:b4:54:
                    5e:c9:c3:a9:b2:5b:be:7e:c8:f2:6e:17:7d:f7:c6:
                    d8:f3:ff:61:39:cf:7c:05:e5:d9:93:be:68:0f:c5:
                    44:98:a7:88:41:e9:dd:b9:77:4f:2d:92:d3:7d:d9:
                    98:59:b6:f8:d4:1f:06:06:b2:7d:fe:a0:08:b0:f3:
                    dd:cf:eb:bc:76:33:bd:30:2f:a2:4c:3e:43:ab:33:
                    04:4e:8c:2c:68:da:e3:06:8f:d5:09:0e:ee:a1:b3:
                    f3:1d:bf:bd:3d:a1:dc:74:98:76:1c:61:56:a1:c2:
                    04:63:73:84:5a:bd:05:9e:ef:9f:d8:18:1d:1a:39:
                    c6:45:3e:65:9d:41:26:9c:48:15:47:8d:e0:a0:44:
                    e1:51:1f:c7:49:6b:e9:7a:df:1a:1c:aa:30:06:38:
                    2b:19:de:0a:3e:eb:f9:a4:cf:bb:58:17:2b:e5:7c:
                    31:8a:56:93:b2:03:93:a6:cf:89:4b:62:18:76:2b:
                    90:29:77:aa:3d:d4:91:64:e9:2d:b5:6e:3b:16:3b:
                    32:5a:28:88:a8:6c:41:84:58:ec:fc:89:9c:2a:d2:
                    c9:41:c1:f7:2b:47:06:80:10:76:e9:79:b8:72:35:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F9:56:6B:03:B4:E5:27:A4:F9:C2:33:C8:D0:BA:48:2D:8F:E8:EE
            X509v3 Authority Key Identifier:
                keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:91:e2:d6:31:4c:88:40:2e:60:bc:ef:fe:5c:f3:d0:1f:03:
         76:d9:ad:db:90:14:af:26:11:ce:b9:34:0b:2b:ae:ba:ee:25:
         44:7a:fa:0b:46:8e:e4:a4:98:9a:6d:df:1f:bf:f2:3a:08:30:
         8c:2d:5e:3e:ce:f0:58:ba:74:7d:29:46:86:70:09:49:bd:99:
         77:c1:b4:af:3e:58:27:1c:77:d8:60:a5:dc:2f:98:ec:bc:6b:
         fb:5f:15:18:ad:30:d6:f1:0a:b7:ae:dc:48:19:fd:07:c2:ee:
         47:d1:51:bc:1e:9d:e2:a8:8a:b8:36:fe:0d:10:eb:37:18:7f:
         0c:ca:5d:0c:1c:10:7f:46:3d:16:73:b8:c9:f9:17:ea:97:7f:
         75:81:3f:1f:10:be:c6:00:4e:1f:c3:63:12:a5:02:0a:74:8d:
         4c:14:5b:fa:4f:f5:d0:d1:d0:12:0e:ea:52:be:72:33:1f:a3:
         a8:1e:c2:c2:36:f3:77:ed:e6:4b:e0:52:76:ce:81:c1:15:8e:
         fb:35:bf:09:32:77:43:2b:71:64:43:6a:8f:2b:7f:7b:4f:a5:
         22:c6:7f:e9:cc:3c:f0:a6:c9:4d:e7:f2:9b:c7:31:bb:28:08:
         ed:e6:21:b6:50:df:a2:df:87:dd:52:49:63:ad:b9:00:28:dd:
         da:98:5b:ec
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdGbt1ZAr15IU4gPOZEREtxYEmkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0
M0ZFNDFDRDAeFw0yNTEyMDIyMTI2MzJaFw0yNTEyMDYwMTM4MzJaMDMxMTAvBgNV
BAMTKDc2Rjk1NjZCMDNCNEU1MjdBNEY5QzIzM0M4RDBCQTQ4MkQ4RkU4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDhPTXRcjOTZJn/tLYElQMsFO
T4Nbzg0/EtK0VF7Jw6myW75+yPJuF333xtjz/2E5z3wF5dmTvmgPxUSYp4hB6d25
d08tktN92ZhZtvjUHwYGsn3+oAiw893P67x2M70wL6JMPkOrMwROjCxo2uMGj9UJ
Du6hs/Mdv709odx0mHYcYVahwgRjc4RavQWe75/YGB0aOcZFPmWdQSacSBVHjeCg
ROFRH8dJa+l63xocqjAGOCsZ3go+6/mkz7tYFyvlfDGKVpOyA5Omz4lLYhh2K5Ap
d6o91JFk6S21bjsWOzJaKIiobEGEWOz8iZwq0slBwfcrRwaAEHbpebhyNUedAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdvlWawO05Sek+cIzyNC6SC2P6O4wHwYDVR0j
BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG
QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF
NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz
ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz
MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACSR4tYxTIhALmC87/5c89AfA3bZrduQFK8m
Ec65NAsrrrruJUR6+gtGjuSkmJpt3x+/8joIMIwtXj7O8Fi6dH0pRoZwCUm9mXfB
tK8+WCccd9hgpdwvmOy8a/tfFRitMNbxCreu3EgZ/QfC7kfRUbweneKoirg2/g0Q
6zcYfwzKXQwcEH9GPRZzuMn5F+qXf3WBPx8QvsYATh/DYxKlAgp0jUwUW/pP9dDR
0BIO6lK+cjMfo6gewsI283ft5kvgUnbOgcEVjvs1vwkyd0MrcWRDao8rf3tPpSLG
f+nMPPCmyU3n8pvHMbsoCO3mIbZQ36Lfh91SSWOtuQAo3dqYW+w=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:00 2025 by rpki-client