This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
File:                     3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json)
Hash identifier:          BtxqiDF5o1g1lSKobW5G0KutApkTyT7b6DbWLbIwLcA=
Subject key identifier:   8B:E5:39:5C:3D:BE:CF:BB:22:37:FC:0A:8F:6C:11:70:2F:82:16:82
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       61B7D54E1E0E714D6D9065B68FAAF92C9C41192C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
Manifest number:          025B
Signing time:             Fri 19 Dec 2025 00:32:32 +0000
Manifest this update:     Fri 19 Dec 2025 00:27:32 +0000
Manifest next update:     Mon 22 Dec 2025 07:47:32 +0000
Files and hashes:         1: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: P3vCG1eFCyYSS9LnEKWdiNtZlxHi5gwLg+zU1gklVa8=)
                          2: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: UZSj1gbIEphe1mWnvI396dxPxD/E5WStBcGb1wpBcZo=)
                          3: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=)
                          4: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: nmYMdBmJi2dLE67aggA0wkg2W+WeeYl9g1CRUjC4EIE=)
                          5: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=)
                          6: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=)
                          7: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=)
                          8: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=)
                          9: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: MfIpRbDFsLXG7r+gaPn+k51+pDkVoYxO4kfKQbaBZic=)
                          10: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=)
                          11: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=)
                          12: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: VIoagqfL+qSkXIj2njNy85FLgu1mUMsAxSTpRQ46nec=)
                          13: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b7:d5:4e:1e:0e:71:4d:6d:90:65:b6:8f:aa:f9:2c:9c:41:19:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Dec 19 00:27:32 2025 GMT
            Not After : Dec 22 07:47:32 2025 GMT
        Subject: CN=8BE5395C3DBECFBB2237FC0A8F6C11702F821682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:9e:b8:4d:9d:04:57:e1:05:4c:df:e5:27:
                    9f:7d:c0:99:19:52:cf:c9:83:32:27:4c:51:16:a8:
                    27:fe:73:d8:35:bd:ba:9b:c4:e0:a6:41:50:44:e9:
                    71:e9:bb:74:37:9b:65:4e:e8:f8:20:ec:00:9f:76:
                    42:c2:38:ed:e1:92:cf:66:04:6f:f1:22:6f:23:73:
                    4c:0d:8f:af:ab:72:a6:1d:50:b2:9c:44:87:9d:cf:
                    d2:4a:67:76:7a:84:5b:de:ca:bb:71:b5:96:33:71:
                    ed:7f:f2:fb:23:21:b9:cc:c3:88:2a:07:c1:b0:f6:
                    ef:ef:96:17:c6:7a:e6:2f:46:39:cc:56:cc:9f:07:
                    9c:98:2e:b6:88:bc:87:9a:03:a2:52:44:7e:57:3f:
                    ad:a2:ea:1b:0f:24:88:4d:31:26:0a:2c:1a:94:d4:
                    41:7f:4a:67:5b:df:e5:79:4d:85:9a:b7:fc:d5:6d:
                    3e:fa:a0:74:7f:45:e3:0f:1f:68:47:36:8f:1a:43:
                    88:ff:4c:04:77:cf:0e:53:f2:3f:04:73:5c:94:8d:
                    4e:75:01:0b:f7:6a:f2:ea:5a:fa:84:a3:a8:1b:c8:
                    f7:85:b2:1e:f9:54:4b:67:4c:25:b3:0f:27:3c:57:
                    aa:3c:48:78:cb:66:55:1d:fc:a2:d2:88:ea:c9:6b:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E5:39:5C:3D:BE:CF:BB:22:37:FC:0A:8F:6C:11:70:2F:82:16:82
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:07:41:f7:e4:f0:9e:90:5e:a6:3a:2d:9d:62:d8:9d:82:9c:
         f4:45:22:1f:2e:1b:62:33:c0:a8:04:ba:a4:ef:ed:01:b6:c4:
         d9:3e:f2:8f:77:1d:54:f5:90:6f:e5:66:de:c5:ac:45:0c:28:
         76:f9:93:e2:64:f7:b6:27:a8:56:e0:f8:05:f8:8c:69:b9:ee:
         a3:29:ff:6c:63:13:4a:ba:3b:5e:9a:a1:8e:e0:d9:5e:57:51:
         35:37:f2:8a:e5:f1:64:a9:16:be:02:d5:c7:84:5c:d3:03:bd:
         f4:10:3c:b9:3b:bb:3c:02:09:bb:4c:01:a9:01:a0:88:be:4a:
         c8:db:ed:4c:79:51:c6:b2:f5:0b:c8:ff:f1:c7:64:d0:80:69:
         5c:5c:d7:65:45:03:f2:a6:11:cd:fe:2a:35:9b:e5:29:0c:44:
         b7:d3:b8:45:6e:d4:87:28:59:ce:b6:22:27:17:e5:77:bc:65:
         3d:98:29:8e:d1:58:ea:70:1e:d1:7b:0f:95:e8:7d:17:a3:17:
         e2:2a:f4:4f:3d:ab:48:37:a4:90:30:b8:0f:6d:0a:b3:6a:0c:
         38:77:38:9e:66:62:89:bb:5d:4b:76:3c:ca:64:99:4e:56:7c:
         0c:47:c4:38:fe:20:92:0c:ad:75:3f:c6:44:30:b9:3d:a2:e1:
         0b:39:30:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:47:34 2025 by rpki-client