This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
File:                     6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft (raw, json)
Hash identifier:          Z3iiw2dzN8n0ZM5EFyyOT/fT2vMMX917yGEgb7JLPFU=
Subject key identifier:   D2:22:64:87:A3:14:B7:1E:08:FC:ED:6D:ED:50:D5:F0:DD:7C:E1:4D
Authority key identifier: 6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B
Certificate issuer:       /CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
Certificate serial:       406027BD69F750D39A97B14D5204B29F7A3ECB3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
Manifest number:          0207
Signing time:             Wed 03 Dec 2025 09:32:25 +0000
Manifest this update:     Wed 03 Dec 2025 09:27:25 +0000
Manifest next update:     Sat 06 Dec 2025 18:46:25 +0000
Files and hashes:         1: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl (hash: VuGE3yL9EE1okKtMHiADUQf6+dyn7mRkqW+1JJLf6+k=)
                          2: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: 9yEpf7UptHKPtJGMSNZGjTG/u5N0H8I6F7MGckJB2CA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl
                          rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:60:27:bd:69:f7:50:d3:9a:97:b1:4d:52:04:b2:9f:7a:3e:cb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
        Validity
            Not Before: Dec  3 09:27:25 2025 GMT
            Not After : Dec  6 18:46:25 2025 GMT
        Subject: CN=D2226487A314B71E08FCED6DED50D5F0DD7CE14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:74:d8:4c:8b:9b:19:5d:37:0e:7a:c0:94:
                    6a:d7:3e:98:64:6d:a4:f5:14:d6:17:8f:dd:2c:56:
                    7f:2e:1b:dd:cc:97:d1:c7:cf:1e:76:49:0d:cb:9b:
                    c9:25:26:48:57:72:84:5c:43:d3:81:e4:e7:6e:be:
                    3b:6a:8b:35:67:ae:ac:8a:4c:5c:4f:82:82:6f:ee:
                    2a:a5:cc:a8:c6:45:97:23:39:3f:99:d8:3c:4c:d1:
                    be:b5:66:21:e3:e3:ac:1a:5b:f2:f9:31:40:b9:b2:
                    83:77:d2:e5:97:db:7e:cf:34:94:d7:a2:dc:63:86:
                    51:80:aa:07:8c:d4:56:f9:62:14:ff:77:d9:45:e0:
                    7b:4d:67:37:72:aa:8f:af:ea:10:08:65:ec:41:03:
                    c5:27:f9:15:2d:cc:12:ff:8f:2f:7a:c9:45:01:55:
                    f3:6b:02:c7:8d:46:93:ec:60:64:21:1f:80:72:8b:
                    34:7d:07:a1:ab:31:17:e7:96:71:ff:51:e2:7c:a9:
                    35:c8:68:fa:fa:bd:15:5f:e2:e8:a0:06:c5:25:e8:
                    9c:54:10:96:97:89:b1:49:2b:41:ac:a9:4d:6c:85:
                    0a:55:1b:4b:80:06:43:f2:03:b2:66:d7:84:8c:ca:
                    2c:73:4d:ee:4a:04:a0:b7:a4:9b:78:cd:0e:38:7e:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:22:64:87:A3:14:B7:1E:08:FC:ED:6D:ED:50:D5:F0:DD:7C:E1:4D
            X509v3 Authority Key Identifier:
                keyid:6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:2a:2a:f9:5a:5a:53:76:5b:6a:67:0b:59:ad:ed:45:03:
         78:8f:fb:6b:fc:38:35:01:c5:5c:f3:52:2e:38:89:44:f4:aa:
         33:03:73:e0:77:00:80:30:ac:7e:a2:a4:c2:d5:70:90:10:f4:
         b4:de:96:cd:64:50:9c:0e:f6:50:e7:99:3e:74:1a:54:31:a8:
         ed:bb:c9:03:ec:62:ab:4e:f2:d7:ed:9b:90:29:d2:98:29:cc:
         7b:86:c7:44:77:34:a6:90:8e:22:67:9a:19:e8:0e:05:32:ec:
         70:26:37:02:30:44:9a:c6:2d:a4:ce:16:b3:62:25:ba:3e:16:
         cd:ca:33:bc:4d:28:99:b6:75:81:ed:0f:42:8f:56:05:a4:78:
         92:4f:20:43:dd:51:14:3c:bd:96:07:4d:5f:b3:54:8c:39:d4:
         59:a4:d2:6f:c3:ab:77:f6:8e:9f:7b:e0:47:0a:27:ac:5b:cb:
         3c:22:a7:48:0a:cd:35:6f:b7:64:38:78:22:8f:0b:81:51:54:
         3c:2d:93:86:bc:89:be:e5:d3:f7:43:c4:1a:9d:68:4d:ec:f5:
         28:47:38:34:65:2f:3d:c3:95:f0:ec:05:65:3d:2f:da:94:e4:
         1c:9e:73:ce:d5:30:4e:dd:52:41:9c:7a:68:5f:36:79:7e:99:
         cf:21:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:44 2025 by rpki-client