This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
File:                     B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft (raw, json)
Hash identifier:          NSeuurtZAqFwu86lWcT4XkWs6SO3n/TQQ8adQgveTr8=
Subject key identifier:   FA:93:59:2F:FA:64:5E:F7:DA:46:60:FD:04:53:F1:98:CE:10:D6:07
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       241128861633E66A8B223FB4FB64A61C4B6E6218
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
Manifest number:          0554
Signing time:             Mon 15 Dec 2025 10:12:01 +0000
Manifest this update:     Mon 15 Dec 2025 10:07:01 +0000
Manifest next update:     Thu 18 Dec 2025 17:34:01 +0000
Files and hashes:         1: 3230322e31302e35302e302f32342d3234203d3e20313332363334.roa (hash: /wpQsAwZKIww7skvfjYUPlEp6b6QcsNwO4f66PwBXCY=)
                          2: 3230322e31302e35342e302f32342d3234203d3e20313430343735.roa (hash: oY8PFSmRlK4Vr9dRAsrKJH2p/p9xJlr+E4F6IgwEYPg=)
                          3: 3230322e31302e35322e302f32332d3234203d3e20313337333633.roa (hash: hPRob0LbT96x1OWMP1vefqV7B1+l+jJr6lBjqV01ftw=)
                          4: 323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa (hash: Ar5/cOpa7lR7Klsqcv8KVTA9NybEjILpd76HZ5Wm55Q=)
                          5: 3230322e31302e36322e302f32342d3234203d3e20313530353031.roa (hash: RA0dEmWofu9VoMSQ/341O6y+HXDRp9y2vRcLh4F1ODI=)
                          6: 323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa (hash: VONMn5fIO30lRT5TNxNJEclAWC+FxhI3fBqb3mzNwEc=)
                          7: 3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa (hash: p6sOKpaHxQkCClQSyTYMdnkWbFxcKXaXdyewePl3H10=)
                          8: 3230322e31302e35352e302f32342d3234203d3e20313430343735.roa (hash: lL570HClg96u1KXZ9sJyqf8kPj1FRroj8cGKU/nkYi4=)
                          9: 323430323a666463303a3a2f33322d3438203d3e20313337333633.roa (hash: j7jB38lRK0MyqdwJWx6N5CBz2kyL9r9I3yPoxuutiIw=)
                          10: 3230322e31302e35312e302f32342d3234203d3e20313332363334.roa (hash: Rjv6tIDKIsz+tV5NKRFWqs/fslBMHbaD5maSFYxqf0I=)
                          11: 323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa (hash: 2jNUjF4nke4CK+6iAYAgplrGXkwCafjzFP+r1D8zcBY=)
                          12: 3230322e31302e35322e302f32342d3234203d3e20313337333633.roa (hash: h0jtUkeClRH/RQiHCSY5/jNkH1epCPrd4PdfmPfAgug=)
                          13: 3230322e31302e33322e302f32332d3234203d3e20313337333633.roa (hash: 0rOdUlH6gv3+zZP8vGxs8CTSWUCRCHhK1DMWGhKDqBk=)
                          14: 323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa (hash: zTf2KHECdlF8CivRMKWMy2l8q7k9i66ao4kyK+xS1y8=)
                          15: B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl (hash: cYo4zh4uFEUhFyVgvZR+SfVBaFlbTRsoqabDrnkaPUY=)
                          16: 3230322e31302e35332e302f32342d3234203d3e20313430343639.roa (hash: j1Hqw6TnerpgI9rlz8g77UO+7SSdu2/QSD/Hp0tiFCg=)
                          17: 323430323a666463303a633830303a3a2f34382d3438203d3e20313337333633.roa (hash: Ih2ujo7pvABxXIdfIdlrZdpA6OwzPTPKOakfX3mx57k=)
                          18: 3230322e31302e35342e302f32332d3234203d3e20313430343735.roa (hash: mrQV3K4ZfNyFu4dz4PQjyYnBuXTV/qSLCJuvGp+za9Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 17:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:11:28:86:16:33:e6:6a:8b:22:3f:b4:fb:64:a6:1c:4b:6e:62:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Dec 15 10:07:01 2025 GMT
            Not After : Dec 18 17:34:01 2025 GMT
        Subject: CN=FA93592FFA645EF7DA4660FD0453F198CE10D607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1b:f9:1a:c9:f0:18:f7:d1:1a:e9:ca:b3:24:
                    4a:a3:7d:7d:f6:f4:36:b6:6c:82:ec:1e:48:24:51:
                    51:19:9f:b7:74:9a:17:03:c6:bd:6d:fd:a4:27:21:
                    f3:25:19:ea:e0:f1:42:b9:3f:6b:14:54:e1:79:68:
                    2f:81:50:92:a8:7b:a1:05:80:92:ad:8a:17:b4:02:
                    23:0c:b2:24:71:2f:24:b0:cc:3a:fc:56:53:7d:20:
                    49:3a:46:29:6f:f6:9e:24:89:51:5d:c3:a0:6d:3f:
                    6f:79:45:8a:f9:49:be:01:0a:44:19:1c:f3:be:54:
                    90:87:27:4e:56:34:cf:df:63:5f:ac:98:08:a0:53:
                    ed:78:89:bd:5c:b1:c4:05:55:25:d1:79:af:b5:a9:
                    9c:d0:cb:8b:77:34:02:1d:2f:08:0d:1f:ef:bd:53:
                    85:61:91:67:a6:83:b7:98:65:af:84:d7:cc:0a:60:
                    8b:bd:2c:1b:39:26:fc:ad:17:74:04:f0:28:dd:04:
                    8d:10:20:5c:42:a8:e4:db:f1:e7:de:c4:be:6e:16:
                    7a:98:be:59:54:02:98:af:2b:70:cc:e3:de:c5:f3:
                    59:67:08:cd:49:0b:0c:c8:ea:34:ef:93:b0:a6:e7:
                    22:ef:79:10:b8:74:55:e0:d1:7b:1c:5d:b8:3a:ee:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:59:2F:FA:64:5E:F7:DA:46:60:FD:04:53:F1:98:CE:10:D6:07
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1d:60:a2:c5:aa:39:f5:4b:96:44:4f:24:54:1d:98:7c:78:
         9f:e6:71:f3:c0:19:3d:2a:75:0a:94:cb:77:83:f9:81:35:5f:
         13:a2:47:89:1e:77:98:97:46:05:bd:b1:83:c9:56:15:34:b6:
         22:ac:9f:73:96:92:6c:09:e5:a1:00:0b:bf:89:91:58:34:d8:
         11:35:1b:03:9a:8c:c3:e7:a4:df:d6:c6:2d:db:71:8d:92:4a:
         5d:6f:61:e6:84:4f:0a:26:14:a2:df:ca:83:44:7e:be:19:c2:
         f2:2b:e0:10:f3:e5:31:65:bc:de:dd:99:01:82:d7:55:6b:47:
         fa:bd:01:4d:90:c1:69:28:31:af:62:9f:9a:15:50:bc:18:9b:
         da:ec:65:2c:c0:80:a6:a1:db:f8:2d:ed:2d:c9:36:73:0f:d9:
         4c:8d:f6:bf:fe:fe:aa:18:f7:86:d4:5d:a0:ab:14:11:f3:94:
         05:e8:e4:7d:42:4b:36:49:a2:37:15:78:0f:a5:15:10:62:9b:
         9c:de:2e:36:fa:2a:1b:ea:62:2c:b8:76:80:d7:27:0c:de:59:
         07:39:84:a7:6b:d1:28:19:81:75:96:16:7f:11:53:2d:a5:85:
         3e:9f:fa:df:6e:c3:ed:37:75:50:f0:de:c6:8a:63:f5:62:6e:
         88:8d:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:20:19 2025 by rpki-client