This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft
File:                     6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json)
Hash identifier:          poMD9tKLbN6H9E0LEbdOKNXjzfkACt62yBjJAL1O9+c=
Subject key identifier:   42:82:46:5F:F5:73:84:3C:55:D6:7A:F6:7C:40:B4:C6:4A:26:B2:28
Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E
Certificate issuer:       /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E
Certificate serial:       66C23BFD28915C0EFC207F7D900A36855C7313FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft
Manifest number:          01C2
Signing time:             Tue 02 Dec 2025 07:00:04 +0000
Manifest this update:     Tue 02 Dec 2025 06:55:04 +0000
Manifest next update:     Fri 05 Dec 2025 12:18:04 +0000
Files and hashes:         1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: 80t5eYSm2/YNhAieXcls0z7n1huVJvGeox5Fv2BAMW4=)
                          2: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: kSys/poQTvIRrYKYkXMZonqFONwhSunM3rt2O2+JQBM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl
                          rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 12:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c2:3b:fd:28:91:5c:0e:fc:20:7f:7d:90:0a:36:85:5c:73:13:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E
        Validity
            Not Before: Dec  2 06:55:04 2025 GMT
            Not After : Dec  5 12:18:04 2025 GMT
        Subject: CN=4282465FF573843C55D67AF67C40B4C64A26B228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:7e:85:d6:74:ae:ab:bd:3b:d1:ed:1e:0f:
                    0f:63:8f:c7:86:44:14:93:68:bf:88:dd:dd:39:c6:
                    6a:ba:e5:00:79:e5:db:68:ff:2b:49:7a:53:ef:10:
                    49:d0:52:4e:33:da:b3:0c:c0:78:f3:4f:55:08:43:
                    0b:ab:a1:e6:4c:7d:32:45:e2:fc:7f:b6:6a:a7:f3:
                    31:0b:22:1e:77:17:fa:54:73:f2:4b:ae:e2:f3:47:
                    86:4c:f3:bb:a0:a0:23:f4:44:81:13:71:66:99:0c:
                    c8:c1:0f:2d:32:2a:a4:52:7a:0e:f8:86:5b:3b:63:
                    ca:25:ba:75:1a:5e:37:d7:9b:01:08:5f:80:ff:a0:
                    5b:60:e9:7d:b3:49:02:5d:72:4f:ac:ca:c4:00:d9:
                    df:4a:d0:53:6f:83:fc:b2:7f:e8:a9:c7:78:a1:df:
                    a7:e1:29:46:e1:6a:ed:13:d2:b5:9f:2e:7a:c9:cb:
                    27:99:a2:12:5b:48:52:c0:94:fd:75:ff:70:62:47:
                    a5:37:91:9a:c3:45:98:a8:f0:5d:45:e1:ac:1a:a7:
                    82:68:ff:3b:a0:54:15:30:6c:58:65:66:4d:dc:60:
                    8c:90:cc:34:26:e5:2b:4c:0f:27:e0:49:01:35:56:
                    1d:a6:bc:a1:21:45:e2:f8:ec:6d:ac:5f:78:75:ff:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:82:46:5F:F5:73:84:3C:55:D6:7A:F6:7C:40:B4:C6:4A:26:B2:28
            X509v3 Authority Key Identifier:
                keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:d8:4d:de:d0:f2:58:c0:a8:d9:29:2e:ac:97:41:37:8f:
         b7:17:dc:79:da:35:0c:f6:a9:7c:e1:29:45:2a:55:87:1b:20:
         e6:42:50:24:e6:eb:f2:ac:0f:0c:f8:43:8a:ad:42:30:31:7a:
         8a:5b:5b:ad:b2:e0:a5:e2:cd:66:28:ff:9d:8c:64:25:c2:20:
         44:8b:ba:e9:ec:29:34:a8:8e:fc:99:bf:de:da:83:53:52:f8:
         6b:f3:58:0e:49:d2:a8:a3:e7:54:3a:ab:6d:67:47:84:0e:aa:
         39:50:b3:5b:80:2b:c1:5f:a3:a9:ec:71:e2:d2:c2:50:f3:fe:
         15:92:71:bb:eb:3d:bd:46:74:99:ae:70:d6:95:06:41:4e:50:
         fa:a9:57:a9:25:f2:59:62:18:0c:02:6e:8d:a4:85:14:d9:51:
         a4:3b:75:dd:46:35:2f:68:a8:28:6a:6e:28:ad:99:43:b5:e3:
         a6:d6:e6:eb:84:43:3c:42:73:b4:ef:7f:a6:35:71:92:86:a5:
         a5:04:bd:49:f8:83:11:6c:91:30:93:c9:48:eb:af:e8:8f:86:
         13:48:fc:4d:f2:55:3a:1d:fe:45:ee:b4:65:d0:2a:5f:f0:b2:
         02:3e:24:6e:eb:5a:e2:df:b3:83:d4:ca:13:27:03:56:bb:dc:
         e9:02:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:41 2025 by rpki-client