This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
File:                     6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft (raw, json)
Hash identifier:          ceJ4KscD/fgo2acGQGHkh9XDjFdT7NpzmEo7hJPsuHM=
Subject key identifier:   58:05:E6:7D:C0:C3:31:B6:4E:A9:AB:6C:28:67:4D:EE:85:E5:61:AE
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       5565361DBE0ABE93F58D4EA5084791DEFFD03C28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
Manifest number:          05DE
Signing time:             Fri 12 Dec 2025 22:11:40 +0000
Manifest this update:     Fri 12 Dec 2025 22:06:40 +0000
Manifest next update:     Tue 16 Dec 2025 09:49:40 +0000
Files and hashes:         1: AS38768.roa (hash: 1MWEV5tgHs2Zer2TXzzjNIdBv6VOof5lbDzM+kS3Zcs=)
                          2: AS38755.roa (hash: js+OcGH/znL82r1Bq/i751nV9v0ky8Qg2sTbyo8OyDQ=)
                          3: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl (hash: rzdzLwQxxYRBm+IHcP18L3ltko3JkuGxAcM0ClRgCUs=)
                          4: AS38496.roa (hash: NoTu4uTVv76+CbUMhzog8IYBnzZtHyJJiJKWizpeK8M=)
                          5: AS137346.roa (hash: PdCcl7m4oX+SJS93oiHUxTuOW/ltjw+gLpTGiEDO7T8=)
                          6: AS46024.roa (hash: NvN7LEt17vokuJNXvPtDV42n133GcbLHvsn6T/4Ucrk=)
                          7: AS24520.roa (hash: /X2OowKvSum0rz+umcdT3kPQkSHfCFlWzy8KzFiLuzk=)
                          8: AS138885.roa (hash: /n3QwdVfZD0QCe9dNF/CT2sxuwEtNa1/FhrwvyPZKsA=)
                          9: AS140421.roa (hash: RfoESpxBfC9xRwHZO2fU/8RUGYVevfom5f/XSg00ECU=)
                          10: AS135457.roa (hash: mets9wGAfFgpWdv6mbdX5do/lpd7VUlbp3mPEVeZduw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 09:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:65:36:1d:be:0a:be:93:f5:8d:4e:a5:08:47:91:de:ff:d0:3c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Dec 12 22:06:40 2025 GMT
            Not After : Dec 16 09:49:40 2025 GMT
        Subject: CN=5805E67DC0C331B64EA9AB6C28674DEE85E561AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:92:5b:cf:f6:01:58:95:2a:80:d4:a0:7a:
                    ad:f1:73:a1:d5:ff:a3:df:0d:25:c8:e0:81:70:61:
                    ad:2d:b8:7c:5e:4e:87:d6:ef:1d:34:80:ef:57:85:
                    09:78:d5:e3:75:7b:99:5d:ae:4d:51:c5:f9:b2:8c:
                    9c:ec:13:1b:c4:cb:82:ab:29:20:ec:e6:0f:2d:aa:
                    a2:cf:65:7f:d0:90:2c:4b:03:aa:1c:f1:26:a9:40:
                    ed:cc:97:53:20:a1:35:25:a0:46:8d:d7:1f:8f:03:
                    d3:d0:bb:9d:85:5b:48:af:b0:83:ed:f9:ef:98:a8:
                    7a:3f:9b:d4:c7:74:13:88:da:d8:79:73:02:60:57:
                    18:72:17:2f:36:47:03:bb:b9:83:4b:90:51:a2:86:
                    7b:d1:b4:95:1b:38:30:4d:54:b7:71:87:d5:00:ae:
                    e6:be:f3:1f:91:61:92:8a:7b:b1:91:b7:5d:a9:bd:
                    f1:b2:c2:c7:28:19:5f:69:85:69:2a:fe:c0:e5:dc:
                    8e:7b:53:7f:11:82:2a:c8:6a:99:be:e6:24:f1:a8:
                    99:28:08:45:86:8c:1d:5b:da:48:3c:1c:28:38:eb:
                    04:76:cd:c4:27:57:48:c8:eb:b6:ef:91:71:03:db:
                    b8:b8:33:ca:de:2a:6f:6b:eb:0c:28:87:7b:78:f1:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:05:E6:7D:C0:C3:31:B6:4E:A9:AB:6C:28:67:4D:EE:85:E5:61:AE
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:b0:9a:34:81:32:2e:fa:86:f1:13:a6:6d:b5:4e:c6:35:
         08:93:49:45:f8:92:f6:f6:22:52:15:80:0f:2a:13:32:81:f0:
         88:39:9e:cd:b6:93:50:70:a7:3e:96:a4:fb:ea:42:b1:0c:9a:
         8b:9f:d6:58:3b:79:1e:5a:ff:4e:92:e1:81:88:92:05:54:22:
         36:a8:f3:13:b7:42:e1:48:da:d0:fa:a0:64:a7:55:8c:63:84:
         6c:52:93:1c:71:52:a4:ad:35:78:c7:56:23:59:74:4e:06:34:
         9a:a4:d4:84:70:36:77:cb:a9:d7:31:47:34:be:cb:a5:a7:f5:
         ae:88:36:2b:6d:ce:99:f4:34:fe:11:02:16:f3:7f:e4:48:fe:
         4d:7d:d0:d2:e8:be:07:91:6d:b9:75:ab:f6:31:50:99:ff:7b:
         9c:f4:6d:f3:12:2a:73:d2:f6:ae:b6:aa:c7:f6:3b:22:37:c6:
         63:9c:2d:15:11:40:2b:da:8c:43:c9:84:1d:61:d0:c7:e6:25:
         44:93:83:91:69:20:28:32:a0:50:96:66:e0:58:da:a1:21:1c:
         1d:5c:56:15:e1:35:0c:60:43:01:18:26:36:43:f5:d5:90:f9:
         1f:4b:f9:c0:21:05:20:64:c2:ae:fa:f4:d7:6b:2b:5e:b6:0d:
         e2:82:75:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVWU2Hb4KvpP1jU6lCEeR3v/QPCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNTEyMTIyMjA2NDBaFw0yNTEyMTYwOTQ5NDBaMDMxMTAvBgNV
BAMTKDU4MDVFNjdEQzBDMzMxQjY0RUE5QUI2QzI4Njc0REVFODVFNTYxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4YZJbz/YBWJUqgNSgeq3xc6HV
/6PfDSXI4IFwYa0tuHxeTofW7x00gO9XhQl41eN1e5ldrk1RxfmyjJzsExvEy4Kr
KSDs5g8tqqLPZX/QkCxLA6oc8SapQO3Ml1MgoTUloEaN1x+PA9PQu52FW0ivsIPt
+e+YqHo/m9THdBOI2th5cwJgVxhyFy82RwO7uYNLkFGihnvRtJUbODBNVLdxh9UA
rua+8x+RYZKKe7GRt12pvfGywscoGV9phWkq/sDl3I57U38RgirIapm+5iTxqJko
CEWGjB1b2kg8HCg46wR2zcQnV0jI67bvkXED27i4M8reKm9r6wwoh3t48fGTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWAXmfcDDMbZOqatsKGdN7oXlYa4wHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5
NzQtOTBlOTM5YmNiMGZiLzAvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZE
NTFGOEZDMDZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACqLsJo0gTIu+obxE6ZttU7GNQiTSUX4kvb2
IlIVgA8qEzKB8Ig5ns22k1Bwpz6WpPvqQrEMmouf1lg7eR5a/06S4YGIkgVUIjao
8xO3QuFI2tD6oGSnVYxjhGxSkxxxUqStNXjHViNZdE4GNJqk1IRwNnfLqdcxRzS+
y6Wn9a6INittzpn0NP4RAhbzf+RI/k190NLovgeRbbl1q/YxUJn/e5z0bfMSKnPS
9q62qsf2OyI3xmOcLRURQCvajEPJhB1h0MfmJUSTg5FpICgyoFCWZuBY2qEhHB1c
VhXhNQxgQwEYJjZD9dWQ+R9L+cAhBSBkwq769NdrK162DeKCdRU=
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:46:08 2025 by rpki-client