This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft
File:                     F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json)
Hash identifier:          swbNUDBE3WhXFcGlqP019yBDQL06VhfZSslVVHyYLXo=
Subject key identifier:   19:54:80:6A:9A:15:07:63:6E:B0:43:5C:A1:6D:2B:13:B0:21:5D:B3
Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9
Certificate issuer:       /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9
Certificate serial:       56A82FCB9C787E45F3A3E2D55AEA5073D2325D69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft
Manifest number:          01D3
Signing time:             Mon 01 Dec 2025 11:10:40 +0000
Manifest this update:     Mon 01 Dec 2025 11:05:40 +0000
Manifest next update:     Thu 04 Dec 2025 17:06:40 +0000
Files and hashes:         1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: NjSoVY1kECEmL6hRe3Zcp7lrYZdGDdAR2fgJQC64t+8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl
                          rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 17:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a8:2f:cb:9c:78:7e:45:f3:a3:e2:d5:5a:ea:50:73:d2:32:5d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9
        Validity
            Not Before: Dec  1 11:05:40 2025 GMT
            Not After : Dec  4 17:06:40 2025 GMT
        Subject: CN=1954806A9A1507636EB0435CA16D2B13B0215DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:1f:9c:4d:bb:13:a3:41:30:e7:fc:3e:34:
                    bf:85:70:0a:3e:94:43:87:5a:68:f6:52:2a:67:cc:
                    c0:bd:62:1e:e7:16:f5:0a:f6:18:75:fe:52:ae:ca:
                    fc:70:6c:80:27:f6:c1:b4:04:85:63:24:fb:ba:3e:
                    f3:21:35:e9:15:82:ec:a0:0b:27:d7:fd:8a:cd:31:
                    ad:67:2a:ae:37:20:55:f3:e0:c4:d3:97:d4:bb:65:
                    e5:61:1b:f1:f3:60:fa:27:92:67:ac:65:07:b7:f8:
                    e0:54:f8:fc:9b:b0:24:32:32:c4:0a:11:a0:4e:2d:
                    c6:3d:d4:f2:08:cd:b3:37:61:e1:e9:e6:17:28:41:
                    77:23:2c:c5:c2:c8:89:1b:33:dd:9b:9b:3a:23:97:
                    f8:04:df:c9:50:d7:25:46:a1:f5:91:a9:27:1d:f3:
                    69:35:10:4e:77:a9:26:02:1b:05:fc:de:ff:eb:e2:
                    bc:94:e2:ca:08:6a:f9:59:81:29:18:59:cc:b0:b5:
                    9d:79:82:aa:29:56:17:42:ef:0c:e0:dd:3c:72:aa:
                    90:4a:f6:df:86:a2:e7:a1:66:d0:8e:10:82:67:b5:
                    27:ce:9a:80:2f:18:f8:25:42:de:87:7f:24:43:58:
                    33:07:56:3a:8e:08:11:cc:5e:e0:9b:ab:7c:cf:23:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:54:80:6A:9A:15:07:63:6E:B0:43:5C:A1:6D:2B:13:B0:21:5D:B3
            X509v3 Authority Key Identifier:
                keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5e:29:bb:15:d8:28:36:ca:f6:dc:3f:76:4c:c3:b8:10:eb:
         6d:f9:76:26:e3:6a:25:9b:d2:08:ea:46:02:4b:da:9f:14:59:
         89:b4:2a:08:62:93:fe:9c:92:57:51:fe:d7:6f:d6:89:21:a0:
         10:ec:7d:1d:b7:a9:8c:f9:1d:05:b8:91:62:60:97:6d:ec:63:
         8f:99:f0:14:ee:d9:3e:ee:51:21:7e:5f:4b:39:a5:62:69:58:
         88:df:1f:db:28:b9:50:dd:80:69:57:54:c1:5c:e0:27:7a:33:
         b3:78:bb:b2:4b:45:da:43:35:0a:da:f7:46:13:9b:80:21:2c:
         97:35:48:75:fb:72:ab:47:f3:89:62:7c:e7:11:30:e2:fa:18:
         fe:4c:1e:b2:2f:c2:88:8b:b9:a8:8c:b0:a2:70:80:16:11:4a:
         b6:3e:5f:37:8b:fa:78:4d:cc:4f:47:5d:79:42:cf:41:ef:f2:
         09:91:ff:66:23:a7:d7:de:9e:6a:0d:b6:32:20:fd:93:77:18:
         1f:01:a6:c2:9b:f2:0a:55:75:fd:7f:dd:da:31:55:30:ae:6e:
         4c:38:70:49:ba:34:05:6c:86:88:86:40:ec:1a:a9:29:7b:19:
         21:73:59:d2:f5:49:3b:3d:e2:ac:95:9c:1d:94:54:9c:4f:3c:
         00:af:71:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVqgvy5x4fkXzo+LVWupQc9IyXWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB
RUU0MTdBOTAeFw0yNTEyMDExMTA1NDBaFw0yNTEyMDQxNzA2NDBaMDMxMTAvBgNV
BAMTKDE5NTQ4MDZBOUExNTA3NjM2RUIwNDM1Q0ExNkQyQjEzQjAyMTVEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/B+cTbsTo0Ew5/w+NL+FcAo+
lEOHWmj2UipnzMC9Yh7nFvUK9hh1/lKuyvxwbIAn9sG0BIVjJPu6PvMhNekVguyg
CyfX/YrNMa1nKq43IFXz4MTTl9S7ZeVhG/HzYPonkmesZQe3+OBU+PybsCQyMsQK
EaBOLcY91PIIzbM3YeHp5hcoQXcjLMXCyIkbM92bmzojl/gE38lQ1yVGofWRqScd
82k1EE53qSYCGwX83v/r4ryU4soIavlZgSkYWcywtZ15gqopVhdC7wzg3TxyqpBK
9t+GouehZtCOEIJntSfOmoAvGPglQt6HfyRDWDMHVjqOCBHMXuCbq3zPIwfJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGVSAapoVB2NusENcoW0rE7AhXbMwHwYDVR0j
BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0
NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0
MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz
YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC
NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABBeKbsV2Cg2yvbcP3ZMw7gQ6235dibjaiWb
0gjqRgJL2p8UWYm0Kghik/6ckldR/tdv1okhoBDsfR23qYz5HQW4kWJgl23sY4+Z
8BTu2T7uUSF+X0s5pWJpWIjfH9souVDdgGlXVMFc4Cd6M7N4u7JLRdpDNQra90YT
m4AhLJc1SHX7cqtH84lifOcRMOL6GP5MHrIvwoiLuaiMsKJwgBYRSrY+XzeL+nhN
zE9HXXlCz0Hv8gmR/2Yjp9fenmoNtjIg/ZN3GB8BpsKb8gpVdf1/3doxVTCubkw4
cEm6NAVshoiGQOwaqSl7GSFzWdL1STs94qyVnB2UVJxPPACvce0=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:59:41 2025 by rpki-client