This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
File:                     6B35526165718CDFDDCB202D241332F565BEE7B0.mft (raw, json)
Hash identifier:          op3OWBvXJm1QZMUBeRdBtA6UupKsd0KH2SyqjVjVfRo=
Subject key identifier:   E1:37:9A:BD:BC:97:85:55:6B:76:D6:9B:B9:68:2E:50:9E:9B:A4:3E
Authority key identifier: 6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
Certificate issuer:       /CN=6B35526165718CDFDDCB202D241332F565BEE7B0
Certificate serial:       3007FD796C3054062EA49B3AC5387DB0DE0DE107
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
Manifest number:          F0
Signing time:             Tue 02 Dec 2025 03:03:35 +0000
Manifest this update:     Tue 02 Dec 2025 02:58:35 +0000
Manifest next update:     Fri 05 Dec 2025 13:19:35 +0000
Files and hashes:         1: 6B35526165718CDFDDCB202D241332F565BEE7B0.crl (hash: A8r13LKB4PDAIcG182b8ufQwQFuJ7zHZQiL8JiJV+hM=)
                          2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: mKIqmd/EOitm2VkjJ4/rdItHB7wxpB5sjP3tcWKMCX8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl
                          rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 13:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:07:fd:79:6c:30:54:06:2e:a4:9b:3a:c5:38:7d:b0:de:0d:e1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B35526165718CDFDDCB202D241332F565BEE7B0
        Validity
            Not Before: Dec  2 02:58:35 2025 GMT
            Not After : Dec  5 13:19:35 2025 GMT
        Subject: CN=E1379ABDBC9785556B76D69BB9682E509E9BA43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:3f:1b:46:1d:1a:d4:59:f7:86:1a:f7:50:
                    18:27:38:5e:2b:c3:f0:ea:ff:a1:86:73:66:fd:8a:
                    5f:7a:5f:c5:d0:1e:3c:01:8e:80:bb:4d:aa:0e:7a:
                    53:e2:76:41:d3:20:2d:99:8e:18:8a:49:e6:6a:f9:
                    9d:bb:f9:fd:f4:56:8d:5d:12:15:ad:ee:86:0c:5a:
                    9e:42:78:ec:97:12:19:d9:a9:6c:4b:c6:25:02:48:
                    38:e8:27:76:22:9a:bf:4e:31:83:9a:d7:3b:ec:82:
                    33:3b:5c:e4:7f:d1:38:80:2c:ac:47:7d:b9:7b:b1:
                    23:bb:d8:85:af:64:ac:17:4c:fb:ec:6d:a4:0c:04:
                    c6:35:2b:f2:0e:eb:a7:2c:7b:fc:97:a5:d6:08:b3:
                    b0:93:cc:c2:a8:16:d3:b2:ea:f3:4e:89:7d:7e:11:
                    8b:c5:f6:9c:82:8f:fa:44:5a:4c:18:8a:be:05:50:
                    58:28:a0:d8:ef:a6:03:8d:fa:39:2a:16:36:7f:2b:
                    7e:90:be:42:a7:c1:08:c3:4c:8a:39:8c:92:69:98:
                    4f:e5:b3:f0:e4:92:8f:94:14:a1:ef:13:2c:07:ee:
                    f8:c9:c7:9d:e1:14:d4:05:a5:3a:08:02:84:70:ef:
                    f1:02:37:b8:96:f9:a5:2b:ef:5b:14:f2:b1:b3:3d:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:37:9A:BD:BC:97:85:55:6B:76:D6:9B:B9:68:2E:50:9E:9B:A4:3E
            X509v3 Authority Key Identifier:
                keyid:6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:ed:81:14:73:f0:71:bf:d9:7a:70:94:00:45:ee:63:a5:
         04:32:72:b5:44:a1:be:c4:5c:16:c0:12:b3:11:0d:d1:14:1c:
         77:2f:cf:da:ad:64:99:e8:3c:7e:c9:58:09:d5:28:6c:82:a1:
         ea:ca:3c:28:bf:a3:56:3f:87:7d:ee:a8:50:a5:83:0d:9a:dc:
         b3:a7:c2:74:5f:be:32:9a:b7:e7:02:20:04:80:9c:08:84:79:
         77:77:f7:12:ef:2d:cf:c5:a9:0c:30:6e:6d:2e:63:10:df:70:
         6e:f6:37:b9:c8:cf:77:a1:50:e0:20:f6:49:0e:2c:34:db:42:
         a3:cc:2c:ea:28:4d:1a:ca:2c:9f:44:59:9a:40:71:4a:61:0b:
         41:7a:b7:c6:6b:25:a4:14:45:f7:06:50:82:35:5b:4b:40:34:
         cb:2c:55:2e:13:cd:64:9c:1d:a9:b5:59:61:72:d1:41:00:12:
         ba:e2:5e:4b:0e:e8:40:56:5c:ac:0c:df:bc:7c:f6:a3:e6:d4:
         46:29:18:11:12:d2:27:32:01:67:92:d4:da:ac:0c:8b:05:08:
         30:0c:84:64:c6:3b:a6:77:c4:db:f4:6b:16:84:75:0a:42:74:
         e3:e7:dc:d4:77:2d:8b:fc:bd:0d:42:98:11:ed:27:0d:f8:4f:
         50:39:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:18 2025 by rpki-client