This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
File:                     6B35526165718CDFDDCB202D241332F565BEE7B0.mft (raw, json)
Hash identifier:          ZGrPyDmiWriZXJmrLTH6zUl2YuY/dc9AOX8dECv/KJs=
Subject key identifier:   D6:C0:01:EA:16:FF:5B:3E:F0:5C:45:93:94:96:AA:31:E6:B7:F9:5B
Authority key identifier: 6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0
Certificate issuer:       /CN=6B35526165718CDFDDCB202D241332F565BEE7B0
Certificate serial:       147699676B93AB544AAAEB4B0666CCDDBE253A2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
Manifest number:          F5
Signing time:             Sat 13 Dec 2025 21:21:24 +0000
Manifest this update:     Sat 13 Dec 2025 21:16:24 +0000
Manifest next update:     Wed 17 Dec 2025 08:30:24 +0000
Files and hashes:         1: 6B35526165718CDFDDCB202D241332F565BEE7B0.crl (hash: tZVrdD3iGWmA+X7H2A2axil6FqeWqtfl5FN3+9xb49Q=)
                          2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: mKIqmd/EOitm2VkjJ4/rdItHB7wxpB5sjP3tcWKMCX8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl
                          rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 13:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:76:99:67:6b:93:ab:54:4a:aa:eb:4b:06:66:cc:dd:be:25:3a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B35526165718CDFDDCB202D241332F565BEE7B0
        Validity
            Not Before: Dec 13 21:16:24 2025 GMT
            Not After : Dec 17 08:30:24 2025 GMT
        Subject: CN=D6C001EA16FF5B3EF05C45939496AA31E6B7F95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:86:be:c8:a7:a1:8a:63:b8:38:95:eb:d5:
                    44:79:b2:fd:7e:17:f9:9b:a1:51:1d:fb:32:ac:bc:
                    5b:74:7c:16:06:63:33:08:c2:4d:ef:ae:d3:da:b3:
                    9f:ab:d8:c3:21:05:97:a1:ac:c7:e2:fb:06:1d:dd:
                    b3:14:ca:19:50:5a:35:6b:e7:15:43:97:d9:66:b9:
                    1d:39:ee:fa:80:d2:f7:2d:20:b0:89:74:6c:98:c6:
                    5d:e2:52:5e:27:20:cb:9e:f7:6a:7b:a1:2b:3c:f0:
                    8f:a8:44:c9:8f:4a:87:6c:2d:4e:70:fa:6e:ef:3c:
                    6b:3d:63:3a:7b:d9:34:67:c7:b8:e2:87:62:98:b6:
                    b0:60:b6:f9:df:48:82:76:db:40:79:b2:b7:0c:b3:
                    29:85:63:92:53:96:5e:49:90:64:ed:9a:6c:1a:8e:
                    28:9e:55:eb:d9:0a:71:cf:1b:86:bd:cd:85:cd:40:
                    2c:a4:da:3c:ee:e6:4e:88:f7:a3:9e:af:f3:d2:40:
                    4e:d9:5c:6c:b9:4a:e5:88:9a:a6:62:42:1b:41:54:
                    a3:b8:3d:54:7c:18:8a:8a:dd:0e:c6:ae:97:fe:82:
                    87:4a:67:88:e5:fb:50:05:80:35:64:51:54:8a:2b:
                    09:dd:bf:1d:8d:f6:c2:51:83:d7:aa:73:a5:ca:83:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C0:01:EA:16:FF:5B:3E:F0:5C:45:93:94:96:AA:31:E6:B7:F9:5B
            X509v3 Authority Key Identifier:
                keyid:6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:5e:79:d5:f6:fd:01:c8:28:10:ae:74:e3:0b:cd:45:bd:f2:
         b5:49:0e:39:1c:6d:10:cb:e8:c0:f3:0a:a6:23:c5:e9:32:c3:
         8b:6b:aa:45:ec:b8:48:c1:24:ec:d5:79:f7:9e:f9:c7:d6:cc:
         b7:92:f9:3c:fe:b7:d9:e7:6d:99:57:48:03:09:22:02:94:d9:
         13:05:f0:3f:c3:e0:1e:84:41:3e:b4:ce:ba:85:41:bb:92:2e:
         9c:2a:b1:e6:90:eb:57:9a:51:3f:b8:27:26:69:a7:2f:0d:17:
         5c:ce:ac:ed:79:09:c4:73:f2:ba:84:b2:4e:23:f0:95:d4:79:
         51:6f:1b:11:2c:23:b3:91:f6:3a:ea:67:6b:91:bd:07:6f:74:
         61:41:39:2e:15:e4:1b:bd:b9:09:d8:32:ca:1f:85:a3:89:3d:
         6e:f7:ce:27:63:2b:9b:99:cb:4c:25:b8:e0:e6:66:e8:1b:a2:
         72:26:c3:50:ca:12:d9:8c:13:25:a5:f6:03:4f:82:df:13:cf:
         2f:d9:d4:2a:8b:ac:3b:90:80:61:61:47:b2:17:b6:af:34:80:
         cc:a3:f6:14:c1:5d:d5:0d:74:43:cc:c0:f3:e3:56:cb:ef:3b:
         f7:a2:7f:c4:e1:56:8f:9a:52:2c:24:46:bd:c8:53:93:ad:d7:
         8c:b0:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:26:54 2025 by rpki-client