This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File:                     2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier:          A3NWqnIhp6qv2ZDiG5cqfhvT/Gq60mlxNPYUbnXmOkc=
Subject key identifier:   D0:CE:15:59:5A:1B:8C:13:BC:DF:16:2B:B0:A3:E6:66:9C:53:F6:2D
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       4E2D60E23F6F1BE077FBFD12D35819F1B65B5C11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number:          052D
Signing time:             Wed 10 Dec 2025 00:32:02 +0000
Manifest this update:     Wed 10 Dec 2025 00:27:02 +0000
Manifest next update:     Sat 13 Dec 2025 11:23:02 +0000
Files and hashes:         1: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
                          2: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=)
                          3: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
                          4: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
                          5: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
                          6: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
                          7: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
                          8: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
                          9: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
                          10: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
                          11: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
                          12: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
                          13: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
                          14: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
                          15: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
                          16: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
                          17: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
                          18: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
                          19: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
                          20: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
                          21: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
                          22: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
                          23: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
                          24: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: ZwUhfuiI2FA4ghMIhGDdcPeji02m3T98YDcjAcBI/vM=)
                          25: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
                          26: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
                          27: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
                          28: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
                          29: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 05:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2d:60:e2:3f:6f:1b:e0:77:fb:fd:12:d3:58:19:f1:b6:5b:5c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Dec 10 00:27:02 2025 GMT
            Not After : Dec 13 11:23:02 2025 GMT
        Subject: CN=D0CE15595A1B8C13BCDF162BB0A3E6669C53F62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:74:8d:9d:5e:6a:b2:52:60:32:27:43:b8:
                    9b:c6:02:6e:48:dc:d5:06:cd:8e:7b:ca:17:8d:d5:
                    43:62:cc:02:53:ad:6e:f0:3e:9d:8b:e7:8d:f4:aa:
                    2e:59:13:43:85:1c:95:f4:05:d8:6c:46:97:69:13:
                    9e:95:1b:ed:b2:c3:50:30:bd:2c:03:21:3e:6a:9e:
                    df:29:d0:9e:b9:4c:f3:0f:df:0a:2f:68:26:cc:4a:
                    8f:e4:e4:36:94:46:1d:4d:05:af:e0:8b:f3:f9:f8:
                    72:5e:a6:81:2f:80:1b:a1:a4:4e:cc:09:67:b0:e7:
                    f2:c3:84:e6:c2:05:f0:02:69:6f:70:38:c9:ad:e3:
                    c3:54:9f:58:45:76:ec:e1:19:d7:84:42:d7:c5:83:
                    02:8f:17:89:c4:82:40:38:05:a1:74:1c:04:ff:37:
                    61:c8:e0:1a:7f:22:bb:85:a2:45:30:41:6e:f5:ad:
                    02:ff:8d:bf:fe:a6:8b:2d:c5:41:72:63:8c:86:39:
                    35:75:5b:24:f9:7c:2e:28:d8:8f:55:58:c1:48:c1:
                    a0:65:0d:06:06:73:68:ec:f4:63:ba:da:2d:73:1c:
                    f4:d7:81:c1:61:d6:d9:19:ca:8f:b8:ad:ec:4f:ac:
                    f8:9d:52:25:86:51:cf:c7:6f:c4:b0:d7:39:71:5e:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CE:15:59:5A:1B:8C:13:BC:DF:16:2B:B0:A3:E6:66:9C:53:F6:2D
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bc:78:32:3f:73:d1:de:bd:95:60:f4:d8:3b:2d:26:bd:19:
         09:37:68:7d:90:8b:64:03:fd:1c:12:03:20:a0:62:95:23:10:
         bb:9f:18:64:51:9a:12:27:10:6a:f6:ab:bc:83:b2:6c:99:20:
         e4:18:27:6d:e7:3e:19:08:bd:28:83:f3:d8:17:3c:0c:a0:ea:
         4f:ed:8f:03:8e:dc:77:d7:1f:7b:10:9d:27:bc:c6:51:0c:71:
         b2:f5:79:dc:78:80:63:4a:ee:c9:0d:a4:35:e5:96:94:67:d1:
         48:2c:05:04:8a:a0:12:e1:85:a1:6a:92:17:2c:5b:16:67:4a:
         96:82:a1:c5:4d:97:68:ca:3b:bc:93:fd:f5:4c:f9:1a:bf:45:
         7d:31:b6:fd:6c:ea:74:90:7d:28:43:ba:dc:30:e7:79:1c:8e:
         24:44:ae:f0:61:85:e4:4d:9c:0e:f2:2d:1a:3b:19:f6:0f:56:
         07:a7:82:2b:97:13:c0:7e:0e:26:d9:2e:06:91:9f:ba:53:60:
         01:bb:4b:57:9c:b8:10:d5:97:8e:26:16:12:ad:83:d3:16:7e:
         43:35:37:3d:b2:be:42:4c:ee:a4:2f:5a:61:f0:fb:08:4e:9e:
         92:67:f2:95:59:25:33:69:8c:82:4a:45:22:60:7a:af:51:7a:
         27:35:da:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTi1g4j9vG+B3+/0S01gZ8bZbXBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG
NjhDREJCOTAeFw0yNTEyMTAwMDI3MDJaFw0yNTEyMTMxMTIzMDJaMDMxMTAvBgNV
BAMTKEQwQ0UxNTU5NUExQjhDMTNCQ0RGMTYyQkIwQTNFNjY2OUM1M0Y2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEXSNnV5qslJgMidDuJvGAm5I
3NUGzY57yheN1UNizAJTrW7wPp2L5430qi5ZE0OFHJX0BdhsRpdpE56VG+2yw1Aw
vSwDIT5qnt8p0J65TPMP3wovaCbMSo/k5DaURh1NBa/gi/P5+HJepoEvgBuhpE7M
CWew5/LDhObCBfACaW9wOMmt48NUn1hFduzhGdeEQtfFgwKPF4nEgkA4BaF0HAT/
N2HI4Bp/IruFokUwQW71rQL/jb/+postxUFyY4yGOTV1WyT5fC4o2I9VWMFIwaBl
DQYGc2js9GO62i1zHPTXgcFh1tkZyo+4rexPrPidUiWGUc/Hb8Sw1zlxXuxnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0M4VWVobjBO83xYrsKPmZpxT9i0wHwYDVR0j
BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3
Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD
REJCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj
NzktMjMxNTY1OTY2OGFhLzAvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhB
NURGNjhDREJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIy8eDI/c9HevZVg9Ng7LSa9GQk3aH2Qi2QD
/RwSAyCgYpUjELufGGRRmhInEGr2q7yDsmyZIOQYJ23nPhkIvSiD89gXPAyg6k/t
jwOO3HfXH3sQnSe8xlEMcbL1edx4gGNK7skNpDXllpRn0UgsBQSKoBLhhaFqkhcs
WxZnSpaCocVNl2jKO7yT/fVM+Rq/RX0xtv1s6nSQfShDutww53kcjiRErvBhheRN
nA7yLRo7GfYPVgengiuXE8B+DibZLgaRn7pTYAG7S1ecuBDVl44mFhKtg9MWfkM1
Nz2yvkJM7qQvWmHw+whOnpJn8pVZJTNpjIJKRSJgeq9Reic12oY=
-----END CERTIFICATE-----
Generated at Wed Dec 10 07:06:24 2025 by rpki-client