This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
File:                     012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft (raw, json)
Hash identifier:          +oFp6OJ2cM/yOqASbjFcu5v80Rdl/2aSUuBfCfDAw5M=
Subject key identifier:   16:C7:F2:3F:8F:AF:2F:11:4C:47:BF:65:FA:E4:99:A3:26:22:8F:44
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       60A631AB7057064CD3C5D720EC303C44A557385C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
Manifest number:          0534
Signing time:             Mon 08 Dec 2025 00:32:19 +0000
Manifest this update:     Mon 08 Dec 2025 00:27:19 +0000
Manifest next update:     Thu 11 Dec 2025 03:38:19 +0000
Files and hashes:         1: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: yvbmRN5GX0Kxoc+90gun4y0Zq8jLX00f2pb/Z/G8CGA=)
                          2: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: HxTVM3BaA8ke4XmmAmeOxfSVVSVRh0EkdWqpyqwPT1U=)
                          3: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: sFm39yL/wE3VY7beJqFDG9gTkKfaNeEukDIdxaa9zRE=)
                          4: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: Mn12cCWWwqenSncttGnq31sIu/+Hnb5sVeUQv3iCWNw=)
                          5: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: Kcq6RiACas78b8uWIYiFOtGS3r3yMXUnaWfx7z/cdEU=)
                          6: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: 9VqDU3d2jTW23JJ05scMXpgKwNdRFXtjy3WCszDduNE=)
                          7: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: JWHfZ6w+iObuBrwQGbo/6Xd2nLZuo2KPm5ntS1O1mZA=)
                          8: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: iVB5CfMmFrw/1sxkrTtiTl8LrYbLbK8j8toSYOpEOdI=)
                          9: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: HZhJmMH/Ke4cPS3cjwshrQlxCqO5LSReCzOgD2oJQGE=)
                          10: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: 0aNy0ETuqhbORaoBLuDRgIvkLNekuqgE5MuIzbIuHu4=)
                          11: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl (hash: u6GA+AL/dFpDUS+8JJeRW/m7QqWPUCSCSloGXMwX9p0=)
                          12: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: bc52vQ8UC2G4/y1ll8Fk+/X4/gPss4cwSVJImtHITIQ=)
                          13: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=)
                          14: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: ri1oMn8me80QpVGUqBtvPXHCGV+V3jM8xkbu4T3ytno=)
                          15: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: 2xWfiK5wGmMcUrPcXTeK+FMi4oIrH3FKfxMpAgGIdSQ=)
                          16: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: w9IXrLEpnOTvHIWW3gOa5yz7gU/R3agEoOz9SkOzTf8=)
                          17: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: bBONzBtnp5cZgKGGF/WSDLhv6iSsnxnb46nVEQMcaEk=)
                          18: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: uZGMmLO+ihx1HauuMCEhDeKUaoZ9Cej3WyjpZuP5mxw=)
                          19: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: /rqrLGb+IkPW8rjy02EXXMaWAA6ibmhWcBGw6CAxGjc=)
                          20: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: vkTDe9buXDOgB6kWHFGcwJdVcp2flSZI09Z4kQqjciU=)
                          21: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: AxG3Av6Lr1ooWeZ52jFBXjksOOp131HOnOlkyHCdSIY=)
                          22: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: qkkJ54NZ40Um3ciYsl/FGUnS4rYZSGlzZD4dWlUI5hM=)
                          23: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: mk2uuBuKIDHj7rkFbCdRe6jSuAPJ/hDxuUfm/exdaSw=)
                          24: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: XNOVEI3YN45FFKxPdBMlhL4tIvoqWKr9UzQJy69423A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 03:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a6:31:ab:70:57:06:4c:d3:c5:d7:20:ec:30:3c:44:a5:57:38:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Dec  8 00:27:19 2025 GMT
            Not After : Dec 11 03:38:19 2025 GMT
        Subject: CN=16C7F23F8FAF2F114C47BF65FAE499A326228F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:5a:aa:c0:30:f4:db:5e:c0:3a:b9:84:93:
                    06:14:24:45:2d:00:7b:c3:ec:ee:55:61:91:32:de:
                    6a:dd:4f:4c:7f:a9:28:30:5b:b0:9a:32:2b:45:ee:
                    c7:c6:9a:98:18:61:82:25:c4:b5:82:07:ba:52:b8:
                    eb:46:d0:b7:5e:ac:94:87:24:c3:2e:0f:e3:ad:9e:
                    14:00:e8:5a:62:74:e3:62:06:ed:cd:a1:b4:3b:9d:
                    d1:03:50:c4:e3:77:2e:bb:2f:e5:a3:b2:87:af:f3:
                    ab:ca:ef:78:68:05:31:c8:d0:86:51:99:04:51:4b:
                    1b:a5:18:7f:91:73:86:26:ca:7a:65:35:9f:e6:77:
                    f4:a4:49:28:91:96:c8:44:40:49:67:94:cf:e4:eb:
                    87:06:f7:dc:8c:10:b4:6d:23:be:c9:91:ba:6a:55:
                    5e:d8:d7:7d:28:c8:59:a6:72:26:f8:6d:05:f4:ab:
                    cc:ea:8b:f6:9c:8f:7e:ba:ad:e7:44:fc:44:2b:f2:
                    80:de:82:b5:66:21:81:fd:b5:0b:e0:96:c7:6b:a6:
                    12:57:21:aa:e9:01:7f:08:b8:4a:0a:46:7c:85:c9:
                    57:a8:9d:79:d3:e1:0b:f8:2e:7b:d5:4a:0e:86:f3:
                    72:4c:9b:ae:88:c4:3f:67:35:27:d7:28:25:4b:11:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C7:F2:3F:8F:AF:2F:11:4C:47:BF:65:FA:E4:99:A3:26:22:8F:44
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:28:02:d5:64:1d:bf:14:86:00:95:f8:c8:9d:8c:f4:b4:
         ab:7a:03:2f:89:3e:af:60:fb:bb:34:e7:94:c8:e2:9d:9f:2d:
         70:b4:f6:eb:c9:94:56:0e:2c:63:17:96:f8:a7:0a:c4:73:a9:
         77:52:58:5d:e6:e5:55:2e:42:74:e1:85:19:2b:e2:60:a9:8f:
         13:8f:be:f9:83:8b:c9:3a:a1:2a:ac:81:41:28:ea:8f:41:11:
         ad:31:a4:79:c7:da:02:ed:bd:77:ba:4e:00:7f:38:a9:b9:a8:
         35:e4:1d:9b:7a:b2:8e:fc:af:9a:89:37:b6:9b:c1:e5:f1:fd:
         c8:ff:99:f3:2c:a2:43:63:93:a2:3e:6d:6f:c2:30:21:2f:d3:
         a3:54:d1:c3:86:8e:bc:35:a3:8b:43:d4:4a:fd:92:4a:b8:87:
         80:f9:7a:fc:59:7c:92:bf:7c:ea:52:84:cd:63:18:38:b7:60:
         f0:23:46:78:af:f8:c2:f6:fb:38:ed:2e:53:6a:80:16:62:e5:
         f7:18:cd:98:3b:d1:55:6d:2d:b4:2f:ac:6e:33:c6:67:4c:d8:
         0a:26:fe:da:0c:ea:7c:95:e7:f9:8b:cb:60:f2:93:e7:62:46:
         b6:fd:a1:9c:f8:c8:91:68:b2:d2:a6:82:f8:87:4e:c6:11:0a:
         a0:d8:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 20:06:57 2025 by rpki-client