This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
File:                     10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json)
Hash identifier:          3mHufVJbbdHiYlr/phk8WrDbv3A4qn4w/CY1XfScVJI=
Subject key identifier:   9E:03:F6:6B:04:35:C9:FB:5E:AE:9A:23:1F:A1:08:1D:9A:53:49:4C
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       0BE6A4C9BA07DAADE9415FDB277126CF51350625
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
Manifest number:          053D
Signing time:             Tue 09 Dec 2025 10:42:06 +0000
Manifest this update:     Tue 09 Dec 2025 10:37:06 +0000
Manifest next update:     Fri 12 Dec 2025 14:10:06 +0000
Files and hashes:         1: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=)
                          2: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=)
                          3: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=)
                          4: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=)
                          5: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=)
                          6: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: AM+aiplYUdhH8KU+dJBKvmqgp4vQ5YGIVFo2krKpct4=)
                          7: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=)
                          8: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=)
                          9: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=)
                          10: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=)
                          11: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=)
                          12: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=)
                          13: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=)
                          14: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=)
                          15: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=)
                          16: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=)
                          17: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: oT5jBhrlEl7eI2sSq8iBl3dMHrBUujEk0LnIlkyJsGA=)
                          18: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=)
                          19: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=)
                          20: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: Fv3PzH/PpXCb1xS63tcNe76mWTrdMYYDd+HvPixKLKI=)
                          21: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=)
                          22: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=)
                          23: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=)
                          24: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 14:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e6:a4:c9:ba:07:da:ad:e9:41:5f:db:27:71:26:cf:51:35:06:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Dec  9 10:37:06 2025 GMT
            Not After : Dec 12 14:10:06 2025 GMT
        Subject: CN=9E03F66B0435C9FB5EAE9A231FA1081D9A53494C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:de:49:ee:12:db:40:c3:02:3c:e5:ff:a2:
                    5a:58:6f:59:0a:e4:f7:06:9c:c0:c3:39:91:6b:f8:
                    cb:da:70:d5:9c:12:fb:cf:25:45:d2:57:64:00:10:
                    13:e9:2d:d5:7b:aa:47:7e:f7:05:e7:a2:01:9e:69:
                    50:8c:16:be:cf:04:c7:44:ca:b0:91:a8:81:a0:50:
                    7c:b8:4e:a4:9b:3f:00:0e:78:d1:a8:c6:b5:cf:09:
                    d5:db:41:dd:76:0b:0f:57:7c:9d:34:36:16:85:17:
                    7e:4a:3d:30:3d:3e:d4:c6:05:79:95:b9:9a:02:a0:
                    62:a5:58:5f:32:7d:7d:c9:72:93:fd:10:8e:d0:6b:
                    37:bf:a5:2e:a9:f2:2f:b8:42:53:29:38:ff:bc:f1:
                    cd:5a:cc:b3:2e:98:44:48:1b:3b:4a:27:a1:dc:0a:
                    a1:11:5b:37:de:98:9c:6b:b2:27:69:c8:d7:e9:6a:
                    1b:bf:f5:61:70:e2:33:73:32:18:20:99:a9:31:eb:
                    d6:67:9d:0d:18:e5:b6:a3:7c:f9:41:23:7e:67:33:
                    6b:f8:0b:06:e0:ac:76:42:f1:b6:87:ec:2d:ba:95:
                    35:80:88:d9:46:31:fe:c6:03:ce:06:57:1e:10:64:
                    df:e9:a7:e7:59:6b:f7:6b:7f:85:66:5f:61:45:43:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:03:F6:6B:04:35:C9:FB:5E:AE:9A:23:1F:A1:08:1D:9A:53:49:4C
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:0f:29:c5:c2:f4:a4:6d:87:f3:b2:f5:e1:c3:7d:6d:1f:
         f4:65:bd:11:f1:62:58:7f:12:5f:32:19:d2:60:03:b0:79:f0:
         03:6b:7a:6b:a1:6b:f2:dd:98:ce:57:68:3d:be:c9:f7:ff:5d:
         e0:5f:b6:63:3a:c7:c8:1b:36:9d:1a:da:87:cc:d9:df:bd:58:
         85:98:8d:85:5b:a4:5b:77:82:8c:c3:5c:d7:f7:3d:33:29:76:
         e4:0e:cc:6a:9b:70:86:fd:7d:5f:3b:19:19:ce:97:75:d6:65:
         58:12:68:23:7a:19:b6:b4:57:77:b7:04:34:ad:fc:80:28:3c:
         b6:26:f2:95:8b:a8:f4:eb:0b:39:a6:13:87:52:b5:61:c6:e4:
         25:13:d7:d1:b8:5e:ca:7f:04:3d:ee:61:37:fe:76:0f:71:a4:
         ac:b4:9f:74:1e:90:ca:31:1c:b9:30:5a:d7:e6:96:86:9c:b8:
         f5:2e:08:cd:73:3f:a0:23:51:ec:5b:28:fa:88:89:cb:27:11:
         9e:77:09:20:4b:ec:ef:24:b5:c6:c1:5b:9b:21:cf:49:21:1b:
         a0:09:c3:79:d4:e6:3a:52:0c:03:e4:11:a5:86:3e:e7:d4:b1:
         06:b9:f1:47:d3:da:12:7f:0c:26:67:29:6c:3b:60:16:d3:ca:
         1b:9f:d4:19
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC+akyboH2q3pQV/bJ3Emz1E1BiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5
NTIyNDZGRjAeFw0yNTEyMDkxMDM3MDZaFw0yNTEyMTIxNDEwMDZaMDMxMTAvBgNV
BAMTKDlFMDNGNjZCMDQzNUM5RkI1RUFFOUEyMzFGQTEwODFEOUE1MzQ5NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaxt5J7hLbQMMCPOX/olpYb1kK
5PcGnMDDOZFr+MvacNWcEvvPJUXSV2QAEBPpLdV7qkd+9wXnogGeaVCMFr7PBMdE
yrCRqIGgUHy4TqSbPwAOeNGoxrXPCdXbQd12Cw9XfJ00NhaFF35KPTA9PtTGBXmV
uZoCoGKlWF8yfX3JcpP9EI7Qaze/pS6p8i+4QlMpOP+88c1azLMumERIGztKJ6Hc
CqERWzfemJxrsidpyNfpahu/9WFw4jNzMhggmakx69ZnnQ0Y5bajfPlBI35nM2v4
CwbgrHZC8baH7C26lTWAiNlGMf7GA84GVx4QZN/pp+dZa/drf4VmX2FFQ62PAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUngP2awQ1yfterpojH6EIHZpTSUwwHwYDVR0j
BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw
RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy
NDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh
ODUtZWNmZDEyYjkxNWY1LzAvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2
MzY5NTIyNDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABwODynFwvSkbYfzsvXhw31tH/RlvRHxYlh/
El8yGdJgA7B58ANremuha/LdmM5XaD2+yff/XeBftmM6x8gbNp0a2ofM2d+9WIWY
jYVbpFt3gozDXNf3PTMpduQOzGqbcIb9fV87GRnOl3XWZVgSaCN6Gba0V3e3BDSt
/IAoPLYm8pWLqPTrCzmmE4dStWHG5CUT19G4Xsp/BD3uYTf+dg9xpKy0n3QekMox
HLkwWtfmloacuPUuCM1zP6AjUexbKPqIicsnEZ53CSBL7O8ktcbBW5shz0khG6AJ
w3nU5jpSDAPkEaWGPufUsQa58UfT2hJ/DCZnKWw7YBbTyhuf1Bk=
-----END CERTIFICATE-----
Generated at Wed Dec 10 19:58:31 2025 by rpki-client