This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
File:                     8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json)
Hash identifier:          xTZwDhdJDXuhU/Vyg03l+tIo/clWmNXjzlzLnC47o3U=
Subject key identifier:   7A:E1:79:AC:44:7C:E1:F4:E3:F2:E3:55:7D:A0:20:63:9E:02:03:29
Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
Certificate issuer:       /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Certificate serial:       19D0E95F9DE39E1DF3DE98A8232032BE899D6521
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
Manifest number:          053A
Signing time:             Sat 13 Dec 2025 17:52:23 +0000
Manifest this update:     Sat 13 Dec 2025 17:47:23 +0000
Manifest next update:     Tue 16 Dec 2025 19:55:23 +0000
Files and hashes:         1: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=)
                          2: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=)
                          3: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=)
                          4: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=)
                          5: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=)
                          6: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=)
                          7: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: 86fWZkyGVsGR1xuteYcLe7QuBt3C7Kd5AkCWpCEtUa0=)
                          8: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=)
                          9: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=)
                          10: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=)
                          11: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=)
                          12: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
                          rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 19:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d0:e9:5f:9d:e3:9e:1d:f3:de:98:a8:23:20:32:be:89:9d:65:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
        Validity
            Not Before: Dec 13 17:47:23 2025 GMT
            Not After : Dec 16 19:55:23 2025 GMT
        Subject: CN=7AE179AC447CE1F4E3F2E3557DA020639E020329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ae:30:50:c9:06:bb:71:35:8f:dd:54:7a:21:
                    73:f0:35:4e:a5:5a:b4:e0:26:ef:ef:a8:42:8c:f1:
                    fa:06:64:30:d9:af:d7:dc:72:d3:07:75:55:4d:d5:
                    90:ea:c9:d3:c7:ee:d4:e0:7d:f2:ea:30:d5:20:d4:
                    d3:00:c5:88:0a:0e:8b:da:e6:b6:cd:0a:87:0b:51:
                    de:46:f5:4d:16:9b:df:dd:7d:75:5c:6e:2e:10:86:
                    f5:0c:52:55:22:09:82:13:48:4f:a3:b7:dd:cc:a4:
                    73:38:4b:c7:2d:90:00:53:31:1c:b7:1e:30:4a:68:
                    7a:bb:e3:67:bb:53:e5:17:8d:e6:d9:69:27:89:26:
                    fd:7a:29:ef:81:8e:a5:ff:e8:86:97:17:78:ed:ef:
                    cc:51:61:16:3e:4a:6e:ee:2f:25:dc:1a:a7:b9:dd:
                    9e:81:96:42:35:c8:11:07:72:3c:bf:36:15:5a:5c:
                    ff:52:22:98:02:38:04:07:88:01:32:97:01:73:00:
                    b1:ec:34:dd:cf:ad:1d:8d:f6:7d:2d:3d:b4:0a:1b:
                    da:8d:3c:e8:91:e5:47:fe:4f:28:16:70:3c:a5:73:
                    d4:0a:45:a5:73:ec:18:3f:fd:a4:94:14:81:e3:6c:
                    72:e6:35:f0:cd:11:25:4f:98:2f:7d:5b:cf:14:5f:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E1:79:AC:44:7C:E1:F4:E3:F2:E3:55:7D:A0:20:63:9E:02:03:29
            X509v3 Authority Key Identifier:
                keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:a5:d3:af:36:c6:a9:f3:aa:1f:1d:48:93:b4:a5:2e:b3:
         d4:87:76:3d:91:60:1a:c9:d9:86:17:b0:59:48:33:3b:a8:bc:
         16:cc:43:c5:27:6c:20:4b:e5:4a:43:44:9a:d3:b1:8f:95:0a:
         41:f9:fa:91:15:e2:58:b0:5d:0f:c1:c2:9d:81:08:be:14:5d:
         4d:f1:8a:48:f6:3d:9a:c0:d9:a3:15:0b:ec:a4:02:33:c1:15:
         c8:e3:db:c4:be:a9:5b:75:ab:94:09:77:0c:36:68:94:16:3d:
         cb:de:fd:1e:8b:a1:ac:4b:eb:0f:9f:7d:ea:6c:29:69:76:b9:
         aa:50:f6:37:96:4b:0b:df:f4:25:ac:e2:32:83:14:89:b8:69:
         cd:77:a5:15:ae:3e:56:e0:b7:00:60:f4:46:d3:c4:12:76:86:
         6b:9b:d7:5f:f8:b2:f9:58:c8:49:cb:1e:34:36:25:73:59:3b:
         3e:35:9c:b0:ea:5b:8c:31:76:91:e8:45:a7:50:6f:6e:89:fb:
         33:85:87:c3:b8:06:6d:0f:70:b2:64:a4:12:63:c9:b2:a6:d5:
         16:18:ea:32:47:0b:94:11:34:7a:21:e4:34:a3:fb:13:54:e0:
         21:d9:c9:19:8b:fc:4b:52:3b:4b:da:32:dc:76:95:5e:66:ac:
         a7:3e:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 10:55:40 2025 by rpki-client