This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
File:                     98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json)
Hash identifier:          MFwrMAJZliAO7sy7Baugyk+6Pu35yFQzgfMg21HcJRM=
Subject key identifier:   EF:FE:16:39:99:C0:2D:DB:49:FE:01:73:2F:22:08:03:AF:13:F8:59
Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
Certificate issuer:       /CN=98F94938EA9072872BE06639F79DC61C000F849C
Certificate serial:       073F6B1CF19415030C925D54B4EE8C028022BEA2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
Manifest number:          053B
Signing time:             Wed 31 Dec 2025 19:00:02 +0000
Manifest this update:     Wed 31 Dec 2025 18:55:02 +0000
Manifest next update:     Sun 04 Jan 2026 00:00:02 +0000
Files and hashes:         1: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=)
                          2: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: i8d5F8gKecgSZOwUZQpwiEsM3ypjYsedCugKqaqgwpc=)
                          3: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=)
                          4: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
                          rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 00:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3f:6b:1c:f1:94:15:03:0c:92:5d:54:b4:ee:8c:02:80:22:be:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C
        Validity
            Not Before: Dec 31 18:55:02 2025 GMT
            Not After : Jan  4 00:00:02 2026 GMT
        Subject: CN=EFFE163999C02DDB49FE01732F220803AF13F859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:ba:b6:0c:93:b9:0f:1f:fa:61:96:c4:e5:
                    2b:81:8c:27:ab:de:63:4d:cd:cc:09:93:f2:10:d1:
                    66:4f:5e:99:60:3c:be:89:f7:11:14:65:04:1a:2b:
                    48:07:15:bb:ef:ca:7c:28:29:45:92:3c:77:df:ba:
                    09:9e:45:f3:e8:d0:cf:6b:73:b7:bc:08:e9:07:8f:
                    e8:65:71:30:5e:3e:bd:72:90:75:f5:96:87:a9:e5:
                    ae:73:80:94:a6:e2:62:2b:25:ab:5d:99:0f:a6:1a:
                    34:47:54:63:43:1a:83:39:15:a3:c4:db:cb:d1:c7:
                    4a:12:a9:22:13:fe:c4:4a:72:0e:cb:57:54:8a:46:
                    7b:b9:4d:d8:9c:88:06:e8:26:f9:36:da:9f:eb:fb:
                    cd:a8:cc:d8:56:5e:66:fd:e5:27:4c:96:25:7f:fb:
                    87:e4:6b:df:96:d9:27:5f:53:6b:35:21:fd:9d:41:
                    88:ba:04:93:ac:8b:5d:66:6a:a7:59:f6:73:9d:9a:
                    0e:f5:6c:34:70:3f:07:6d:34:7b:8c:64:10:7e:2e:
                    d2:d3:da:64:49:e8:13:ef:6f:99:96:4b:34:de:b8:
                    88:dd:fe:aa:a2:1a:75:12:fa:48:76:87:c4:5b:e6:
                    5a:69:99:c2:0c:dc:17:49:25:b5:c7:c3:05:e4:39:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FE:16:39:99:C0:2D:DB:49:FE:01:73:2F:22:08:03:AF:13:F8:59
            X509v3 Authority Key Identifier:
                keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:39:e8:3f:d9:b2:61:3c:96:06:43:74:0a:b8:24:bc:80:49:
         e3:2a:24:7b:1a:ee:70:ed:b3:6d:ed:5d:ec:05:00:de:0d:8e:
         d6:78:cf:86:7f:2b:4e:f7:db:35:a2:41:a6:8f:c3:22:42:cd:
         14:2f:77:10:d7:70:1a:42:ea:76:f6:71:7c:bd:9c:75:a8:a1:
         26:fc:f9:ab:8b:1b:85:64:01:df:af:48:12:97:ea:21:b8:7c:
         ea:85:f2:3a:10:b0:f4:26:92:c6:49:93:89:58:34:ee:0f:5d:
         06:b1:f4:d7:55:40:d6:b7:a3:c8:73:55:52:ec:fd:6b:9e:a2:
         cc:af:39:bc:16:87:19:f1:4c:c8:d0:1c:da:e6:6f:6d:d8:f0:
         74:03:1f:cd:0a:1a:72:b5:7e:18:a2:44:b4:5c:28:1a:d9:92:
         92:53:a2:36:ab:46:dd:4f:7e:b7:bf:c7:87:63:8d:60:71:d0:
         ca:ec:12:74:a4:3d:f1:b6:8a:05:fc:16:fd:73:25:ef:11:89:
         73:74:23:59:d7:b1:01:29:43:a2:0f:f7:f4:63:f1:ef:33:02:
         c4:8f:f8:b9:01:03:8b:e8:49:98:46:e6:d4:64:86:13:f9:3c:
         ba:30:5d:5d:88:8e:76:8c:b3:c9:fb:4c:dd:5a:91:5d:c8:17:
         ad:7b:34:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBz9rHPGUFQMMkl1UtO6MAoAivqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw
MDBGODQ5QzAeFw0yNTEyMzExODU1MDJaFw0yNjAxMDQwMDAwMDJaMDMxMTAvBgNV
BAMTKEVGRkUxNjM5OTlDMDJEREI0OUZFMDE3MzJGMjIwODAzQUYxM0Y4NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBbq2DJO5Dx/6YZbE5SuBjCer
3mNNzcwJk/IQ0WZPXplgPL6J9xEUZQQaK0gHFbvvynwoKUWSPHffugmeRfPo0M9r
c7e8COkHj+hlcTBePr1ykHX1loep5a5zgJSm4mIrJatdmQ+mGjRHVGNDGoM5FaPE
28vRx0oSqSIT/sRKcg7LV1SKRnu5TdiciAboJvk22p/r+82ozNhWXmb95SdMliV/
+4fka9+W2SdfU2s1If2dQYi6BJOsi11maqdZ9nOdmg71bDRwPwdtNHuMZBB+LtLT
2mRJ6BPvb5mWSzTeuIjd/qqiGnUS+kh2h8Rb5lppmcIM3BdJJbXHwwXkOaZTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7/4WOZnALdtJ/gFzLyIIA68T+FkwHwYDVR0j
BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB
OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG
ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy
NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2
MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADU56D/ZsmE8lgZDdAq4JLyASeMqJHsa7nDt
s23tXewFAN4NjtZ4z4Z/K0732zWiQaaPwyJCzRQvdxDXcBpC6nb2cXy9nHWooSb8
+auLG4VkAd+vSBKX6iG4fOqF8joQsPQmksZJk4lYNO4PXQax9NdVQNa3o8hzVVLs
/WueosyvObwWhxnxTMjQHNrmb23Y8HQDH80KGnK1fhiiRLRcKBrZkpJTojarRt1P
fre/x4djjWBx0MrsEnSkPfG2igX8Fv1zJe8RiXN0I1nXsQEpQ6IP9/Rj8e8zAsSP
+LkBA4voSZhG5tRkhhP5PLowXV2IjnaMs8n7TN1akV3IF617NB8=
-----END CERTIFICATE-----
Generated at Wed Dec 31 22:09:09 2025 by rpki-client