This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          avQDO6J76OIOMZQcxvWGzmzrmwIOT2/ANBRgW/ZhQ5g=
Subject key identifier:   24:49:6A:EA:FE:EA:F6:4C:6C:43:93:4F:D3:D4:8A:E3:EF:3E:D8:AD
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       0624DE0436CEF5630EE11AC7F07A55B5CCEF1B27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          FF
Signing time:             Mon 01 Dec 2025 23:21:28 +0000
Manifest this update:     Mon 01 Dec 2025 23:16:28 +0000
Manifest next update:     Fri 05 Dec 2025 07:40:28 +0000
Files and hashes:         1: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=)
                          2: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=)
                          3: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=)
                          4: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=)
                          5: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=)
                          6: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=)
                          7: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=)
                          8: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
                          9: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=)
                          10: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=)
                          11: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=)
                          12: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=)
                          13: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
                          14: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
                          15: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=)
                          16: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: m5smcjV4iGQm3Z4WypjFi+rSo5l902PD3u79caUKJ24=)
                          17: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
                          18: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=)
                          19: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
                          20: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=)
                          21: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=)
                          22: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=)
                          23: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=)
                          24: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=)
                          25: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=)
                          26: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
                          27: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=)
                          28: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
                          29: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=)
                          30: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=)
                          31: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=)
                          32: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
                          33: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=)
                          34: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
                          35: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=)
                          36: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=)
                          37: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
                          38: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 07:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:24:de:04:36:ce:f5:63:0e:e1:1a:c7:f0:7a:55:b5:cc:ef:1b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Dec  1 23:16:28 2025 GMT
            Not After : Dec  5 07:40:28 2025 GMT
        Subject: CN=24496AEAFEEAF64C6C43934FD3D48AE3EF3ED8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:55:e3:83:8c:c6:7d:b1:7e:70:66:b4:f8:
                    26:40:00:2c:62:c7:51:d0:3d:60:a7:8a:03:23:38:
                    58:4b:da:e6:1d:c9:14:b9:47:90:10:b9:96:72:95:
                    6d:0f:2b:36:bb:b7:0e:bc:d5:7e:80:03:08:c3:1b:
                    d2:96:53:c8:f8:5d:37:2e:d1:57:a6:03:b1:18:34:
                    a3:97:fa:f4:22:5d:bf:c4:58:cb:ed:53:8e:94:dd:
                    2d:9d:9c:37:b6:ae:31:e2:22:28:31:ff:78:45:42:
                    95:c4:fe:03:0a:d4:26:a8:48:75:2c:da:65:90:f3:
                    fd:c2:6b:34:41:45:58:64:1a:92:87:de:40:02:69:
                    f4:81:58:26:a9:4e:5e:41:fa:bc:01:03:17:78:b9:
                    ff:fb:d1:62:89:95:0f:2f:49:ce:da:1e:0e:5c:b8:
                    7e:27:cb:ed:56:65:d5:78:30:15:14:a6:8d:b8:f0:
                    bb:97:4e:df:c7:43:75:c4:cc:0a:17:2c:13:00:0a:
                    b0:ac:5c:9f:83:1f:3a:93:50:f4:1f:e5:ca:b3:26:
                    85:cd:78:5c:82:3e:b7:73:86:2f:11:41:ab:8a:2d:
                    4d:38:5c:d2:b2:9b:ef:7b:ca:bb:e8:d0:52:8f:bd:
                    c7:19:d0:ea:9a:3d:ca:dc:99:62:db:7d:55:d6:71:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:49:6A:EA:FE:EA:F6:4C:6C:43:93:4F:D3:D4:8A:E3:EF:3E:D8:AD
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ad:da:7d:6c:07:c2:32:14:b2:61:23:81:5c:f9:bb:8c:8c:
         67:71:ce:80:ef:02:0e:34:e3:98:ad:1c:28:ea:86:dc:cb:06:
         9e:b5:06:2e:c0:2c:db:80:b0:6b:72:82:a6:94:f7:62:35:11:
         b3:f5:4e:d0:5b:7e:14:89:50:2f:dd:09:2d:83:de:5e:18:bb:
         f0:46:2d:db:32:f7:5f:23:af:a5:a0:98:26:58:59:03:01:60:
         66:eb:14:5c:3d:7c:59:16:5a:ad:03:a7:37:ad:0a:f7:b7:7a:
         30:db:14:21:4d:f3:ec:a5:e1:d2:70:fc:85:c8:99:72:cb:3d:
         fa:46:d7:b6:dc:89:26:ea:59:43:69:96:94:3a:f7:d5:eb:34:
         9d:84:93:6f:5a:4e:e6:b7:38:93:a2:b0:2b:be:ca:31:6e:d3:
         04:bb:40:c0:00:4f:14:71:6a:3a:33:85:e1:de:63:3d:2f:3b:
         76:b5:e8:37:5a:05:07:6b:c9:ee:1a:2b:18:5e:f1:e2:40:e1:
         cd:84:6b:6e:9e:9c:81:57:2a:0a:f4:36:c7:3f:6c:1a:01:a3:
         2d:6a:c0:e6:c1:82:40:12:2d:a4:6b:c6:72:72:90:34:d4:05:
         1b:90:25:9c:5c:c7:07:b6:82:45:a9:cf:92:de:3b:4f:20:b7:
         12:58:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:10 2025 by rpki-client