This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
File:                     9A52B6405ED406A7B17C4478D516DF3E37282980.mft (raw, json)
Hash identifier:          J3DsKeR93fyEUyIfKFOJ3UjHHkWgXkA8GZKvuIQ9y6w=
Subject key identifier:   B3:BF:20:B7:A6:34:8B:96:60:98:DB:98:56:3F:69:9F:49:09:49:4E
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       7B8A3A109F3C431E8D38B8714B75EEA6815CC27F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
Manifest number:          02CC
Signing time:             Tue 02 Dec 2025 21:31:03 +0000
Manifest this update:     Tue 02 Dec 2025 21:26:03 +0000
Manifest next update:     Sat 06 Dec 2025 02:11:03 +0000
Files and hashes:         1: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: r39b6mOH1IwysZ4h0sWe8of8Eqz81JxpSEnLBmKsOQg=)
                          2: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: uhlzYip1Vr9wq1FIVgoBLWnymsgGUspFrO9lWq8rb2g=)
                          3: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: OgrUIPRU4hlKsLPwGuGpe/ivo5VWBIS7QYpm7Sxho2I=)
                          4: 9A52B6405ED406A7B17C4478D516DF3E37282980.crl (hash: qQMKauB2Wa4VQI6zEBdQiyAmY6m8NiplZNShhUoUn68=)
                          5: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: s3Xjjbohn1CufgneBaEZY/bwLMOk5+UIxmZaor+mssg=)
                          6: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: 9MFeAvNjxRA9vbUf2UgXcthdxQ5XENOLt4Ao9GHoHp4=)
                          7: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: h0oH/3iLu1unRW/jZRg6pYTlxoghvh0aIr1dQ6X1C3o=)
                          8: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MQTEtT0TR1f+0V0bndDRXrcOI9gxT90XmU11iLCfrjk=)
                          9: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: a4kar+hZC31dN5bmEcyjGudCJwDbez0xQdLphlBrsp8=)
                          10: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: ShZcfvOuL7hhFcin6d6C9YZIwo2zOBT3B5csjg2tV64=)
                          11: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: 5FcZQWvOh6pLwsoaD4YTIG17OJilGjN+93omVyyFOZM=)
                          12: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA=)
                          13: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: pifjJjTcE6PeDdv2QBGHsCyyOypnfnj2TzyiuJpYoi0=)
                          14: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: Y3XYf27QnurhdV1CW67C5UxWbak1ZDu532ZjKsBxVtw=)
                          15: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: kbuURMx081wdwMkjcRHHCXRBMB09bh+YCCGTym9STe8=)
                          16: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: 23/idCqUx8EPa7QGFdtUC3If9YW7mCjrP46bOrSKS5Q=)
                          17: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: WrWbmsZZrPD4tCYkM+PlD88T9/eqy1PkC98c/wYNVkI=)
                          18: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: UeQqi6ZVFgPrGYMster+xne64h585Ow3H0IaK3UC2WM=)
                          19: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: bH0QRBT1yTn/wCvKxau4plk6nMYBKS98USNjhSr5VTI=)
                          20: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: LHnVdcZ5/YfYWNz9EwzLlVaYYhGPyvyomANm7mqWzO0=)
                          21: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: INC+aAdBEWi58gMud2WYkmc5AYB/cZKH3D/b7vcKvsA=)
                          22: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: xUscykaPjchZwH98C+3nSOKZLZaGqcecZKinfhX00i4=)
                          23: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: eELtUE44s8kWXW53efaOQB87hQvYKnu+4QWMOO/ldiE=)
                          24: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg=)
                          25: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: KAxv+bcTcqGpScOTMbFMveWIpWOPxpJEwT7ajRyz6mM=)
                          26: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: uA6xDa7IvgkDp22R6G6BTJTUnQ6z5ZPc+c5h8RXJlMc=)
                          27: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: 0k545OOwyj9NvbehxX+QV0g5xQmQQnbTNP95f97h71M=)
                          28: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: UbfbQp2UJcWdUXOg3yUdX64d8tTRpxRLmsAiq/gQPtk=)
                          29: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: +gPgp8QYiU/daLpgrvM/5BELV5q0+mYrJuLKheezSV0=)
                          30: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: YdSsGr4BjFrFET1Pgec0CyVOY3w0mCvZYunx96T/HRk=)
                          31: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: IEucjhXv8bAa5eR/7We292E0AjQSxt/nxsHzEY0hsao=)
                          32: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: ZlLb/8ABoTMshaPAOuB5oc8hOwpCTBM9+ckE++m8QHc=)
                          33: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: z2k28a+6ZI3VAF075Ex5TSmy7XYBAGjTmBdcFap9YJg=)
                          34: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: BASa57B0aeCvQjUkpH58uhcpVnA7zhpchwSCS5nsYmM=)
                          35: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: kS9+afwSiaTp9TelPiQ0ILiNOqNp/k8Ib68mizaidfE=)
                          36: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: iK23Ih7KgC4OjnO9UHJglzhRasd3vRLpYeuOhNGE5hk=)
                          37: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 6i3UMACzodtWNujjB7HjZ1wIY9Wkv8kYqdabcGyF3UA=)
                          38: 3130332e3137372e382e302f32332d3233203d3e20313437313337.roa (hash: uHzq3FI/OUse3guEAZ2X3n26c+18IEz5AqEGOSkyu60=)
                          39: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: kEXHj9pv5MWefZu6lpGXP15sPBFvi6JY6eKJO5xEqB4=)
                          40: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: EvUm4cJBa4C1BImp9thQZ8BX3+SY4YqvKOUkSPQljL0=)
                          41: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: 9D15ranZ4YwNSLaXFD5FAq+pNZxj9EjBiBFXk+HdqAc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 02:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8a:3a:10:9f:3c:43:1e:8d:38:b8:71:4b:75:ee:a6:81:5c:c2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Dec  2 21:26:03 2025 GMT
            Not After : Dec  6 02:11:03 2025 GMT
        Subject: CN=B3BF20B7A6348B966098DB98563F699F4909494E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:08:73:c3:85:de:9f:f8:7f:2b:6b:7a:69:
                    6e:41:71:c6:b9:c8:29:fd:d7:21:47:06:9b:6a:f6:
                    c1:b2:24:d1:84:43:59:4b:af:57:22:b8:6a:bf:30:
                    37:5b:b8:4f:27:ea:6c:02:03:b6:d5:a6:b2:44:31:
                    02:0f:e9:1a:cf:da:e2:9d:c7:36:9e:60:e3:e2:30:
                    10:75:eb:2d:f2:12:3c:e3:95:7c:31:6c:b4:00:d5:
                    55:00:45:fd:ce:b0:54:53:34:42:b6:e5:03:53:be:
                    fd:75:e2:50:da:25:8c:ca:93:40:f0:5d:d8:92:76:
                    36:80:5f:3c:d8:63:6b:66:5f:c1:13:93:e7:cb:90:
                    14:19:8a:5d:ca:f2:3f:46:aa:89:9a:aa:ac:79:c2:
                    c8:87:db:16:2f:f3:ee:a9:7c:cd:6e:85:e6:37:a2:
                    4a:3c:9e:bd:40:72:6f:ac:e6:d1:1d:4f:18:b1:67:
                    47:37:56:06:6b:86:d4:9a:63:e1:71:b6:69:ab:30:
                    12:19:fb:f3:6d:8b:11:ae:08:22:62:a5:97:03:82:
                    72:27:0d:f6:37:aa:cc:ae:63:7a:72:c4:2f:23:87:
                    3b:be:18:61:ee:65:4c:cf:85:0a:bf:1c:48:89:33:
                    0a:34:bd:08:de:ec:db:29:25:32:1c:2f:c6:39:1e:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:20:B7:A6:34:8B:96:60:98:DB:98:56:3F:69:9F:49:09:49:4E
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:af:ed:21:ae:cf:9f:98:7b:d1:4b:f3:6f:8d:7b:7f:64:
         46:ff:99:cf:e8:0f:fc:33:bd:a6:3a:ec:a0:ff:22:a7:1c:c3:
         63:52:33:37:5c:e7:3e:b3:d1:ab:e0:65:ec:02:d4:31:f3:48:
         fd:59:aa:23:90:2a:7f:ff:3f:5a:fa:b5:54:63:c0:b7:bd:b5:
         bd:97:5a:9d:78:04:5c:b8:9e:3e:26:f7:65:ac:9a:c3:d5:b5:
         f2:e1:fb:be:18:d9:e0:c5:45:26:74:35:cc:e0:0e:94:39:d8:
         89:96:b8:60:fb:56:6c:fb:5d:0b:fa:64:1f:58:4f:76:1e:83:
         70:64:5f:a2:94:18:12:1b:3a:63:5c:5c:f1:81:bb:aa:f2:9a:
         5d:9d:10:85:66:3d:79:60:fc:66:04:6e:73:41:7a:10:76:3b:
         87:bd:57:9f:de:eb:f1:95:e0:aa:2a:3b:ee:7f:bb:ad:15:50:
         f2:71:6f:6f:17:5f:2d:85:22:20:be:65:e2:00:f2:eb:65:63:
         8c:d9:87:d9:98:ce:33:4e:dc:f7:d3:97:ed:38:38:92:87:e6:
         30:f3:c7:f7:a8:b2:fc:a8:72:f6:42:de:1b:dc:26:64:f3:90:
         71:2f:f1:04:ce:b4:92:18:84:61:ea:b5:87:35:dc:88:36:4f:
         3f:9b:2a:88
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe4o6EJ88Qx6NOLhxS3XupoFcwn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz
NzI4Mjk4MDAeFw0yNTEyMDIyMTI2MDNaFw0yNTEyMDYwMjExMDNaMDMxMTAvBgNV
BAMTKEIzQkYyMEI3QTYzNDhCOTY2MDk4REI5ODU2M0Y2OTlGNDkwOTQ5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfghzw4Xen/h/K2t6aW5Bcca5
yCn91yFHBptq9sGyJNGEQ1lLr1ciuGq/MDdbuE8n6mwCA7bVprJEMQIP6RrP2uKd
xzaeYOPiMBB16y3yEjzjlXwxbLQA1VUARf3OsFRTNEK25QNTvv114lDaJYzKk0Dw
XdiSdjaAXzzYY2tmX8ETk+fLkBQZil3K8j9Gqomaqqx5wsiH2xYv8+6pfM1uheY3
oko8nr1Acm+s5tEdTxixZ0c3VgZrhtSaY+FxtmmrMBIZ+/NtixGuCCJipZcDgnIn
DfY3qsyuY3pyxC8jhzu+GGHuZUzPhQq/HEiJMwo0vQje7NspJTIcL8Y5HlArAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUs78gt6Y0i5ZgmNuYVj9pn0kJSU4wHwYDVR0j
BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF
RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4
Mjk4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E2NjVjMzItNmRhZi00NzJiLWJj
ZTYtMzE3ZDVkNmM3ODllLzAvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRG
M0UzNzI4Mjk4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADy+r+0hrs+fmHvRS/NvjXt/ZEb/mc/oD/wz
vaY67KD/Iqccw2NSMzdc5z6z0avgZewC1DHzSP1ZqiOQKn//P1r6tVRjwLe9tb2X
Wp14BFy4nj4m92WsmsPVtfLh+74Y2eDFRSZ0NczgDpQ52ImWuGD7Vmz7XQv6ZB9Y
T3Yeg3BkX6KUGBIbOmNcXPGBu6ryml2dEIVmPXlg/GYEbnNBehB2O4e9V5/e6/GV
4KoqO+5/u60VUPJxb28XXy2FIiC+ZeIA8utlY4zZh9mYzjNO3PfTl+04OJKH5jDz
x/eosvyocvZC3hvcJmTzkHEv8QTOtJIYhGHqtYc13Ig2Tz+bKog=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:27 2025 by rpki-client