This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
File:                     9A52B6405ED406A7B17C4478D516DF3E37282980.mft (raw, json)
Hash identifier:          7XHNzS9NroIENvSyLwCIknXis1d8ifREiT2J9qYk2Io=
Subject key identifier:   3F:E9:23:18:4D:E6:95:DF:26:7B:94:05:9F:42:C9:BB:28:A6:FD:F6
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       0287FC1426E2D2538BCDBA44560EE94806485FA8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
Manifest number:          02D2
Signing time:             Tue 16 Dec 2025 18:21:02 +0000
Manifest this update:     Tue 16 Dec 2025 18:16:02 +0000
Manifest next update:     Sat 20 Dec 2025 01:20:02 +0000
Files and hashes:         1: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: eELtUE44s8kWXW53efaOQB87hQvYKnu+4QWMOO/ldiE=)
                          2: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MQTEtT0TR1f+0V0bndDRXrcOI9gxT90XmU11iLCfrjk=)
                          3: 3130332e3137372e382e302f32332d3233203d3e20313437313337.roa (hash: uHzq3FI/OUse3guEAZ2X3n26c+18IEz5AqEGOSkyu60=)
                          4: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: YdSsGr4BjFrFET1Pgec0CyVOY3w0mCvZYunx96T/HRk=)
                          5: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: xUscykaPjchZwH98C+3nSOKZLZaGqcecZKinfhX00i4=)
                          6: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: uA6xDa7IvgkDp22R6G6BTJTUnQ6z5ZPc+c5h8RXJlMc=)
                          7: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: z2k28a+6ZI3VAF075Ex5TSmy7XYBAGjTmBdcFap9YJg=)
                          8: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: kEXHj9pv5MWefZu6lpGXP15sPBFvi6JY6eKJO5xEqB4=)
                          9: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: OgrUIPRU4hlKsLPwGuGpe/ivo5VWBIS7QYpm7Sxho2I=)
                          10: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: ZlLb/8ABoTMshaPAOuB5oc8hOwpCTBM9+ckE++m8QHc=)
                          11: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: iK23Ih7KgC4OjnO9UHJglzhRasd3vRLpYeuOhNGE5hk=)
                          12: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: 9D15ranZ4YwNSLaXFD5FAq+pNZxj9EjBiBFXk+HdqAc=)
                          13: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: pifjJjTcE6PeDdv2QBGHsCyyOypnfnj2TzyiuJpYoi0=)
                          14: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA=)
                          15: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: +gPgp8QYiU/daLpgrvM/5BELV5q0+mYrJuLKheezSV0=)
                          16: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: EvUm4cJBa4C1BImp9thQZ8BX3+SY4YqvKOUkSPQljL0=)
                          17: 9A52B6405ED406A7B17C4478D516DF3E37282980.crl (hash: TeFzVQkJYdu9InGKOKv2kSNZX0efI3S/1q54cUVB9KM=)
                          18: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: BASa57B0aeCvQjUkpH58uhcpVnA7zhpchwSCS5nsYmM=)
                          19: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: KAxv+bcTcqGpScOTMbFMveWIpWOPxpJEwT7ajRyz6mM=)
                          20: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg=)
                          21: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: bH0QRBT1yTn/wCvKxau4plk6nMYBKS98USNjhSr5VTI=)
                          22: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: LHnVdcZ5/YfYWNz9EwzLlVaYYhGPyvyomANm7mqWzO0=)
                          23: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: 9MFeAvNjxRA9vbUf2UgXcthdxQ5XENOLt4Ao9GHoHp4=)
                          24: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: Y3XYf27QnurhdV1CW67C5UxWbak1ZDu532ZjKsBxVtw=)
                          25: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: UbfbQp2UJcWdUXOg3yUdX64d8tTRpxRLmsAiq/gQPtk=)
                          26: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: IEucjhXv8bAa5eR/7We292E0AjQSxt/nxsHzEY0hsao=)
                          27: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: s3Xjjbohn1CufgneBaEZY/bwLMOk5+UIxmZaor+mssg=)
                          28: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: kbuURMx081wdwMkjcRHHCXRBMB09bh+YCCGTym9STe8=)
                          29: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: h0oH/3iLu1unRW/jZRg6pYTlxoghvh0aIr1dQ6X1C3o=)
                          30: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: r39b6mOH1IwysZ4h0sWe8of8Eqz81JxpSEnLBmKsOQg=)
                          31: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: INC+aAdBEWi58gMud2WYkmc5AYB/cZKH3D/b7vcKvsA=)
                          32: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: ShZcfvOuL7hhFcin6d6C9YZIwo2zOBT3B5csjg2tV64=)
                          33: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: 23/idCqUx8EPa7QGFdtUC3If9YW7mCjrP46bOrSKS5Q=)
                          34: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: kS9+afwSiaTp9TelPiQ0ILiNOqNp/k8Ib68mizaidfE=)
                          35: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: a4kar+hZC31dN5bmEcyjGudCJwDbez0xQdLphlBrsp8=)
                          36: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: 5FcZQWvOh6pLwsoaD4YTIG17OJilGjN+93omVyyFOZM=)
                          37: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: UeQqi6ZVFgPrGYMster+xne64h585Ow3H0IaK3UC2WM=)
                          38: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: WrWbmsZZrPD4tCYkM+PlD88T9/eqy1PkC98c/wYNVkI=)
                          39: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: 0k545OOwyj9NvbehxX+QV0g5xQmQQnbTNP95f97h71M=)
                          40: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 6i3UMACzodtWNujjB7HjZ1wIY9Wkv8kYqdabcGyF3UA=)
                          41: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: uhlzYip1Vr9wq1FIVgoBLWnymsgGUspFrO9lWq8rb2g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 01:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:87:fc:14:26:e2:d2:53:8b:cd:ba:44:56:0e:e9:48:06:48:5f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Dec 16 18:16:02 2025 GMT
            Not After : Dec 20 01:20:02 2025 GMT
        Subject: CN=3FE923184DE695DF267B94059F42C9BB28A6FDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:5c:46:a8:97:a5:c7:ca:55:a2:ce:0c:c9:
                    6a:d5:fd:75:87:18:bb:5a:6a:3b:d4:bd:5b:21:cb:
                    a6:b2:71:d4:21:db:4a:77:39:0e:ad:52:79:8d:bd:
                    34:2e:6f:3e:ae:37:b9:8d:8b:1d:d8:3e:5f:7f:bb:
                    a2:6b:2c:3d:50:78:4f:c5:26:65:ba:62:27:ca:65:
                    83:93:29:b5:c4:2e:84:bc:51:ae:d0:62:90:17:05:
                    3c:39:ce:ad:14:ba:9d:35:b7:bb:35:3b:3c:b4:e7:
                    a3:01:20:51:d2:53:53:ff:b2:01:72:8d:91:dc:f9:
                    d0:96:f5:7b:64:51:03:4e:7e:d7:85:ad:ab:09:39:
                    ef:ba:37:62:07:fa:76:87:62:5a:bd:11:4f:d9:6d:
                    db:90:d6:7c:2c:33:f9:d8:34:1c:e9:11:6e:df:a0:
                    5f:38:44:be:67:26:35:66:3a:ac:fb:19:9a:95:0c:
                    b3:9f:75:0f:b2:ab:83:a8:47:be:fb:fb:0e:b9:4a:
                    26:28:9c:23:13:97:9c:8d:01:56:5b:3e:2b:b0:32:
                    11:ae:12:b3:f4:20:3b:7c:d7:78:62:1b:53:01:75:
                    77:b6:f1:4f:d2:e8:59:82:3d:01:4c:99:4e:03:0b:
                    6f:0e:b6:86:a3:26:07:d6:ea:52:7c:e2:dc:6d:49:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E9:23:18:4D:E6:95:DF:26:7B:94:05:9F:42:C9:BB:28:A6:FD:F6
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:97:cd:a2:ca:7a:f3:b4:58:c8:0c:33:3a:ae:d6:b0:3c:50:
         51:e9:86:8e:6e:37:85:33:33:9b:13:7c:f3:d6:30:e7:5f:f7:
         1f:5d:1c:ba:cc:45:80:ff:c8:e9:17:7a:02:28:1e:60:30:e7:
         cf:43:99:2e:57:24:d5:8e:d7:4b:4d:69:67:e8:7d:a8:4b:0a:
         b5:5c:ab:7f:d1:65:31:c4:12:e8:8b:c8:ee:88:0a:6c:21:b2:
         93:83:57:43:78:46:47:36:96:4c:48:fa:b6:7f:6a:3b:b1:de:
         5b:aa:51:8b:4a:90:37:d9:61:89:0e:df:53:90:99:6f:89:f9:
         29:a6:e6:37:5d:ff:50:db:cb:46:25:ed:e6:cf:6b:16:57:b0:
         57:6b:07:3d:b5:c8:a0:82:48:0d:36:69:11:7c:56:29:b1:b8:
         5b:67:36:7a:ba:0e:48:17:3c:f4:34:39:d6:27:fb:9c:3d:c6:
         20:f3:9b:30:35:43:ca:7d:78:84:64:d0:b7:30:65:49:59:81:
         cf:27:c2:59:62:72:b4:97:e4:9e:1d:c9:e9:8d:49:72:fd:cf:
         a0:33:e6:72:21:94:42:24:30:f2:05:2b:b7:98:c9:6a:16:5e:
         f9:fa:6c:d2:00:05:36:fb:ab:70:ac:5b:1a:d7:bf:c0:ff:83:
         45:2a:7f:1c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAof8FCbi0lOLzbpEVg7pSAZIX6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz
NzI4Mjk4MDAeFw0yNTEyMTYxODE2MDJaFw0yNTEyMjAwMTIwMDJaMDMxMTAvBgNV
BAMTKDNGRTkyMzE4NERFNjk1REYyNjdCOTQwNTlGNDJDOUJCMjhBNkZERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEVxGqJelx8pVos4MyWrV/XWH
GLtaajvUvVshy6aycdQh20p3OQ6tUnmNvTQubz6uN7mNix3YPl9/u6JrLD1QeE/F
JmW6YifKZYOTKbXELoS8Ua7QYpAXBTw5zq0Uup01t7s1Ozy056MBIFHSU1P/sgFy
jZHc+dCW9XtkUQNOfteFrasJOe+6N2IH+naHYlq9EU/ZbduQ1nwsM/nYNBzpEW7f
oF84RL5nJjVmOqz7GZqVDLOfdQ+yq4OoR777+w65SiYonCMTl5yNAVZbPiuwMhGu
ErP0IDt813hiG1MBdXe28U/S6FmCPQFMmU4DC28OtoajJgfW6lJ84txtSbs9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUP+kjGE3mld8me5QFn0LJuyim/fYwHwYDVR0j
BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF
RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4
Mjk4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E2NjVjMzItNmRhZi00NzJiLWJj
ZTYtMzE3ZDVkNmM3ODllLzAvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRG
M0UzNzI4Mjk4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAOXzaLKevO0WMgMMzqu1rA8UFHpho5uN4Uz
M5sTfPPWMOdf9x9dHLrMRYD/yOkXegIoHmAw589DmS5XJNWO10tNaWfofahLCrVc
q3/RZTHEEuiLyO6ICmwhspODV0N4Rkc2lkxI+rZ/ajux3luqUYtKkDfZYYkO31OQ
mW+J+Smm5jdd/1Dby0Yl7ebPaxZXsFdrBz21yKCCSA02aRF8VimxuFtnNnq6DkgX
PPQ0OdYn+5w9xiDzmzA1Q8p9eIRk0LcwZUlZgc8nwllicrSX5J4dyemNSXL9z6Az
5nIhlEIkMPIFK7eYyWoWXvn6bNIABTb7q3CsWxrXv8D/g0Uqfxw=
-----END CERTIFICATE-----
Generated at Fri Dec 19 03:47:57 2025 by rpki-client