This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft
File:                     7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft (raw, json)
Hash identifier:          /bgkI+36cnViZOjGrJGG1QMOlmHovu+X0wCflXIpffU=
Subject key identifier:   49:71:83:F4:55:56:93:99:51:65:A8:4D:FA:72:53:9D:92:E1:CE:44
Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF
Certificate issuer:       /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
Certificate serial:       53A0C1D7CEE2BB50579579DCBC233E1ADD3EAD72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft
Manifest number:          0557
Signing time:             Wed 17 Dec 2025 09:21:59 +0000
Manifest this update:     Wed 17 Dec 2025 09:16:59 +0000
Manifest next update:     Sat 20 Dec 2025 10:41:59 +0000
Files and hashes:         1: 3135382e3134302e3139302e302f32332d3233203d3e203633383539.roa (hash: Jfww3RbHa7geS4Gb4ZZD8sy4SrKKqpxZdBTdTpaKKZA=)
                          2: 3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa (hash: XYbF1qXsShVp/Qs3YufMoOdacoSPbOI2JOPKDJHPIgc=)
                          3: 36362e39362e3232372e302f32342d3234203d3e203633383539.roa (hash: sq/JwmzghDlaGEQ8gF2PO91MQsw0bqOftQmD74dmw6g=)
                          4: 3135382e3134302e3137332e302f32342d3234203d3e203633383539.roa (hash: Ocinq9ipAejid/a/SFfERbAEju3SRdDkDqatnIFUO3g=)
                          5: 36362e39362e3232392e302f32342d3234203d3e203633383539.roa (hash: 5Fmp+O/29hY1fd9Dobid/mZcrWdv6iTcbwdBYenAQLo=)
                          6: 3135382e3134302e3138302e302f32342d3234203d3e203633383539.roa (hash: 6L1VPHwYhQ4ZsO+TdZ0YfdGkvUpmejL5Uu1qBxEmo8Y=)
                          7: 36362e39362e3232352e302f32342d3234203d3e203633383539.roa (hash: c0NHk0zR4y7wrSNCAlXTeQkXoHb3mwr+8y6dR4m+eUE=)
                          8: 3135382e3134302e3136302e302f32302d3230203d3e203633383539.roa (hash: m/egxougGYoSKSnQwcP4flLf33HxxxjFA3wYWoiIz10=)
                          9: 3135382e3134302e3138322e302f32342d3234203d3e203633383539.roa (hash: BPevGUicl1aIMbpvSxgAugXstAdh2DnF5KMT9asGLKc=)
                          10: 3135382e3134302e3136372e302f32342d3234203d3e203633383539.roa (hash: nzte34eMkvGI5OWfd2QmHW5GND/3VKTFBpmC6ns891s=)
                          11: 36362e39362e3232362e302f32342d3234203d3e203633383539.roa (hash: piFk60+sGzLUHRWZ5WGtbnCgCbgszu5+ra3wLKr/bHg=)
                          12: 3135382e3134302e3136392e302f32342d3234203d3e203633383539.roa (hash: okNqXav3NBfIRitMyNc4WKM5lS4LuzVOY0XVCyJdW3A=)
                          13: 3135382e3134302e3137312e302f32342d3234203d3e203633383539.roa (hash: oaBY2ybMv8nfzTm1+Hk1G4MLfQyWI5q/jr3LwGMcq7Y=)
                          14: 36362e39362e3233382e302f32342d3234203d3e203633383539.roa (hash: yrxWw1a9ETdizxOG3bC4Debl5vKqzTaGD84KLs5Mo18=)
                          15: 3135382e3134302e3137362e302f32312d3231203d3e203633383539.roa (hash: 9kcnPx/ZSmrEGG26gLxLOCQqjBWy2zRGdc2qERhjnd0=)
                          16: 36362e39362e3233332e302f32342d3234203d3e203633383539.roa (hash: oNrDwW+w/m2HzRVL8vLZQP6oYwE/oK/9NxpivpWOvAU=)
                          17: 3135382e3134302e3137372e302f32342d3234203d3e203633383539.roa (hash: pTTjwrV1QIu6SOKwmUvyOhjSk2WrEsFFcswXdNBhjlk=)
                          18: 36362e39362e3233342e302f32342d3234203d3e203633383539.roa (hash: dcgPtsVJCz3vRNUq6LbtpUX6wUFpepDlorRDH+lyQnw=)
                          19: 7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl (hash: 2aAKLAUwBpJEgLYCFvAlJDCYUP6epPqyt6rrPeH4DEg=)
                          20: 3135382e3134302e3137342e302f32342d3234203d3e203633383539.roa (hash: sQcQIrUp+/yRTmWVmij5InbR745h6ZZ6mbxiDgzsdHs=)
                          21: 3135382e3134302e3137362e302f32342d3234203d3e203633383539.roa (hash: 4UOzwPCCuhunnR2QcaEH9I+Tci8JPBiM+UmeE3Ft+2k=)
                          22: 36362e39362e3232342e302f32302d3230203d3e203633383539.roa (hash: z8viOZfisnTgEzwkz2y57FajeItIJhI/9/v+DV3ElYQ=)
                          23: 3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa (hash: c/KBnjTEAmdeD37emP7J3pLgVzmGCg4fGJLWQPBAtxM=)
                          24: 36362e39362e3233352e302f32342d3234203d3e203633383539.roa (hash: Q4wsbp/KvMahYmQ1BbFKmr37FlsE4A5XkSDc3911a+M=)
                          25: 3135382e3134302e3138342e302f32342d3234203d3e203633383539.roa (hash: OPUKe+pYbzDgKIXD5ebp4rb6X8z2aHhQsSF8hk0i/sU=)
                          26: 3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa (hash: 1gCaPTSU4uMwxSA/uOkRuR3dSYpFxu4jxXo8P8Xr4VU=)
                          27: 36362e39362e3232342e302f32342d3234203d3e203633383539.roa (hash: UCa9Ngub5MijWVDlwWUyWZqHhooQDXylUNqgE4xnPfg=)
                          28: 3135382e3134302e3137322e302f32342d3234203d3e203633383539.roa (hash: 12MVtcg0osCIzu7HUQmcuNjU9YTN4ZeCpSy+EAt2AGg=)
                          29: 3135382e3134302e3138312e302f32342d3234203d3e203633383539.roa (hash: lpkFF4YVS0NUZ+A/yyhCVFpGscEs9wNKSBGb1vrCcnE=)
                          30: 3135382e3134302e3138332e302f32342d3234203d3e203633383539.roa (hash: raH4n/zUgYBeUzo4jlpiliRcH2HnYLfEood8Kr9EgQQ=)
                          31: 3135382e3134302e3139312e302f32342d3234203d3e203633383539.roa (hash: W1Aw/14l5pHBhiIa2w81POb32xWiuLEisZ/sQcORxUM=)
                          32: 3135382e3134302e3137302e302f32342d3234203d3e203633383539.roa (hash: k6+bQ+0qJihdjFmhRzGxe+4JIBbZh/UiXzxnsGps0cM=)
                          33: 3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa (hash: OqFaFahRbBI+Mjvd9AWnCqh0ODvegxrErsiZfhzwKT4=)
                          34: 36362e39362e3233322e302f32342d3234203d3e203633383539.roa (hash: XsrymNDLhamO1ZAZ7eCRb3850l71rkto/iqKn7AXXYk=)
                          35: 3135382e3134302e3138362e302f32342d3234203d3e203633383539.roa (hash: EG3rNdqbBpFMk3Ce4I72H/WYr2fwkHYFNzew7Fd7sUA=)
                          36: 3135382e3134302e3136332e302f32342d3234203d3e203633383539.roa (hash: YedS1YSBpGKS/FxE4rWQlRXoRSMsnkf1tePxbKDyk3g=)
                          37: 3135382e3134302e3136382e302f32342d3234203d3e203633383539.roa (hash: mtM87iVP6m7lmnfbGzZ4lHJT1LbThGQ/wU2Zs1m/bZg=)
                          38: 3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa (hash: rhMO2MqPh3cniLXYWkvzSHWIOXssanP6t0N54AP5VLU=)
                          39: 36362e39362e3233302e302f32342d3234203d3e203633383539.roa (hash: 6IzOiJcETTvUcwEywrFsbmFnebMOLFSar0/GxuBsfGQ=)
                          40: 36362e39362e3233362e302f32342d3234203d3e203633383539.roa (hash: Tu2YLZds2fq5k6P0XWHMwM2vK13+AlPfA3za3CHaJAA=)
                          41: 3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa (hash: xwuQA6wMGZRUxNpfJWYR3HAZEL4fIbv+QHUNr+ees+Q=)
                          42: 3135382e3134302e3136312e302f32342d3234203d3e203633383539.roa (hash: 3Uw/rSl4bh2agh9HaM8+kHb0YWFMWcTlJD24YRMT5OI=)
                          43: 36362e39362e3233392e302f32342d3234203d3e203633383539.roa (hash: MXuffFLREl0AnKg3egKtJAWj7FEtIsjNHkzddXaftbo=)
                          44: 36362e39362e3232382e302f32342d3234203d3e203633383539.roa (hash: RgXlFbP8md9HIttVlGvynl8kL4aElSWbkhqYyoAVJ98=)
                          45: 36362e39362e3233372e302f32342d3234203d3e203633383539.roa (hash: 4kP9QfHyYA+4OzeOqq639x8lUwsExAOt2TIVWOFXLe4=)
                          46: 3135382e3134302e3136362e302f32342d3234203d3e203633383539.roa (hash: wKr+MmZDCaPTtb36l0iiGlftJPH1DYlW3fkHnfy/pnY=)
                          47: 3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa (hash: cf/fTFw9S140tFJspWZGF8ccTxSOEBwN/v9Xi+qLWYQ=)
                          48: 3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa (hash: f25oJq4Qxw4DkfsL02CwlrR3sXxxJT8C5cal6l3FJqI=)
                          49: 3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa (hash: X6zuWfTDNO+F78YG5Tc2+pmv7Vfl0FtMwLrsRSLkNf8=)
                          50: 3135382e3134302e3138352e302f32342d3234203d3e203633383539.roa (hash: ser80aPm+NsghzlSuOb+Oxzvpw+nElnPDJedPg5Iz0c=)
                          51: 36362e39362e3233312e302f32342d3234203d3e203633383539.roa (hash: N+ON+KkRxINimNgcr2X81SZ+AqyBwddVjwHElmdPjrw=)
                          52: 3135382e3134302e3139302e302f32342d3234203d3e203633383539.roa (hash: ZgA+eeM2HEprBKWMu6GX1kKyJ2ajYn0QBesdH0F5+GY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 10:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a0:c1:d7:ce:e2:bb:50:57:95:79:dc:bc:23:3e:1a:dd:3e:ad:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF
        Validity
            Not Before: Dec 17 09:16:59 2025 GMT
            Not After : Dec 20 10:41:59 2025 GMT
        Subject: CN=497183F4555693995165A84DFA72539D92E1CE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:bf:e9:71:7f:4c:ca:85:df:37:82:ef:76:
                    b4:58:28:bb:1a:57:ae:65:1d:73:c7:33:64:dd:14:
                    16:2c:f7:f6:bd:e9:7f:8e:1c:e1:09:f1:9f:7d:f6:
                    fd:64:0e:0c:fb:d8:8b:4b:d6:f5:e2:7d:b2:5f:f1:
                    cd:a3:81:e1:08:79:d3:04:5e:6d:bb:79:e3:fe:75:
                    39:f2:3c:0f:4f:ad:97:50:17:1a:8a:13:54:7b:60:
                    de:1e:6e:81:bc:c0:7c:cc:67:4b:89:ea:3c:f3:64:
                    0f:f9:87:f1:93:91:2b:f3:b5:8e:ed:b2:5a:af:8a:
                    93:33:b4:7c:8e:69:3a:0f:41:55:16:f9:87:6c:05:
                    a8:2e:09:2c:41:43:bb:57:81:22:fb:f0:7d:03:67:
                    d5:3b:e8:7b:24:ef:2c:06:b9:d8:2e:0e:47:ae:c6:
                    ce:0b:25:7a:09:e6:0f:f7:ef:c5:94:83:09:d7:a3:
                    91:5b:e9:04:07:66:7f:d2:61:cd:38:70:94:3c:30:
                    9b:ae:21:90:51:16:08:3e:18:bf:88:cb:1e:1a:42:
                    3d:0b:2c:ea:69:f3:86:c4:04:fc:47:de:e5:6d:75:
                    1e:a0:02:dc:19:9d:a1:bd:c8:b0:6c:64:2c:1e:b2:
                    5f:b6:ba:1e:a0:9b:13:53:8f:e7:dd:de:69:f8:7c:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:71:83:F4:55:56:93:99:51:65:A8:4D:FA:72:53:9D:92:E1:CE:44
            X509v3 Authority Key Identifier:
                keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b0:6e:93:db:6b:80:f7:e9:7f:7b:ab:b0:38:47:03:9b:43:
         1c:f0:be:56:8f:0a:3c:64:db:09:15:db:b1:c4:47:3b:fa:b3:
         ae:37:92:15:b0:c6:81:7b:de:78:45:65:f3:98:03:90:3d:1c:
         36:37:ba:e3:65:ca:dc:16:28:4f:e7:7a:b8:03:1b:23:ea:13:
         32:ab:a8:da:56:40:08:77:4e:5f:b8:69:1d:ba:82:7a:77:37:
         b2:65:ba:81:ca:56:d6:b1:8e:2e:77:91:8a:d2:0c:ff:98:bf:
         1a:60:b5:17:9e:7d:7d:06:f6:92:a1:43:d4:22:69:9e:d2:04:
         40:44:92:34:e1:84:d5:52:06:50:0d:9a:08:9c:e0:3e:b4:ea:
         bf:96:a1:55:01:d8:34:5d:d0:93:62:3d:61:d8:a0:6e:ff:b6:
         5d:8e:21:a4:33:c9:64:93:8c:57:2e:13:96:06:f7:d9:f9:e4:
         e3:af:b5:3c:4e:72:d4:1c:66:ac:55:88:ef:63:52:7b:78:69:
         46:60:8c:ca:9f:cb:62:ef:71:6b:80:4e:b6:53:cd:51:5b:f4:
         62:47:df:94:03:03:68:b1:89:66:b4:ac:20:d9:e9:34:9e:ce:
         5c:e5:c6:57:fe:d2:4a:b3:aa:44:70:96:d8:ae:c1:d4:eb:c9:
         6c:74:2a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:14:12 2025 by rpki-client