This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File:                     26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier:          3rFqk8hdSdfPtq+lFjjVIuh5z3dxel+2EtpyLHZAUNs=
Subject key identifier:   18:40:8F:30:20:EB:51:E2:99:8A:23:F1:F1:7E:50:60:48:43:D8:18
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       106632773163A9304F2DF57CE49E430DACA0361B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number:          052B
Signing time:             Wed 03 Dec 2025 09:10:01 +0000
Manifest this update:     Wed 03 Dec 2025 09:05:01 +0000
Manifest next update:     Sat 06 Dec 2025 10:20:01 +0000
Files and hashes:         1: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=)
                          2: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=)
                          3: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=)
                          4: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: B7OblcpT6zraGHX7c6Sa8ZAsb056V45KqZV9nWrLJpc=)
                          5: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=)
                          6: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=)
                          7: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=)
                          8: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=)
                          9: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=)
                          10: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 10:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:66:32:77:31:63:a9:30:4f:2d:f5:7c:e4:9e:43:0d:ac:a0:36:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Dec  3 09:05:01 2025 GMT
            Not After : Dec  6 10:20:01 2025 GMT
        Subject: CN=18408F3020EB51E2998A23F1F17E50604843D818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4b:89:cd:e8:8b:6f:f3:c5:dd:c3:69:41:0d:
                    30:1c:06:66:22:55:05:36:99:4d:6e:51:05:99:4c:
                    5d:69:3e:32:f9:99:1d:84:a4:93:0d:76:53:e2:9b:
                    e6:36:80:81:3a:f9:2e:e7:67:09:95:4b:84:bb:6a:
                    1b:5c:38:73:d1:9d:6a:b2:1b:4f:8f:73:7f:9c:e1:
                    fe:a9:6d:c8:c4:4f:6f:b7:55:01:a8:c2:39:5b:8f:
                    0f:e1:67:f4:0b:a3:26:60:ff:d5:b0:57:71:58:d5:
                    9f:87:ed:a6:39:2a:87:52:ee:c1:65:2a:c8:9f:d7:
                    32:2f:c1:7e:77:e8:dd:d6:b4:63:2f:de:96:d1:65:
                    95:24:af:d7:4f:ea:55:19:0c:78:f3:8a:67:e4:1b:
                    63:6e:db:e2:93:e8:55:b1:c6:c0:f0:17:81:00:4d:
                    be:e7:ca:cc:eb:a8:ce:a8:20:4f:18:ac:c6:3c:4f:
                    d2:cb:c0:44:ba:e3:01:7f:6f:05:d3:73:78:8f:5b:
                    18:81:47:b5:5e:a9:c7:77:f6:7d:04:9e:fd:12:c8:
                    29:75:94:b1:43:ed:b9:69:8e:fc:f4:e3:94:74:89:
                    1e:14:8a:2e:a9:ba:7c:a1:f5:c3:00:23:40:77:bb:
                    86:a7:42:54:43:55:b6:22:c6:90:55:fa:19:0c:43:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:40:8F:30:20:EB:51:E2:99:8A:23:F1:F1:7E:50:60:48:43:D8:18
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:77:c8:0c:43:84:bb:4c:d3:8c:53:01:ee:3e:06:7d:7f:
         14:0d:93:e0:12:51:07:ad:df:af:27:29:2c:69:79:e3:29:51:
         a0:fd:cd:f1:01:7a:64:3a:6d:9f:e4:29:ac:4f:98:3d:80:56:
         33:88:50:68:7f:9f:ad:53:7e:05:e8:7f:83:b6:f2:7c:d8:ff:
         5e:ee:9e:e3:45:3f:d1:b4:47:98:55:1f:eb:63:16:5f:56:93:
         51:84:1e:3f:18:8c:78:92:d8:92:2b:30:13:ec:30:23:23:a8:
         21:6c:3d:08:83:e1:ed:13:28:72:3a:a8:50:46:90:fd:d8:f7:
         33:30:20:f6:e5:af:5b:a9:11:51:3e:18:fc:32:bb:06:de:a0:
         ed:6e:45:4a:0d:cb:c1:0d:91:9d:96:40:b5:df:08:0a:3e:36:
         7d:7e:03:cf:33:dd:b9:84:08:d2:7e:48:97:19:b2:a8:53:92:
         a6:fa:5e:a1:35:c7:1f:b8:0d:af:fe:e6:5a:24:2b:11:38:6c:
         38:48:fe:cc:b2:5c:5d:f7:cc:9a:4c:ce:b1:98:16:bb:72:14:
         e2:4c:9a:b2:c2:f0:03:22:9e:a4:f0:d1:b3:9a:4a:05:75:c0:
         1d:a2:f7:6f:3b:e2:56:e7:72:29:b5:9a:5c:e3:0a:6d:3b:6e:
         9a:d7:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:34 2025 by rpki-client