This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
File:                     07D6388316655597AEA703AEBFDD2869F80A8984.mft (raw, json)
Hash identifier:          QgAwRJOo2twdcyfjeJO2UhQYyoEkM9f1m8uJ2144PRA=
Subject key identifier:   1F:B3:C1:C4:65:4E:74:C7:E1:B4:3D:60:EF:42:3E:32:60:7B:7D:5D
Authority key identifier: 07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
Certificate issuer:       /CN=07D6388316655597AEA703AEBFDD2869F80A8984
Certificate serial:       01882B6E89237BE31D6521CE4801524267D19906
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
Manifest number:          0314
Signing time:             Mon 01 Dec 2025 15:32:00 +0000
Manifest this update:     Mon 01 Dec 2025 15:27:00 +0000
Manifest next update:     Thu 04 Dec 2025 16:26:00 +0000
Files and hashes:         1: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: Dk+kadZF8jy8Jr2gvM5PjhVeLC3W+zlB4SeDi9Hh4BA=)
                          2: 07D6388316655597AEA703AEBFDD2869F80A8984.crl (hash: Speq8KTHftUGC78ZS2GP9OZRGFzdhNWMIkKTCFVYHKM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl
                          rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2b:6e:89:23:7b:e3:1d:65:21:ce:48:01:52:42:67:d1:99:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07D6388316655597AEA703AEBFDD2869F80A8984
        Validity
            Not Before: Dec  1 15:27:00 2025 GMT
            Not After : Dec  4 16:26:00 2025 GMT
        Subject: CN=1FB3C1C4654E74C7E1B43D60EF423E32607B7D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:30:a6:f1:26:30:72:30:5a:be:c5:9a:62:
                    94:50:d7:14:64:2d:0c:50:a1:f4:27:fb:de:75:5c:
                    96:64:06:24:92:8a:1e:11:95:f1:0e:05:3c:bd:b3:
                    f7:ef:6a:71:b0:91:ba:ca:95:4e:7f:23:21:9b:40:
                    de:f1:84:41:c6:31:98:fe:7d:52:af:46:48:e1:b9:
                    5f:ea:3f:8c:5c:22:36:ea:3e:c7:79:55:6d:f9:dd:
                    4e:2a:61:8a:dd:b6:d7:13:85:2d:ac:c3:25:52:8f:
                    0b:84:80:ad:1d:e6:66:95:fb:25:e2:dd:c6:0a:fc:
                    ac:24:cd:f0:b9:9f:78:f1:c4:2e:fa:b1:4e:cd:72:
                    1f:0d:05:1d:8d:24:62:e6:20:d1:02:f3:a1:26:24:
                    40:48:e9:23:e3:c7:34:4e:41:6b:1b:3d:d8:cd:c2:
                    36:de:c8:46:79:34:59:77:37:08:b8:ab:d5:c1:5f:
                    3f:27:69:44:19:c5:5f:30:d7:bc:7c:a4:f1:dd:5a:
                    fa:72:e3:6c:e7:ce:36:54:19:93:0f:99:1b:4e:b9:
                    d1:df:10:96:91:1a:0e:8c:f8:b5:b5:10:0c:75:b6:
                    cc:3b:5a:ec:b3:bc:cf:f0:7e:b8:f3:12:cc:98:f0:
                    5a:1a:9b:7f:6c:58:f2:c9:7f:92:98:59:4c:d1:d6:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B3:C1:C4:65:4E:74:C7:E1:B4:3D:60:EF:42:3E:32:60:7B:7D:5D
            X509v3 Authority Key Identifier:
                keyid:07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:c1:ca:73:cd:da:d5:48:55:1f:a9:0b:bb:b3:3c:c0:14:
         6f:11:91:5d:bb:89:46:da:97:de:86:f5:50:93:e6:7f:90:d6:
         4c:4b:7d:d3:75:c2:12:a2:ab:aa:cb:ee:22:47:5c:bd:98:f1:
         9d:77:e4:83:bb:3c:5f:5f:93:5d:2b:0d:3e:8a:08:4f:4d:19:
         ca:5c:38:b8:e0:e4:4f:04:78:72:fb:6a:b0:cb:d6:49:0a:90:
         10:69:36:e5:2b:9a:b0:11:82:a1:0c:7f:83:7c:e4:09:ec:4a:
         c9:13:4f:eb:04:fb:3a:b3:79:ed:97:ff:f6:5c:1f:01:cd:1a:
         ba:ad:2c:5d:3b:56:a3:b6:e9:f3:03:06:a1:f4:3f:9d:7f:69:
         55:4e:cc:54:c2:b0:4c:8e:ce:0e:6c:67:80:0d:fc:66:95:19:
         95:21:bc:c6:89:76:15:a2:a9:54:58:ff:c3:37:97:db:ec:8b:
         de:61:e8:86:53:b2:b3:7d:79:09:df:eb:1d:72:d4:79:cc:ee:
         7a:d9:a4:49:a9:5b:fa:0d:02:88:8d:1d:62:ed:15:93:ff:17:
         3f:b2:53:4a:2e:93:a7:12:d6:ba:78:c7:d0:69:3b:99:61:ee:
         f6:33:f8:54:f5:b9:e9:27:a8:e5:88:78:15:d2:17:72:ae:ca:
         b4:7a:4b:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAYgrbokje+MdZSHOSAFSQmfRmQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4NjlG
ODBBODk4NDAeFw0yNTEyMDExNTI3MDBaFw0yNTEyMDQxNjI2MDBaMDMxMTAvBgNV
BAMTKDFGQjNDMUM0NjU0RTc0QzdFMUI0M0Q2MEVGNDIzRTMyNjA3QjdENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5zCm8SYwcjBavsWaYpRQ1xRk
LQxQofQn+951XJZkBiSSih4RlfEOBTy9s/fvanGwkbrKlU5/IyGbQN7xhEHGMZj+
fVKvRkjhuV/qP4xcIjbqPsd5VW353U4qYYrdttcThS2swyVSjwuEgK0d5maV+yXi
3cYK/KwkzfC5n3jxxC76sU7Nch8NBR2NJGLmINEC86EmJEBI6SPjxzROQWsbPdjN
wjbeyEZ5NFl3Nwi4q9XBXz8naUQZxV8w17x8pPHdWvpy42znzjZUGZMPmRtOudHf
EJaRGg6M+LW1EAx1tsw7WuyzvM/wfrjzEsyY8Foam39sWPLJf5KYWUzR1ocbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUH7PBxGVOdMfhtD1g70I+MmB7fV0wHwYDVR0j
BBgwFoAUB9Y4gxZlVZeupwOuv90oafgKiYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWJhNDdjZS0zOTkyLTQzMWMtYWJmMS02ODFhNGNjOGVjNDgvMC8wN0Q2Mzg4MzE2
NjU1NTk3QUVBNzAzQUVCRkREMjg2OUY4MEE4OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4NjlGODBB
ODk4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTViYTQ3Y2UtMzk5Mi00MzFjLWFi
ZjEtNjgxYTRjYzhlYzQ4LzAvMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4
NjlGODBBODk4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE5MwcpzzdrVSFUfqQu7szzAFG8RkV27iUba
l96G9VCT5n+Q1kxLfdN1whKiq6rL7iJHXL2Y8Z135IO7PF9fk10rDT6KCE9NGcpc
OLjg5E8EeHL7arDL1kkKkBBpNuUrmrARgqEMf4N85AnsSskTT+sE+zqzee2X//Zc
HwHNGrqtLF07VqO26fMDBqH0P51/aVVOzFTCsEyOzg5sZ4AN/GaVGZUhvMaJdhWi
qVRY/8M3l9vsi95h6IZTsrN9eQnf6x1y1HnM7nrZpEmpW/oNAoiNHWLtFZP/Fz+y
U0ouk6cS1rp4x9BpO5lh7vYz+FT1ueknqOWIeBXSF3KuyrR6S5Y=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:25 2025 by rpki-client