This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File:                     29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier:          71vD/ucaKkry+7VeJG3SOa6Ec+wvIEO1VFnc5eyf/54=
Subject key identifier:   3A:19:2F:48:A4:07:45:83:26:E7:94:FA:4A:34:15:8B:BB:93:BA:28
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer:       /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial:       5B18E5CB133C7F3A4770317777EAA64D239D6D20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number:          01F6
Signing time:             Tue 02 Dec 2025 16:20:58 +0000
Manifest this update:     Tue 02 Dec 2025 16:15:58 +0000
Manifest next update:     Fri 05 Dec 2025 18:53:58 +0000
Files and hashes:         1: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: Q2ddBXt12IhoCuSQmC7KIK2+zvod1GB7sWb1f+AWGvc=)
                          2: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=)
                          3: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=)
                          4: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=)
                          5: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=)
                          6: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=)
                          7: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=)
                          8: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=)
                          9: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=)
                          10: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=)
                          11: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=)
                          12: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=)
                          13: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=)
                          14: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=)
                          15: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=)
                          16: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=)
                          17: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=)
                          18: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
                          rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 18:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:18:e5:cb:13:3c:7f:3a:47:70:31:77:77:ea:a6:4d:23:9d:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
        Validity
            Not Before: Dec  2 16:15:58 2025 GMT
            Not After : Dec  5 18:53:58 2025 GMT
        Subject: CN=3A192F48A407458326E794FA4A34158BBB93BA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:ec:2f:dd:89:43:2d:ef:d7:9a:ec:76:8a:
                    6d:18:c4:b0:63:56:5f:b1:1f:e7:27:22:0c:08:c4:
                    9c:83:7c:90:de:c9:e8:3c:69:4d:24:66:c3:ff:2d:
                    1e:c5:d0:de:0f:a8:76:78:ae:92:2b:be:f9:7d:c8:
                    cb:1f:e6:0e:87:34:84:9d:31:d8:cd:61:b1:b3:74:
                    f4:a2:a2:f8:02:7e:c6:5d:8f:3c:c3:2d:76:ef:a5:
                    21:99:3a:43:0a:51:38:7c:26:6c:99:6e:87:fc:c6:
                    87:53:6c:f1:aa:69:93:bd:12:39:87:4e:de:f9:36:
                    38:ee:fd:f8:9a:80:15:75:59:3e:4f:a5:ad:bb:4c:
                    0b:3f:4b:2e:f1:7b:8d:93:75:67:18:57:c8:26:c6:
                    70:ec:33:58:0f:e7:2a:e5:2a:9d:f3:1d:c1:38:f6:
                    e1:cd:41:b8:df:c7:24:90:f5:91:b5:47:1a:03:5a:
                    27:b0:fc:87:02:3e:15:db:fc:6b:31:e3:33:6c:20:
                    df:68:58:14:c3:28:52:84:84:47:00:67:fd:c5:7e:
                    4d:e1:f9:89:fe:30:93:6b:45:0f:d9:59:1d:bb:31:
                    5c:40:8e:cb:4f:9d:19:8b:43:ea:81:88:36:f9:f9:
                    9a:b0:7d:cc:c7:0d:a9:ef:d7:69:fd:82:64:0a:7f:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:19:2F:48:A4:07:45:83:26:E7:94:FA:4A:34:15:8B:BB:93:BA:28
            X509v3 Authority Key Identifier:
                keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6c:cf:be:a8:23:0b:30:04:a6:cd:59:68:6d:f5:35:c6:0e:
         00:6a:4c:9e:fa:16:94:21:cf:10:7f:01:08:a6:fb:1d:51:27:
         45:0d:4f:ac:70:75:05:f0:8d:e5:cd:68:c3:12:b5:5e:30:17:
         22:f5:22:52:a7:df:83:94:b7:f9:3b:41:55:73:93:4f:d9:08:
         3d:0a:2f:33:68:65:37:5c:1e:5f:44:2f:21:21:74:20:64:9f:
         fe:01:20:a8:2c:9c:07:e1:cf:d7:29:94:cd:f1:2f:9f:5d:fc:
         db:03:46:07:da:98:e1:32:94:41:af:fa:c4:ab:0a:65:c5:37:
         eb:87:1c:77:d5:0f:37:92:01:8d:dc:6d:85:d9:ea:a2:0e:29:
         1d:4c:16:1a:0d:52:a1:da:8e:1a:a1:72:1a:f8:fc:8c:ae:48:
         98:a4:30:f1:66:71:3a:df:cb:f0:ae:a1:9b:8d:60:e7:ef:72:
         ed:da:c4:9b:11:f0:4c:14:13:4a:c8:20:5e:13:35:4c:ac:a3:
         6b:d6:c9:e1:db:74:f3:c7:7d:0a:03:ee:e4:e5:a0:a2:1d:e4:
         55:2a:2e:0f:28:e3:b9:f8:2d:a8:ae:cc:dd:a1:84:b9:09:bd:
         d2:85:be:7f:34:07:71:4b:95:d6:c4:b3:8e:db:69:c5:b3:de:
         1f:61:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:42 2025 by rpki-client