This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
File:                     1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft (raw, json)
Hash identifier:          lNihrybLm2q4bGF0UyhcWka6ND+O9Iw8d6DzODtO0oM=
Subject key identifier:   7C:92:AF:F5:64:4E:CB:7C:04:B9:5B:90:34:39:55:C1:4B:5B:28:1D
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       5C3537D726C9BC5AF4B258BA82E245D9918D683B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
Manifest number:          020B
Signing time:             Wed 03 Dec 2025 02:31:40 +0000
Manifest this update:     Wed 03 Dec 2025 02:26:40 +0000
Manifest next update:     Sat 06 Dec 2025 11:29:40 +0000
Files and hashes:         1: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (hash: 9GPvbzS14nrsGqBa86Psp3VYtnnpTdNwmEPZ8WpOVfk=)
                          2: 34392e35302e342e302f32342d3234203d3e203436303234.roa (hash: ZHh4TwmNkfiSfrilBWgPwnleDnUmWbiEe9KNZbEdlK8=)
                          3: 34392e35302e352e302f32342d3234203d3e203436303234.roa (hash: +bXCaBbua6T2KBv/snNdo+ibMSi47YiRL7LuzmtTWcA=)
                          4: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (hash: ZBvkqi4wu7ycsgvkdgZN2UrIQ3x4XvFGJe42h/LvuEk=)
                          5: 3230322e34332e37322e302f32332d3233203d3e203435323938.roa (hash: CmCK8ZpA/FudP6hIFHJcphPOJ9k3R40wP9Auosw941k=)
                          6: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (hash: dInQPRjkGOWRH1BIDOtz9jdXpBLceJN8qrYrHJtpPKc=)
                          7: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (hash: ICLKoH8LfO9RPqo2cawJT61bywbgOJprlh0DKtnFRUE=)
                          8: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (hash: an5W/cXaXaYModPf+N6XOmKZ/Cp6c1fvWdj3PKqPfww=)
                          9: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (hash: mn89fCBpa1L+r4Zi4IcWuFHARAg3/d1uhObCHoGGpiQ=)
                          10: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (hash: uqHQK1i4at+YRbQKPp9nCOZWuomqh/0ErADJ9NJSjx0=)
                          11: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (hash: 76H0qrG4Uy5/8aWW6KHmL8OdUAxhoKIYB8VrEwRt7hA=)
                          12: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (hash: P8D28JKFM06MNi05ib5wcU9FclilcMp00khEQOaFKnw=)
                          13: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (hash: hBeqiHGxmy6NCMgmNV6p5ha99Si74kGBcjRNx7S7+Rw=)
                          14: 34332e3234392e3231302e302f32342d3234203d3e203435323938.roa (hash: k7dWhdkZK9UJDfOHlX9DtKI4ltVhma3w/Rs97O9liQA=)
                          15: 3138322e31362e3234372e302f32342d3234203d3e203435323938.roa (hash: 4amRYbhJJSDWXkkRhhbgFlFkWrr2hCXvNhf2mcpgA/s=)
                          16: 3138322e31362e3235312e302f32342d3234203d3e203435323938.roa (hash: Mt1DXYTW3OSb5Bm3PeVFWr97+FI1i3tLsNyzndoYvcM=)
                          17: 3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (hash: uiNs4PF5jn59nxQSw5oyyEUEF1jh8DIcSo1Ma1LzQ/Y=)
                          18: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (hash: 3Kl0ykpc+rRNPwjYjMx54Tqd+CRH2FVLtk851hbh3Rs=)
                          19: 3138322e31362e3235332e302f32342d3234203d3e203435323938.roa (hash: 7tSE7KkWcsihzvchBrW5YTBm20JcWETuKHlir2V2b+Y=)
                          20: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl (hash: wbyzklEIdWh5yf8ZVDez/JqxyZYTf2D/4Gvgm8gTVvA=)
                          21: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (hash: bHqpsq84uIhoWcWxe7oYJq3JF/6gomerkmgGc5KSkIk=)
                          22: 3138322e31362e3234322e302f32342d3234203d3e203435323938.roa (hash: uhBFE26V8tIU7PQEDrMRdIxjx5J3XkgvP9oT8QwvDXE=)
                          23: 3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (hash: ofYpfyIwrFc3EyGc5HbuOjiaT8PI5lzgpR6J06rc1og=)
                          24: 34392e35302e342e302f32332d3233203d3e203436303234.roa (hash: UYaCog++0gqvsXDea9mZnkKimC89Lnd8uWKZu9Blm80=)
                          25: 34332e3234392e3230392e302f32342d3234203d3e203435323938.roa (hash: HKEFlGd3fuMjLaak9jaJVW3JC6xTjvu6XpG5EhM3CNI=)
                          26: 3138322e31362e3235352e302f32342d3234203d3e203435323938.roa (hash: Ih6LaUurzUOWghMvWPDG/3giShb9DXnYrcHVYKod+qY=)
                          27: 3138322e31362e3235302e302f32342d3234203d3e203435323938.roa (hash: x0aTPjrDPj2tG+isyUHS4PYr+Z/d0GFTwX/xZzQ4/Ng=)
                          28: 3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (hash: ayee7O41lSuhdkX8kgFCAyEZoZeltyZMUPLzbervZDg=)
                          29: 3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (hash: Br2zhO2mtWf4byMN5oW5IF0fqGbzZ4jKe7O7XXXytF4=)
                          30: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (hash: 1w/9LRyUE06eBEdRnx71e6cTE3cd85bkpMBBImnruAE=)
                          31: 3138322e31362e3235322e302f32342d3234203d3e203435323938.roa (hash: /v0Cr6fAOvdJvYC4l4q8Wzedl9V95Oxul6gOFuLUT4s=)
                          32: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (hash: zyocrG2hpeP9qlrJD0AmGWe005OQobfbPO7J468S0C0=)
                          33: 3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (hash: yNFLxX05WMZzMi6ZeEGl6RBki5EIiqpoaz15mWF+Us4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 11:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:35:37:d7:26:c9:bc:5a:f4:b2:58:ba:82:e2:45:d9:91:8d:68:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Dec  3 02:26:40 2025 GMT
            Not After : Dec  6 11:29:40 2025 GMT
        Subject: CN=7C92AFF5644ECB7C04B95B90343955C14B5B281D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:74:77:b1:55:78:37:ae:6e:b2:c8:8d:76:
                    05:fa:d3:f2:be:fe:f0:ee:fd:bd:c1:13:3a:21:14:
                    c1:1d:13:24:5e:27:1c:09:1a:c9:53:ef:5b:f2:ac:
                    4e:3b:fb:af:52:c6:28:a5:22:df:83:9b:a2:d0:7d:
                    fd:42:41:82:66:4a:e5:fe:a2:f2:d9:37:b9:f1:8c:
                    64:44:fe:a4:75:0e:07:5d:a0:eb:0b:bc:96:2d:71:
                    96:ff:03:c1:98:f7:09:d1:d3:cd:8d:95:0b:a9:24:
                    b3:a9:7e:1a:c4:7d:e4:c8:26:ae:c6:30:43:f3:21:
                    a3:66:81:97:6d:2e:99:69:75:87:66:09:f7:41:7a:
                    86:3e:6b:a5:21:77:69:5c:46:2f:ba:68:75:7b:ee:
                    0b:d2:ae:99:9d:5d:ac:c5:df:17:c5:cc:80:70:4d:
                    db:09:37:ca:3f:e0:59:6a:d6:ea:58:02:7b:11:70:
                    b3:02:11:52:05:0d:c4:4b:75:5e:34:c9:4b:8b:3d:
                    26:fc:40:d7:d9:38:99:73:44:89:ab:1d:76:53:43:
                    8f:fe:99:35:d8:5b:4a:e2:a9:17:a9:61:35:4e:4d:
                    1f:2c:09:bc:db:1c:1c:dc:e4:a6:ce:99:ef:8e:ff:
                    69:d2:33:8a:be:2d:ff:6f:81:e3:55:3c:aa:80:61:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:92:AF:F5:64:4E:CB:7C:04:B9:5B:90:34:39:55:C1:4B:5B:28:1D
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:06:57:b2:b1:c6:48:68:24:14:61:b6:20:52:fc:46:43:86:
         e7:34:d2:8a:11:93:48:f8:1e:2d:31:e2:7e:c6:00:6a:46:94:
         2a:e3:ab:15:29:11:b2:e6:ca:63:61:ac:de:7e:cb:92:1f:06:
         55:65:e4:17:c9:13:9c:d2:63:3d:88:e0:6b:6c:3d:28:21:06:
         ed:b7:e4:5f:2f:8b:dd:25:b2:ae:3d:fe:e8:9e:cb:40:20:0c:
         df:e8:05:3a:b5:f2:6a:e2:b3:66:10:09:17:a8:df:59:30:7f:
         90:6b:96:cb:51:db:5b:7a:b5:78:8c:8a:57:e3:51:a2:cf:74:
         2d:cf:85:1a:79:30:c7:4f:37:91:ea:bf:3f:30:b2:6c:d4:cf:
         78:65:8f:7b:20:8f:30:89:4b:e6:02:c9:53:21:fd:cf:df:66:
         f8:e2:11:a4:c3:e2:5f:51:04:9b:df:f2:d2:03:41:96:b8:22:
         90:a2:e0:a1:8c:03:0b:9f:19:d1:d6:7d:2b:10:c4:0d:5b:de:
         0a:83:67:5a:e4:05:70:6a:b2:0f:ff:22:79:01:02:d7:2d:3d:
         ee:a6:7d:c7:71:98:0c:3b:e5:53:6c:be:05:cb:96:57:c3:fe:
         cd:f0:83:4b:7e:f0:5b:ed:9f:b2:ed:a3:7a:80:72:c2:0c:92:
         c9:87:cf:e3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXDU31ybJvFr0sli6guJF2ZGNaDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD
ODg2RjFERTAeFw0yNTEyMDMwMjI2NDBaFw0yNTEyMDYxMTI5NDBaMDMxMTAvBgNV
BAMTKDdDOTJBRkY1NjQ0RUNCN0MwNEI5NUI5MDM0Mzk1NUMxNEI1QjI4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkHR3sVV4N65ussiNdgX60/K+
/vDu/b3BEzohFMEdEyReJxwJGslT71vyrE47+69SxiilIt+Dm6LQff1CQYJmSuX+
ovLZN7nxjGRE/qR1DgddoOsLvJYtcZb/A8GY9wnR082NlQupJLOpfhrEfeTIJq7G
MEPzIaNmgZdtLplpdYdmCfdBeoY+a6Uhd2lcRi+6aHV77gvSrpmdXazF3xfFzIBw
TdsJN8o/4Flq1upYAnsRcLMCEVIFDcRLdV40yUuLPSb8QNfZOJlzRImrHXZTQ4/+
mTXYW0riqRepYTVOTR8sCbzbHBzc5KbOme+O/2nSM4q+Lf9vgeNVPKqAYc9jAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfJKv9WROy3wEuVuQNDlVwUtbKB0wHwYDVR0j
BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw
M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2
RjFERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVlYzI1ZTQtOWFhOC00YmVmLTkw
OTctYzBiZWMwYjI2NmE3LzAvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4
N0JDODg2RjFERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADcGV7KxxkhoJBRhtiBS/EZDhuc00ooRk0j4
Hi0x4n7GAGpGlCrjqxUpEbLmymNhrN5+y5IfBlVl5BfJE5zSYz2I4GtsPSghBu23
5F8vi90lsq49/uiey0AgDN/oBTq18mris2YQCReo31kwf5BrlstR21t6tXiMilfj
UaLPdC3PhRp5MMdPN5Hqvz8wsmzUz3hlj3sgjzCJS+YCyVMh/c/fZvjiEaTD4l9R
BJvf8tIDQZa4IpCi4KGMAwufGdHWfSsQxA1b3gqDZ1rkBXBqsg//InkBAtctPe6m
fcdxmAw75VNsvgXLllfD/s3wg0t+8Fvtn7Lto3qAcsIMksmHz+M=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:57:30 2025 by rpki-client