This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File:                     CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier:          b9Vfmcm470RCwcbEiL3phmrbYdNFriDqCsnswPkhISU=
Subject key identifier:   4F:B0:79:5B:FD:AF:2D:9C:75:06:C0:CF:AB:28:B2:3C:55:EC:3C:5D
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       287E34551C89A9663FE1FCBAB48BE0F901DC7552
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number:          0538
Signing time:             Mon 01 Dec 2025 17:02:28 +0000
Manifest this update:     Mon 01 Dec 2025 16:57:28 +0000
Manifest next update:     Fri 05 Dec 2025 03:29:28 +0000
Files and hashes:         1: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
                          2: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: kGOUgYcfU0lipgVW6JyJINZjvC/9IZgf9YNMhFm4hRU=)
                          3: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
                          4: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
                          5: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
                          6: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
                          7: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
                          8: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
                          9: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
                          10: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
                          11: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
                          12: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
                          13: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
                          14: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
                          15: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=)
                          16: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 03:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7e:34:55:1c:89:a9:66:3f:e1:fc:ba:b4:8b:e0:f9:01:dc:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Dec  1 16:57:28 2025 GMT
            Not After : Dec  5 03:29:28 2025 GMT
        Subject: CN=4FB0795BFDAF2D9C7506C0CFAB28B23C55EC3C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:7c:44:bd:d6:49:90:2d:a8:78:ca:42:4a:
                    5d:fe:bf:e2:d4:7e:9a:01:70:2d:77:bf:45:6c:32:
                    48:1f:12:51:64:08:0c:fd:e7:51:56:f5:37:23:87:
                    5b:e3:b2:0b:48:01:4a:bc:08:df:1f:7e:a8:37:08:
                    f1:27:9b:f2:dd:cb:53:28:54:dd:07:f7:7c:1b:b3:
                    c5:83:70:2b:48:44:51:6f:48:ca:34:63:46:b3:fd:
                    69:82:66:64:2f:8b:15:e9:42:67:4d:0e:42:78:7a:
                    8c:2e:04:22:94:87:fa:bd:94:de:2e:cc:45:77:5b:
                    0d:30:4b:79:4f:93:f1:22:78:19:a0:6d:5d:1b:e5:
                    9d:bd:09:ed:56:cb:5e:0b:e7:fd:e4:dd:c6:5d:86:
                    af:d9:5e:cd:fa:36:ed:9e:ab:89:8f:44:5b:83:66:
                    e0:d0:4f:ba:d3:b0:04:9b:6a:37:49:99:f2:89:88:
                    7b:b8:27:6f:86:00:a2:34:24:5c:d2:53:b4:1d:e4:
                    cf:02:0a:43:ba:55:63:0f:fe:cf:9f:d9:5e:21:10:
                    b7:36:16:28:00:03:5c:fa:41:8b:99:da:8a:5e:9b:
                    47:4f:99:90:93:81:e2:ab:2b:ca:cb:7e:cf:56:d7:
                    ca:2a:62:c4:64:17:ec:3c:b1:4b:c6:60:12:16:6e:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B0:79:5B:FD:AF:2D:9C:75:06:C0:CF:AB:28:B2:3C:55:EC:3C:5D
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:72:96:ee:86:7c:65:04:77:3a:3e:e1:4f:8b:2b:a5:e0:
         0d:81:bc:5a:03:39:3f:68:98:c9:dc:91:89:1a:71:f8:c2:6e:
         cf:ac:1f:d6:f1:30:ba:d5:c6:51:e6:86:62:43:91:6a:7e:b3:
         90:03:12:78:10:fc:07:4a:70:6d:02:b0:c9:c2:f0:1b:3d:6c:
         97:a6:85:fd:db:be:16:88:ea:4a:52:45:91:75:95:89:40:bc:
         99:b2:f7:90:68:b1:f5:e7:08:6f:54:b2:3a:d2:4d:6c:98:d7:
         90:fb:06:88:38:e8:47:9b:98:61:1b:83:70:a4:c8:79:0d:67:
         79:6a:45:5f:e1:35:ea:c8:1c:eb:39:fb:af:e8:e1:4b:17:4f:
         a5:44:b0:6c:fb:9d:a3:c5:42:60:8b:5d:80:6e:b8:57:6b:b3:
         44:73:cb:a5:a6:3c:d6:19:d9:29:66:ea:09:59:96:7f:59:7b:
         96:ee:a2:a3:6f:f6:e5:2c:1a:ca:63:2c:8d:0e:17:bf:7d:46:
         37:0d:85:38:33:b2:d2:8f:cd:ce:05:ae:26:ab:02:bd:a8:33:
         3d:9b:bc:69:cc:8c:79:62:a7:cd:ee:6a:05:74:a7:c6:f9:3e:
         d5:f5:52:50:1a:e0:3d:f5:6e:bd:bc:db:0c:a6:e7:76:1b:9d:
         ec:d3:fc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:34 2025 by rpki-client