This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
File:                     935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft (raw, json)
Hash identifier:          PD50mn8Jmt/gBg5TsKF8t/c9MS9rYEsfu6mXWFl9MKI=
Subject key identifier:   EA:48:E2:8C:A6:F5:3A:61:46:02:4A:90:9E:A2:16:B9:EE:78:37:D2
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       1FBC537FDF6B518D071E67BD1ABBF32B0250BF71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
Manifest number:          053D
Signing time:             Tue 02 Dec 2025 23:21:09 +0000
Manifest this update:     Tue 02 Dec 2025 23:16:09 +0000
Manifest next update:     Fri 05 Dec 2025 23:21:09 +0000
Files and hashes:         1: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: MZkAsgI1LK8w1LPPO7mrWaTwnV05X/ESMWLzLbTQIP0=)
                          2: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: /vW/TSbog9WsObuCC1lgKjgijK+Dod2mciJtHHUezKU=)
                          3: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (hash: hBCdf6MQ44EMODLH0goT5EgLIomwJ27fDjdA8l3goK8=)
                          4: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: xgt5xEDp+XFwH8hLX8aUiO3xy0s9+XFKXBjJZ88c3KE=)
                          5: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: 89A2hU4ZNeLlTQWFk//hToBFYmlDJWFVlljqu9huGYU=)
                          6: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: We1k3RElK9GB1JUpvlgdlEhaIFsMFI9pBQlBnBG9xm0=)
                          7: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: x/FofJeZNxkVPOa1E9HkT3zXzpIkigVr7Dyocx4wMZs=)
                          8: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (hash: MHLvNBBDeKLXnh9zpHXyspbjmbbkMSXMU/LUFMRRAKk=)
                          9: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: CdtTtCGcqTSKprBM/SSCJUpSOUzh3lZ3WFYK1XycLjs=)
                          10: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: HLVBD979pS8wg1hMg/z3bLcZUZBMG19OyH8qnmPOiEQ=)
                          11: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: 3SF0bAW+7rz1kqWvQ04ZAo3EXSDUW7WAvx83Y52xCYs=)
                          12: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (hash: lR+WSBiL7cOFUb1JcRW+5/d+PDThjLOWPJrqzwsQquY=)
                          13: 323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (hash: 7dk3+UbgX607IlNTst1WKsK+D+Kfaq5vP3vfslx3Dv8=)
                          14: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: 5lJDAspWdkYKRvft5YJv1y1oL5whXpt3WUE0fOXTEtQ=)
                          15: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (hash: lmN8CKwnpjABLBKuKVDCz9e5H4GmlgOLsUei3+Y0saA=)
                          16: 3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (hash: OqpoVOVJpUhsB4C42PcVh81+Ms4dKWfSDdEhcsKwE60=)
                          17: 323430323a3630303a62313a3a2f34382d3438203d3e203338353135.roa (hash: YPCHB9+pVaURl8+dAGmuKHWAAYIp9zXHQ5RNjAvQlWA=)
                          18: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (hash: jfQj9Xe+FFUAvRMk0Cart8oc9Moe7xONTWgrujdxqvw=)
                          19: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (hash: vdW3QTcBsIPY6dF/jSl1kcP+cWlLsmSjo55p09Ujwos=)
                          20: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: UiXaStQAKJGueqgS6CXK/3jB9NOQ2r7CCSqgVa6KSp8=)
                          21: 323430323a3630303a313a3a2f34382d3438203d3e203338353135.roa (hash: uXjjFF8r0bZTRb9FAMyxiQMT6f66pjylh6TLVp8RaRI=)
                          22: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: AnoAXlk+ZznXZQFLclniCilxBvQYCPfhm7aj/ofKMUY=)
                          23: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: Pzi7GR8j0R6wiVbVAxvFIEhEVNaHRMjCobhRay+uqBw=)
                          24: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl (hash: RyhPGK4LTEzZKr6pWYxUOVD7Nwoo1Oxerk44IjszdW4=)
                          25: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: nL5h7t1uvPTY7j/fOmJJBHbseWsW8Xn8jUveWxlnXWs=)
                          26: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: Cz55zbo2bg8BQ/A4k8o5Tsse3KPVQaX+P2Zyl0kj47o=)
                          27: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: SXRbQUacdI0gdlDCMDP1QFPdIAK9kHRg+ZOPQumVqeM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 23:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:53:7f:df:6b:51:8d:07:1e:67:bd:1a:bb:f3:2b:02:50:bf:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Dec  2 23:16:09 2025 GMT
            Not After : Dec  5 23:21:09 2025 GMT
        Subject: CN=EA48E28CA6F53A6146024A909EA216B9EE7837D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:18:b6:98:cc:35:86:f2:9c:c7:3b:fb:61:57:
                    d1:d1:85:30:14:cc:63:8a:e5:f9:bc:ac:ee:be:76:
                    5b:db:6a:a3:37:e8:70:d4:80:b7:00:80:2d:cf:6e:
                    5d:56:da:c7:57:76:b2:e6:44:60:af:6d:de:10:f5:
                    7e:62:23:85:63:00:a8:0e:3f:4f:38:e8:3e:80:9c:
                    eb:4c:fd:36:71:22:f3:5b:85:31:0a:92:01:34:b7:
                    c1:b0:c4:79:60:a7:a2:6d:28:e5:e1:f5:09:ad:c7:
                    49:8e:c8:14:61:14:4f:f4:9c:8b:de:f2:db:8c:f7:
                    d6:87:80:f4:ce:e1:9a:b6:a3:66:6e:37:9a:bb:6c:
                    06:cd:0a:59:08:1d:99:7f:95:88:20:5c:14:fd:c6:
                    ca:da:1a:ed:5a:be:e4:89:80:ed:28:90:e4:f8:cb:
                    7b:93:6e:7b:86:33:1f:62:6a:35:b9:1e:87:5a:d2:
                    35:e5:05:b5:2c:b8:c2:ac:f2:a9:01:60:19:19:13:
                    40:81:ce:54:10:b7:56:50:df:3c:31:4e:64:8e:d0:
                    8f:1c:48:0e:6e:46:bc:60:2e:9e:33:21:bc:3d:5d:
                    48:19:15:1f:15:08:3c:d4:cf:a9:ca:ed:ab:a0:d5:
                    52:69:9c:a8:9f:86:1f:23:1c:74:90:70:9a:e2:b4:
                    f0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:48:E2:8C:A6:F5:3A:61:46:02:4A:90:9E:A2:16:B9:EE:78:37:D2
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:cf:d1:38:83:cc:14:7b:54:c5:3b:21:6e:5f:0b:2f:f1:cb:
         f6:52:c7:ab:a4:86:8e:62:b1:60:6d:ff:b3:89:b3:2c:90:b4:
         1f:78:fb:9f:d5:23:12:b7:f1:68:f9:eb:ec:f4:a3:5c:a1:cf:
         8e:7f:2f:38:7f:92:9c:0f:e6:53:e4:d5:ff:f7:4f:05:64:51:
         33:af:8a:36:33:37:1a:0a:65:ad:00:e0:b6:97:5a:cb:da:de:
         9b:6c:00:d3:27:8d:32:5a:b1:b6:7d:7b:74:82:d4:1c:6a:33:
         d2:ee:80:ef:1b:0a:8e:1c:b9:8e:aa:cd:0a:53:50:ba:47:d3:
         d6:68:22:9b:0b:4e:cb:5a:52:70:bb:25:25:6f:30:8c:0b:7f:
         6d:8b:cc:94:20:fc:16:be:06:d9:47:65:61:99:38:41:de:99:
         62:e6:19:6b:03:db:be:44:26:a4:12:a8:bd:bb:35:39:c6:fa:
         16:19:12:b2:c7:bf:94:b3:21:d4:59:29:c7:4c:2c:f4:35:64:
         d6:2c:65:29:72:a5:f4:80:59:6b:09:7b:a4:40:45:3c:83:6e:
         d1:07:59:f5:d0:ac:2d:fc:a8:b1:79:07:9a:cd:05:d8:03:8f:
         32:2e:b4:01:cb:35:28:d4:da:94:93:d2:10:67:2b:99:1d:66:
         f5:11:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:12:02 2025 by rpki-client