This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
File:                     2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json)
Hash identifier:          4YeZtI5xjTvt/HyfOGuuCI5AYyEku18mOES9IsIx85Q=
Subject key identifier:   EC:16:89:A1:A3:96:D4:D7:E3:C1:A8:95:02:C0:84:FB:29:7B:32:D2
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       05725BEDCC49DA9517D0A61057227E6FA84BAE8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
Manifest number:          01D6
Signing time:             Fri 12 Dec 2025 03:53:06 +0000
Manifest this update:     Fri 12 Dec 2025 03:48:06 +0000
Manifest next update:     Mon 15 Dec 2025 11:29:06 +0000
Files and hashes:         1: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: b6WR2/tkj/TJmHf4T96jHhe4cr6ziz5DRZJiP/dYI8w=)
                          2: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=)
                          3: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=)
                          4: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=)
                          5: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=)
                          6: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=)
                          7: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=)
                          8: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: boFDDI224eNZdWEQtc+xrlv8B3jU5FV//Y9+2rzrdTM=)
                          9: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=)
                          10: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=)
                          11: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: SEJtrFMzCIxaL5HsTowHqKeGBeSHdUF6h109MbSr1hY=)
                          12: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: UTxUdswuTF+ox6a5oV05W2D3Jcdyj/c1haTTHi/3q+U=)
                          13: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=)
                          14: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=)
                          15: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: CV4aj5c0qTtoAuk2gjVJIigxTtOqOHVk941GV0y4c2o=)
                          16: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=)
                          17: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=)
                          18: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=)
                          19: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=)
                          20: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 11:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:72:5b:ed:cc:49:da:95:17:d0:a6:10:57:22:7e:6f:a8:4b:ae:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Dec 12 03:48:06 2025 GMT
            Not After : Dec 15 11:29:06 2025 GMT
        Subject: CN=EC1689A1A396D4D7E3C1A89502C084FB297B32D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:49:ad:51:10:25:fe:51:11:a5:a1:7e:6a:
                    42:67:f4:d9:65:85:90:05:3f:43:48:ca:03:fe:e7:
                    06:ff:1d:ca:fe:10:44:4b:74:5a:7b:01:c9:1c:29:
                    68:ef:b8:7d:26:82:5f:fb:ff:3c:f5:12:2d:e2:dd:
                    14:3e:ed:58:c3:a0:e8:ec:fb:38:f5:2f:60:58:89:
                    14:59:fe:eb:6f:96:5d:08:ef:7d:35:56:36:87:7b:
                    44:11:05:4a:3f:eb:b7:a4:2e:b7:e1:9b:b7:8a:33:
                    a8:84:4f:1c:7b:40:8d:ac:c4:43:36:70:67:0f:8c:
                    61:60:4d:02:22:cb:0e:61:9a:1a:d1:af:35:57:1c:
                    d3:29:56:e3:76:2e:03:92:ed:c9:e3:da:1b:35:32:
                    70:fd:34:3e:7d:3a:b8:59:42:fa:c2:ae:6b:6e:07:
                    29:a0:00:9a:74:9f:22:00:49:12:af:c6:fe:55:b4:
                    66:79:e3:79:83:1a:e6:d6:93:c9:08:55:12:02:30:
                    c4:0e:9b:92:1a:9b:ce:82:19:63:63:ed:45:a1:1e:
                    31:57:3a:aa:7d:53:69:c4:fa:b4:4d:6f:8f:75:c9:
                    81:c1:ec:d0:ef:68:3c:8a:41:fa:e3:61:b7:78:2d:
                    97:d1:8e:d6:cf:5e:8f:25:b9:67:35:be:cc:f6:fe:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:89:A1:A3:96:D4:D7:E3:C1:A8:95:02:C0:84:FB:29:7B:32:D2
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:37:52:d4:eb:24:18:74:c0:5d:36:03:7d:ee:13:a7:4b:32:
         78:37:c3:c9:78:71:3b:90:94:c9:36:99:01:87:2c:43:7a:97:
         9a:49:04:01:28:5f:53:22:53:2b:94:fd:50:73:10:8f:01:91:
         fe:ff:ce:81:9a:8e:96:58:2c:cc:c4:39:38:bb:e1:70:a4:63:
         93:72:6c:16:9b:af:d2:bf:cd:a6:ec:b5:b3:45:74:ad:94:7c:
         b9:1b:07:1f:c3:52:0e:9b:c4:09:2c:7f:25:57:d7:e6:78:9e:
         9a:3f:82:87:b0:39:59:6f:b1:3d:c4:d6:78:87:b1:29:be:89:
         7a:59:dc:2c:d3:33:21:8a:e6:e4:63:3d:4c:d4:7f:7d:d9:78:
         cf:b9:d2:d2:3e:14:a2:77:cd:f2:6e:ab:bb:68:38:2c:71:1b:
         bd:3f:1b:fa:80:cc:da:d7:b0:41:22:ba:ef:fb:32:b8:f8:04:
         15:b3:07:b8:16:f8:25:07:7f:80:67:c8:de:1e:86:38:39:2f:
         b1:50:95:7a:bc:a6:00:91:f2:9b:97:42:6d:5a:d9:b0:51:09:
         68:d4:e6:bb:c8:c4:c9:82:67:03:53:8c:1b:e7:34:ed:24:84:
         98:72:f4:0d:74:f5:9d:16:6f:73:17:9f:27:46:c5:17:3b:c4:
         7f:d3:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:58:35 2025 by rpki-client