This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
File:                     2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json)
Hash identifier:          9k6F53Svo/VVwQ8ofz/4rOfBGx1SXsUzOfjcCauw5PQ=
Subject key identifier:   7C:81:D5:A8:8F:50:34:1F:82:F7:E8:CA:95:65:39:C9:BE:6A:18:5B
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       0BCC6E1759C0DE6DB6A2BE588A645002A618F430
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
Manifest number:          01D2
Signing time:             Wed 03 Dec 2025 11:00:03 +0000
Manifest this update:     Wed 03 Dec 2025 10:55:03 +0000
Manifest next update:     Sat 06 Dec 2025 13:30:03 +0000
Files and hashes:         1: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=)
                          2: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=)
                          3: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=)
                          4: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=)
                          5: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=)
                          6: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=)
                          7: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=)
                          8: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: CV4aj5c0qTtoAuk2gjVJIigxTtOqOHVk941GV0y4c2o=)
                          9: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: SEJtrFMzCIxaL5HsTowHqKeGBeSHdUF6h109MbSr1hY=)
                          10: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=)
                          11: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: UTxUdswuTF+ox6a5oV05W2D3Jcdyj/c1haTTHi/3q+U=)
                          12: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=)
                          13: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=)
                          14: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=)
                          15: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: b6WR2/tkj/TJmHf4T96jHhe4cr6ziz5DRZJiP/dYI8w=)
                          16: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=)
                          17: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=)
                          18: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=)
                          19: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: 7FSyhQe6f9ORHe7eDe3rA0+BGppiwBy4h4kBq0GIaLg=)
                          20: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cc:6e:17:59:c0:de:6d:b6:a2:be:58:8a:64:50:02:a6:18:f4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Dec  3 10:55:03 2025 GMT
            Not After : Dec  6 13:30:03 2025 GMT
        Subject: CN=7C81D5A88F50341F82F7E8CA956539C9BE6A185B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:54:dd:10:90:85:2f:2b:7f:7a:45:15:ef:
                    03:c2:16:01:a6:b5:e2:35:7f:bb:1a:e9:16:4c:8f:
                    48:b3:12:4d:63:e0:66:84:56:66:9f:9e:32:0f:86:
                    d6:1e:9a:23:01:33:c8:02:3e:34:7a:55:b6:0e:62:
                    76:73:75:ea:72:c7:2d:d3:85:a7:0a:ce:0f:d6:c8:
                    cb:47:ef:b9:83:66:75:b9:19:04:88:d5:f9:3a:31:
                    68:e5:69:3e:9b:4c:5b:b9:16:1a:a5:a3:e2:bb:99:
                    a2:38:f0:3d:82:1f:c4:6e:31:4f:69:ea:22:ec:32:
                    c5:33:b9:48:30:af:48:93:1a:1a:bb:81:82:3c:70:
                    6e:8d:74:16:21:9b:30:b6:68:c7:54:cf:cb:8f:93:
                    51:f8:7c:dd:ed:33:09:07:68:80:a0:30:a1:7a:af:
                    55:0a:42:a1:30:23:cb:22:56:5e:03:8a:72:fb:bc:
                    c0:3e:7e:a8:95:fb:cb:3c:91:54:95:a9:1d:e0:d8:
                    4d:e4:96:73:12:28:63:60:07:5c:37:b0:b9:da:9f:
                    67:ff:b6:fe:b6:fc:dc:8d:82:ce:7e:9a:29:b6:78:
                    3d:d8:93:9f:ba:70:b2:2f:c2:d4:b3:6f:91:a3:36:
                    1d:00:23:08:c8:3d:3c:cc:84:2b:28:c6:07:be:db:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:81:D5:A8:8F:50:34:1F:82:F7:E8:CA:95:65:39:C9:BE:6A:18:5B
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:52:06:6a:cd:f3:0c:2e:1b:cf:4c:c4:71:9d:df:ff:0c:a7:
         ae:47:a4:a9:9c:59:3d:72:72:1e:b5:df:74:af:e4:df:0b:f2:
         b5:ae:15:cb:d3:a4:f7:05:3c:fe:07:4a:43:74:f8:be:3a:c0:
         7a:26:7f:b5:69:5d:e1:65:d0:f1:14:d2:86:8a:61:b9:02:14:
         09:01:b2:98:77:72:ef:32:67:f9:ea:51:80:c3:8d:ce:ea:9a:
         cd:ae:8d:2c:21:79:e9:bb:41:0d:80:13:04:e6:7a:07:72:d6:
         ee:de:9d:a9:af:e2:0f:fd:6c:10:60:2b:cf:69:6e:70:d3:2f:
         ac:68:fb:24:65:01:bd:a9:a9:30:23:49:e3:f9:9c:f0:87:1c:
         ce:ed:d0:81:e6:f4:e3:f2:e4:57:4d:41:f8:3c:c9:59:24:46:
         57:06:da:4f:5b:57:7a:cc:6c:59:72:72:f6:84:24:1f:91:ed:
         bd:e6:58:76:21:45:4d:7f:16:12:1b:39:b4:c1:bf:c0:df:4c:
         7e:e5:fa:42:f3:09:6f:31:fa:42:d7:3b:b7:c9:44:92:95:d4:
         1e:d4:4f:c4:07:18:f4:5f:3b:59:10:df:a4:ea:f4:8d:8e:12:
         be:7a:59:03:20:b8:04:80:f1:15:dd:72:df:95:a9:c7:cb:14:
         d2:a4:d8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:04 2025 by rpki-client