This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
File:                     D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json)
Hash identifier:          v9/kpnZDGznYXI0tJjluVt8EEBANH3e4kD5qylkuv1M=
Subject key identifier:   18:B9:42:5D:D6:C0:D8:D7:CB:26:18:AA:84:B2:57:2C:44:2E:C5:9D
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       5DFC6837676D52F9894D088FEDAE205596AA6D56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
Manifest number:          01BF
Signing time:             Tue 02 Dec 2025 07:51:53 +0000
Manifest this update:     Tue 02 Dec 2025 07:46:53 +0000
Manifest next update:     Fri 05 Dec 2025 16:25:53 +0000
Files and hashes:         1: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: B48tlPMvOf7K7HzDvvhN+csuCxhTxi2XsZzldYqsXqU=)
                          2: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: bk766NBayeqzl2TpClpr9IhYx+ApKL2x4uzDJCxWkIk=)
                          3: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: XubVHR1uW/U3u8JfLGlOr8aeDpjn5EspQIPSeyKbXv4=)
                          4: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: s4bQxfKSzhThJnV2s35QtgCBE4otyhr6xeMzoqnFm8Y=)
                          5: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: L4h2Wp4fQdhUrMD0z3Ssoa6P+p1dDNjkEiybK+QQebs=)
                          6: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: zofQAGzRLVSbQfa8x1HxlEvAC2rTzuC4QEGkc7xHMvw=)
                          7: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: DZYxEEoedEoh7hUvK00A3sjPaarHyHkFwFSubpvLa90=)
                          8: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: 9Eop7Wi9KDAgTJcnqm4m9VblRXdXAgnSYGkJE3U1uCo=)
                          9: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: Y4Wi8qAYZ81rv46ZtcXhKaHsjEBVaOJAYBhmKDi8JTE=)
                          10: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: IlfpZnqN0u5jMQ+MMy/Uh2Q/ScrlgNhJWft3oBH8Ovo=)
                          11: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: cN4silcvuPV22OI3IsNy5UveikGt8GvqnC8R2u5vZmI=)
                          12: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: WKBxmJwVLzCYBVgxt4LMTfwAcTtnh7yu4VGARK2zxgY=)
                          13: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: L6NWodOfZQ6rSUMsMmefOdQsDLF+11CTaCvmiFzpOA0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fc:68:37:67:6d:52:f9:89:4d:08:8f:ed:ae:20:55:96:aa:6d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: Dec  2 07:46:53 2025 GMT
            Not After : Dec  5 16:25:53 2025 GMT
        Subject: CN=18B9425DD6C0D8D7CB2618AA84B2572C442EC59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:0f:d7:12:02:bb:77:9e:7e:dc:eb:6e:82:
                    8d:d9:89:74:ad:7f:c6:11:dd:f6:09:02:02:df:b0:
                    96:b9:3c:7a:de:29:11:36:c0:2f:25:0b:19:69:6e:
                    e8:eb:26:9e:4e:48:ec:dc:0e:e6:ce:ca:b9:aa:76:
                    70:3d:c5:c3:48:53:fd:df:d3:17:63:9f:12:4d:94:
                    8f:14:1c:18:9e:bb:ce:3a:94:20:b5:90:ec:eb:d6:
                    2a:9e:d7:1f:51:1d:20:b3:91:c5:5e:32:83:51:f6:
                    8f:6d:3f:26:33:ac:84:3e:73:a5:6f:84:2f:1d:a0:
                    4b:63:9c:51:a1:13:a9:9b:dd:d0:27:86:cb:7d:c2:
                    bf:14:74:78:cc:d7:39:fe:ad:ed:91:87:6e:0d:83:
                    e6:da:40:b1:45:c1:02:99:f7:16:61:ab:c2:9d:2a:
                    e4:9f:1f:03:c3:02:8c:89:34:59:76:07:dd:95:95:
                    d6:cf:da:21:8f:19:6d:75:11:cc:e0:d7:8d:2a:a8:
                    9a:be:6e:45:1d:04:0b:e6:26:f8:3b:a6:d5:b1:ab:
                    4b:f9:39:49:3d:79:15:af:2a:ba:e0:12:9f:df:87:
                    05:ce:68:91:87:80:eb:81:19:6c:3e:c8:ec:53:68:
                    05:da:53:f1:9b:2f:d4:c7:63:e4:5a:f2:13:21:f7:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B9:42:5D:D6:C0:D8:D7:CB:26:18:AA:84:B2:57:2C:44:2E:C5:9D
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:68:bc:fc:32:78:17:ae:39:91:0a:71:ae:b8:0f:44:68:8d:
         35:51:56:14:62:c3:89:71:48:99:df:6e:d6:ae:6b:d2:8a:ef:
         2f:7d:ca:ca:97:24:df:2a:c1:64:6b:9a:e3:da:39:16:db:e5:
         ee:90:19:72:1e:f2:27:f6:2e:24:bc:be:0b:c2:1c:77:5f:d9:
         f7:eb:47:96:9d:98:a6:ab:3b:cc:8d:fa:09:68:69:55:5f:e0:
         94:a5:61:67:e0:52:8d:53:88:31:6e:29:b1:7a:99:65:84:8f:
         84:53:a4:bc:00:62:9c:9a:de:80:07:3c:de:92:82:0f:e6:07:
         1a:56:dc:7b:6b:4b:19:b1:f0:1c:26:bb:ab:a7:ab:d9:0a:79:
         ad:6d:26:48:25:9b:ac:4f:68:56:9b:01:1a:81:b8:f4:25:3f:
         6d:a2:00:32:ad:0f:42:32:73:4f:eb:0b:21:e3:22:05:34:0f:
         5d:5d:2d:e7:00:72:c0:69:7b:29:7d:ee:7c:a8:7e:58:d1:c9:
         bd:48:96:65:9b:f4:df:a0:1a:4e:03:a2:6a:7a:08:54:d2:2c:
         4b:42:00:82:b9:f3:a6:fc:46:47:fb:33:0b:08:00:0e:30:3b:
         05:f4:e2:c2:24:88:f7:1e:89:9f:53:e0:93:0d:6a:c1:0f:7c:
         56:29:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:06 2025 by rpki-client