This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
File:                     115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json)
Hash identifier:          3hFmx+TYu47opwKe9q/y2MIlIvyse+MqAdN2V2CpND0=
Subject key identifier:   F1:CD:32:0B:0E:BD:5B:EC:30:C6:FE:68:2D:32:75:3D:12:7D:81:A7
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       1915E45A86201AE2537F09E76EB834774BD2FA8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
Manifest number:          01E6
Signing time:             Mon 15 Dec 2025 13:12:21 +0000
Manifest this update:     Mon 15 Dec 2025 13:07:21 +0000
Manifest next update:     Thu 18 Dec 2025 16:28:21 +0000
Files and hashes:         1: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=)
                          2: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=)
                          3: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=)
                          4: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=)
                          5: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=)
                          6: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=)
                          7: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=)
                          8: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: hyZHa7Ou/BRKJIktgKxb73ZpgiS3dgcfp7rObQUCl30=)
                          9: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 16:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:15:e4:5a:86:20:1a:e2:53:7f:09:e7:6e:b8:34:77:4b:d2:fa:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Dec 15 13:07:21 2025 GMT
            Not After : Dec 18 16:28:21 2025 GMT
        Subject: CN=F1CD320B0EBD5BEC30C6FE682D32753D127D81A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:ab:7b:2c:d1:f5:c5:cc:12:74:e7:b0:e6:
                    dc:96:a1:96:57:36:4b:93:c4:3c:f5:03:90:ba:33:
                    87:56:9f:6b:4f:07:4b:fa:7f:ce:00:37:2f:a3:93:
                    b6:f6:76:1e:d1:ed:30:a9:a9:a7:65:2e:f4:7d:2a:
                    e3:ea:7f:cc:42:f2:9b:11:79:90:74:02:14:50:7e:
                    2a:40:57:14:43:b8:0e:64:2d:9c:fa:20:b5:d5:0e:
                    c5:08:ec:94:f9:30:42:b0:32:6b:25:46:34:39:64:
                    af:c8:28:5b:a0:8f:6d:b7:53:1b:fd:92:f4:dc:b2:
                    6a:2b:ea:76:8e:b2:79:d5:f3:6b:7d:95:11:5f:0a:
                    f4:18:14:8a:4f:47:e6:33:69:24:aa:9b:a7:77:0e:
                    10:5e:3c:05:67:2d:fd:ee:6c:9b:78:9f:6b:d5:86:
                    d7:4c:cd:47:c6:6a:01:9e:99:74:06:ac:ab:b6:22:
                    7a:df:2c:19:5a:56:38:d7:08:ff:01:28:c1:96:64:
                    e6:e0:d4:7e:8e:c5:e0:f6:cf:09:06:bc:fd:26:fc:
                    06:c9:7e:76:5c:95:45:b8:e6:47:c8:d0:f5:a4:c2:
                    21:24:87:15:05:ec:96:84:9e:4b:b8:2c:50:40:2d:
                    be:dc:2e:a1:e0:ca:da:81:ef:06:4b:72:5b:1f:d6:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CD:32:0B:0E:BD:5B:EC:30:C6:FE:68:2D:32:75:3D:12:7D:81:A7
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:33:b5:df:22:1c:0b:8f:c6:da:a2:dd:8e:2c:fd:a0:03:
         04:34:92:bc:27:47:2e:d1:1f:54:61:7a:e3:d3:3b:e1:d5:5a:
         96:dd:f9:f3:bb:b8:d0:40:41:fb:da:e0:4f:2b:79:93:d8:27:
         a3:94:85:58:5c:bb:10:87:57:74:25:29:a3:84:72:98:08:83:
         a4:d6:bf:a1:2f:a7:aa:08:61:50:d1:0a:75:4f:0c:d3:f0:a7:
         49:20:9f:9a:62:ef:21:ae:d9:08:08:c2:8b:4b:52:6f:ec:a4:
         02:e2:0f:63:d7:70:fb:e6:a8:eb:a2:81:49:26:66:d7:34:3d:
         73:79:76:29:7d:3b:06:59:97:9a:db:45:ec:55:96:2b:10:ec:
         68:0c:f8:f3:f1:0a:8a:e4:fe:54:84:a0:54:d0:a7:fc:b2:75:
         94:fa:61:41:d2:d6:a9:13:b6:a4:fb:65:7e:ff:72:11:74:3a:
         cb:59:38:4d:2a:c0:34:2c:8f:55:a4:01:12:cd:88:ce:06:f3:
         22:ca:20:fd:7f:cf:64:f8:c1:ee:c8:7a:e0:a8:65:68:33:17:
         f3:fb:ef:b7:12:05:16:c5:2b:c4:f2:a6:ab:66:bc:6c:e9:73:
         93:ad:d4:87:7d:15:e8:48:d3:a6:cc:b1:8b:23:56:94:6d:69:
         c7:03:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 07:26:43 2025 by rpki-client