This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          sl7dDHJX4x5oeR5mQ5ixbBVilp2dFyDRNJbGEznk49k=
Subject key identifier:   96:84:B5:CC:3C:4A:8A:19:74:8F:52:CA:DA:DA:F7:9C:ED:3E:FA:CA
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       5E91745D19FB01BED3F8956C0170A8110FD626DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          0548
Signing time:             Tue 02 Dec 2025 05:42:29 +0000
Manifest this update:     Tue 02 Dec 2025 05:37:29 +0000
Manifest next update:     Fri 05 Dec 2025 16:27:29 +0000
Files and hashes:         1: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: D+8qwg5TcfMcDf0phHbivHHGzg9lL1i798CiK1aNwo0=)
                          2: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: h7NsaP81E/4rqIyGV1dg1JRgScEeK/hJwwlj/aFKArk=)
                          3: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: KvSvkJVty1qHjYffQieqFJAuh3dt1BHzGki9sQiAFXI=)
                          4: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: EZdh60eQJ0O5FCzuczO3QBjbRRYgOvtWbCa5RUYH7z8=)
                          5: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: zoZa3tLUvTTpmYIJTx5LfPwbAyo/gY5JwiU6TWgDs78=)
                          6: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: uPV0voLTxjHrIsHmaExj5+EGVw7Nm+iGd6nJEj83KUE=)
                          7: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: IrBPaOzrnHx8A3kF5U8FLypO1fdlWfu1886gczEN4Os=)
                          8: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: 4nd2DLm/J+RolIn9aIGsW+HXsvu2ybFSiuHkPOngkOI=)
                          9: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: 1FsOdleRSG3IEtzn2Y5KIghx/oCLGSKZKVzGT9z4mXU=)
                          10: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: hmU/fFbEB5MHfxnUZwzr2O0p+/FFdJYTbJLKljW/yfY=)
                          11: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Au0lkFPRKVBvBG5KfA74Xt/Sxl2Jzxo+Ex2p9zz5DkQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:91:74:5d:19:fb:01:be:d3:f8:95:6c:01:70:a8:11:0f:d6:26:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Dec  2 05:37:29 2025 GMT
            Not After : Dec  5 16:27:29 2025 GMT
        Subject: CN=9684B5CC3C4A8A19748F52CADADAF79CED3EFACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:5c:dc:65:cc:c9:cf:cb:50:56:4f:51:00:
                    f7:81:0c:3d:8d:ee:f9:69:03:6d:64:54:4f:c6:f8:
                    b0:b5:a6:43:74:03:5f:f3:11:bb:59:c9:d3:b2:2d:
                    84:3d:8b:9b:7f:a7:da:73:6f:e3:41:8b:c5:15:78:
                    ad:fc:63:4f:cf:60:2a:07:37:2b:25:7c:44:f5:41:
                    7f:dc:df:cd:22:3e:c1:b7:6c:94:8e:b2:8a:92:e5:
                    de:2c:10:99:d5:72:5a:82:f9:6a:30:26:8d:0e:40:
                    e2:9b:6e:35:7e:1c:79:b6:38:d8:71:d6:fb:b3:a5:
                    45:0a:e0:f4:4d:34:34:29:90:c9:fe:81:3d:94:74:
                    d6:48:ed:4d:a3:65:df:c3:02:ec:b6:b1:11:23:d5:
                    3a:4f:9e:6c:c9:45:1c:55:a5:32:b0:ad:09:62:8a:
                    60:11:a3:62:cf:b9:67:89:f8:18:df:6e:b0:d5:42:
                    40:31:d1:a3:de:39:20:6f:71:9c:65:88:45:91:d7:
                    26:ac:cc:d6:b4:50:44:d2:86:bb:b0:90:b6:0a:16:
                    cd:95:ea:a7:67:1d:0a:d8:1d:82:48:fd:01:b1:16:
                    ca:03:8f:0b:99:c6:ff:12:4d:aa:81:66:71:56:50:
                    4e:81:48:f2:dc:82:47:39:69:72:e4:bb:28:0e:ca:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:84:B5:CC:3C:4A:8A:19:74:8F:52:CA:DA:DA:F7:9C:ED:3E:FA:CA
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f7:eb:34:f9:f3:d1:a7:58:27:cd:66:cd:c9:ed:e6:af:37:
         c4:7f:8e:5e:b2:2f:e7:5c:f3:df:29:5a:61:ca:a3:43:b2:6e:
         74:d1:fd:bb:90:9e:54:cf:c0:0a:e8:c1:7e:db:ce:cb:00:07:
         f8:00:8a:b5:e0:3d:3d:02:45:05:79:14:83:5d:85:07:ff:38:
         07:d3:94:45:f2:a9:d4:f5:41:c6:df:43:ec:a5:fe:d7:4d:30:
         fd:31:e4:bc:89:26:3b:8b:de:94:94:60:a4:d7:40:44:74:df:
         10:ad:a5:3d:1f:34:ee:67:1c:39:93:cd:0a:49:86:4d:99:21:
         0e:c2:5f:c7:32:cb:05:c8:f0:ad:4c:0b:6b:88:86:37:e0:73:
         66:fa:e3:e2:7c:ce:25:be:a1:1d:ad:d9:9f:bc:da:b9:84:9c:
         94:8b:42:4f:85:0b:cf:12:7f:8a:f8:8c:95:77:ab:18:51:70:
         8a:c5:c3:7c:6f:e4:17:a9:77:79:24:77:99:53:ed:9b:1e:e0:
         ea:3e:42:bf:04:0e:87:31:d2:16:cf:81:39:77:80:35:13:f2:
         7b:f5:35:5f:38:2f:c8:20:20:50:86:12:6f:13:f5:34:5d:ad:
         2c:b6:6d:b6:eb:50:21:f0:a6:bb:5c:72:e2:67:da:5e:5d:68:
         9f:0c:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:32 2025 by rpki-client