This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File:                     0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier:          cJH7Hzhbuu10ucDuIT0Y702BW2SQ04VxPamoQfj5FIM=
Subject key identifier:   6C:E3:61:56:43:2B:22:4C:66:7B:D9:95:5B:FB:64:8E:26:3B:CD:9F
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       0E3B90D93865D4E0F98C02A1FE98F4A477272666
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number:          055F
Signing time:             Tue 02 Dec 2025 04:20:55 +0000
Manifest this update:     Tue 02 Dec 2025 04:15:55 +0000
Manifest next update:     Fri 05 Dec 2025 16:19:55 +0000
Files and hashes:         1: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=)
                          2: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=)
                          3: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=)
                          4: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=)
                          5: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: LbAW1fNwui28XlbNmBeFDEmMWFY/GJaQerv52Is1Al0=)
                          6: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=)
                          7: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=)
                          8: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=)
                          9: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=)
                          10: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=)
                          11: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=)
                          12: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3b:90:d9:38:65:d4:e0:f9:8c:02:a1:fe:98:f4:a4:77:27:26:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Dec  2 04:15:55 2025 GMT
            Not After : Dec  5 16:19:55 2025 GMT
        Subject: CN=6CE36156432B224C667BD9955BFB648E263BCD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:d8:04:a9:19:43:51:2c:27:c6:da:e8:0f:
                    38:41:b6:cf:73:3b:64:0d:f7:26:9c:c4:80:ff:20:
                    32:5d:99:8c:7a:ba:d5:05:15:fb:ed:1a:4d:93:ba:
                    1c:a8:b0:b6:24:a1:2b:e6:43:73:38:f8:87:a9:24:
                    4f:3d:4f:df:7f:ec:85:d4:19:1c:cd:2e:59:49:f5:
                    6d:4c:a6:43:76:ef:0d:7d:13:7d:dc:21:bc:41:6e:
                    dd:70:24:1c:33:c8:92:fe:b2:80:ec:9e:1f:00:8f:
                    f0:b2:4b:af:b9:26:ee:3f:29:44:dc:af:c4:2d:e3:
                    62:21:27:30:5d:ac:62:18:02:3b:bb:54:b9:ef:43:
                    fb:16:f1:9a:4e:70:37:fe:ba:be:7c:5f:e9:c3:34:
                    5c:00:1e:1a:0a:41:6b:59:39:e0:f2:b2:3a:8c:4b:
                    3a:7c:37:99:4a:03:4c:68:93:07:44:78:cf:34:f3:
                    d8:ec:8b:19:32:19:bb:1a:d4:35:95:67:49:10:cf:
                    4b:39:30:63:f1:49:dc:77:5a:31:46:7c:b4:1a:66:
                    ba:24:fe:15:c7:55:e5:9f:4f:73:90:ca:fa:36:17:
                    ab:02:7a:c3:07:c2:d8:e4:30:c0:19:3e:06:f1:3e:
                    ae:2e:48:5f:a5:6c:a8:b7:25:eb:d0:4e:31:bd:6f:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E3:61:56:43:2B:22:4C:66:7B:D9:95:5B:FB:64:8E:26:3B:CD:9F
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:48:67:5f:9f:99:fb:ed:f5:82:37:af:93:5e:5c:2f:12:09:
         84:21:cc:f2:9c:18:75:d0:90:8b:0a:a1:9e:8a:aa:57:44:e5:
         85:ac:cf:7f:61:f3:0e:6d:5e:d0:e2:ea:af:66:d3:33:e3:d8:
         ff:bb:42:11:25:dc:2d:ec:a9:10:60:5e:b8:62:7e:53:8d:26:
         d5:0d:03:3d:58:8b:67:a8:7f:8b:3f:11:36:c0:48:c5:42:b3:
         f5:6c:f6:c0:bf:aa:99:20:8a:e9:b6:26:4b:1b:98:30:a6:f5:
         00:7a:b6:ab:6c:ef:bd:fd:d4:3d:bf:03:0d:8a:6c:da:76:c9:
         4a:f0:8b:fe:01:27:e3:2c:a8:f8:35:a6:9e:8c:d8:77:46:9c:
         d4:d5:39:c0:c0:1a:36:52:e7:f7:22:2a:64:3f:08:e7:9a:b7:
         c3:82:46:3c:75:ed:1e:97:c0:17:de:b0:8d:7d:e5:5c:4d:f6:
         64:e9:a8:b1:b5:e0:be:84:90:fb:43:a1:8e:b1:dd:69:1d:dc:
         82:cc:57:3f:aa:c5:3f:21:ff:cf:3a:3c:52:8c:fd:48:de:33:
         2f:9e:d8:3d:0e:a0:b0:43:3d:ad:14:33:20:9b:69:e4:e8:41:
         bd:a1:25:b9:7e:7e:66:5f:ae:ab:6e:fb:25:d2:34:42:23:42:
         ed:19:4a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:48 2025 by rpki-client