This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
File:                     116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json)
Hash identifier:          h8zuTSazqc4ldNt5S7Yf9alpZdpkEfO4HCKceppz2Ig=
Subject key identifier:   72:D5:57:E3:6E:D1:86:4E:80:98:D5:30:CF:44:2E:ED:87:BE:0D:98
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       1C3C3746647021D2D27F5C9DC9D61599D0A0A456
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
Manifest number:          053D
Signing time:             Mon 01 Dec 2025 14:50:05 +0000
Manifest this update:     Mon 01 Dec 2025 14:45:05 +0000
Manifest next update:     Fri 05 Dec 2025 01:27:05 +0000
Files and hashes:         1: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: CVnoeLSorYo08bpj54Qj+jM+dBFRz8ijfrlUgcjzpQw=)
                          2: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=)
                          3: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=)
                          4: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=)
                          5: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=)
                          6: 34332e3234372e32312e302f32342d3234203d3e20313331373830.roa (hash: 75jsZ2/RYGs14ieUtfuhtsNjuwyC8On82jjkJYD2UMY=)
                          7: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: rkvfltc1XeXNlZR/3yH5i2rDhAOYYmSdXeT/IyFdjyk=)
                          8: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=)
                          9: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 01:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3c:37:46:64:70:21:d2:d2:7f:5c:9d:c9:d6:15:99:d0:a0:a4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Dec  1 14:45:05 2025 GMT
            Not After : Dec  5 01:27:05 2025 GMT
        Subject: CN=72D557E36ED1864E8098D530CF442EED87BE0D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:59:4a:0c:90:a8:29:46:23:73:42:9f:67:
                    27:3f:b1:12:34:87:a8:ef:da:73:c0:5f:82:bc:85:
                    8c:cc:38:3d:01:2c:52:bc:10:ce:92:ee:75:bf:fa:
                    0a:e0:a7:70:9f:95:25:67:0d:73:8d:9b:95:c6:18:
                    ad:5e:15:1b:a4:10:c6:fc:a1:d5:ca:aa:65:cd:55:
                    e2:ab:78:26:11:4d:0e:2b:d3:ff:c0:54:90:07:5e:
                    8f:aa:84:8b:06:ca:df:74:36:2d:60:94:8f:d5:2e:
                    53:62:a8:70:57:ac:7f:01:45:4c:ae:bc:5d:69:d2:
                    6c:ec:b2:57:04:1c:79:6c:9a:12:5b:94:7d:6a:79:
                    10:c0:78:64:de:9a:4f:cd:a2:e2:e0:81:f7:10:46:
                    06:25:d9:52:cb:b0:0f:2b:68:e5:5f:f6:0a:2d:51:
                    03:96:74:46:20:3b:3f:5b:69:77:45:53:d9:86:eb:
                    07:de:56:02:dd:5e:43:be:87:65:a8:32:78:b2:ad:
                    cf:95:bf:f0:cc:36:0e:46:65:e8:59:ba:9d:19:dd:
                    a9:de:13:d7:38:36:b8:37:7e:d7:06:6e:3f:8a:04:
                    e6:72:c5:89:ad:60:36:16:55:66:20:83:94:41:9b:
                    ae:60:b6:96:a0:36:7d:12:5b:7d:38:bd:76:13:47:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D5:57:E3:6E:D1:86:4E:80:98:D5:30:CF:44:2E:ED:87:BE:0D:98
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:10:21:4b:18:19:ff:fe:d9:0c:3b:e8:48:27:39:26:fb:cb:
         8e:71:72:e1:a1:71:2b:6d:29:68:7e:1c:79:c6:46:c9:da:be:
         9e:55:a4:b8:0d:c8:08:26:e3:a9:29:26:e4:7f:da:a6:8e:c8:
         f6:83:87:94:e6:95:7c:7e:34:31:34:09:ae:a2:04:dc:e5:3a:
         1f:09:89:1d:6f:56:af:2d:d7:5f:cc:4a:36:b2:5d:5c:d6:5f:
         f9:59:34:80:ce:c5:08:94:fc:a2:5d:55:17:30:85:ca:49:bb:
         93:68:10:eb:c9:ca:73:c6:41:13:f4:e2:46:c8:3b:07:70:df:
         df:8b:df:63:29:89:1d:74:fd:06:9e:9a:35:67:17:53:74:09:
         0c:65:69:ef:0e:06:d6:ad:df:a1:84:47:5f:7e:06:2a:3f:dd:
         05:37:54:61:a0:70:c2:be:c9:c4:56:69:fe:05:13:69:b5:9d:
         9b:70:61:b1:59:34:97:a0:bf:41:5e:79:0e:fb:ce:3b:0a:28:
         a5:49:ff:f7:8d:b5:27:bb:69:c2:35:71:54:c1:e0:87:ad:81:
         13:3d:d8:79:a0:0b:62:2b:b2:9e:68:35:7a:af:6c:98:40:92:
         e7:19:7a:a4:d5:9e:91:a3:6b:50:07:74:a6:c3:d2:ff:4f:3c:
         9b:55:0c:da
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHDw3RmRwIdLSf1ydydYVmdCgpFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC
MjUwM0EzODAeFw0yNTEyMDExNDQ1MDVaFw0yNTEyMDUwMTI3MDVaMDMxMTAvBgNV
BAMTKDcyRDU1N0UzNkVEMTg2NEU4MDk4RDUzMENGNDQyRUVEODdCRTBEOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FFlKDJCoKUYjc0KfZyc/sRI0
h6jv2nPAX4K8hYzMOD0BLFK8EM6S7nW/+grgp3CflSVnDXONm5XGGK1eFRukEMb8
odXKqmXNVeKreCYRTQ4r0//AVJAHXo+qhIsGyt90Ni1glI/VLlNiqHBXrH8BRUyu
vF1p0mzsslcEHHlsmhJblH1qeRDAeGTemk/NouLggfcQRgYl2VLLsA8raOVf9got
UQOWdEYgOz9baXdFU9mG6wfeVgLdXkO+h2WoMniyrc+Vv/DMNg5GZehZup0Z3ane
E9c4Nrg3ftcGbj+KBOZyxYmtYDYWVWYgg5RBm65gtpagNn0SW304vXYTR6K/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUctVX427Rhk6AmNUwz0Qu7Ye+DZgwHwYDVR0j
BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx
MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw
M0EzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1
ZjctZGZlN2M1NzIwNDg2LzAvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4
RUFCMjUwM0EzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGgQIUsYGf/+2Qw76EgnOSb7y45xcuGhcStt
KWh+HHnGRsnavp5VpLgNyAgm46kpJuR/2qaOyPaDh5TmlXx+NDE0Ca6iBNzlOh8J
iR1vVq8t11/MSjayXVzWX/lZNIDOxQiU/KJdVRcwhcpJu5NoEOvJynPGQRP04kbI
Owdw39+L32MpiR10/QaemjVnF1N0CQxlae8OBtat36GER19+Bio/3QU3VGGgcMK+
ycRWaf4FE2m1nZtwYbFZNJegv0FeeQ77zjsKKKVJ//eNtSe7acI1cVTB4IetgRM9
2HmgC2Irsp5oNXqvbJhAkucZeqTVnpGja1AHdKbD0v9PPJtVDNo=
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:32:32 2025 by rpki-client