This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
File:                     DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json)
Hash identifier:          WSUzetrf351jEwWinzTFd8dBUImY+xPFRjviKxWfWMg=
Subject key identifier:   7D:2D:CB:CA:7D:C5:3F:60:1F:F0:E6:71:4F:2A:81:92:1A:45:86:29
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Certificate issuer:       /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial:       6ED5F010C7222EABD5C6A43758C713CB3991901F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
Manifest number:          0531
Signing time:             Thu 11 Dec 2025 09:40:43 +0000
Manifest this update:     Thu 11 Dec 2025 09:35:43 +0000
Manifest next update:     Sun 14 Dec 2025 11:32:43 +0000
Files and hashes:         1: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=)
                          2: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: hvyVRP928YY/Y8wqRhzORyXDpuH5LTPDcRW+9gCFJN4=)
                          3: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=)
                          4: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=)
                          5: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=)
                          6: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=)
                          7: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=)
                          8: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=)
                          9: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
                          rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 11:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d5:f0:10:c7:22:2e:ab:d5:c6:a4:37:58:c7:13:cb:39:91:90:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
        Validity
            Not Before: Dec 11 09:35:43 2025 GMT
            Not After : Dec 14 11:32:43 2025 GMT
        Subject: CN=7D2DCBCA7DC53F601FF0E6714F2A81921A458629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e8:4a:8d:43:05:2f:52:c7:55:8a:d7:d8:82:
                    ca:7d:d5:07:d5:3b:b5:41:7f:88:08:68:df:dd:8a:
                    26:af:9b:37:c5:6e:1d:93:a6:34:5c:bb:ca:97:db:
                    d6:22:4a:d9:17:86:79:39:c1:cd:0a:a1:1d:cc:0a:
                    f6:dd:47:6e:e3:f8:06:8f:ac:de:8d:7f:10:2c:f1:
                    54:3d:ec:f6:10:08:56:ab:14:12:87:47:6c:b9:31:
                    0b:1d:d9:59:d5:b7:63:96:38:0d:9d:f3:9d:c3:9e:
                    61:21:97:41:25:bb:f1:7c:71:45:3b:50:f3:5f:97:
                    f9:3e:55:36:b2:8c:99:f2:48:69:f1:ae:60:a2:60:
                    f8:01:a6:6c:0a:b8:63:55:8d:0a:12:a9:ee:bc:a5:
                    eb:1f:e5:04:64:d1:36:73:45:e2:e7:ec:83:99:66:
                    32:26:4f:c9:1d:f0:57:3d:b9:c6:26:c0:7e:a3:a2:
                    a1:0d:39:ec:c2:41:aa:1b:ef:9b:39:6f:18:43:a7:
                    ac:d4:7a:df:f8:41:1b:54:20:b0:20:ee:d5:8e:49:
                    5f:09:bd:00:47:eb:b5:37:cd:58:d6:3b:78:64:24:
                    d4:5a:f3:a6:10:be:38:a4:cd:3d:82:71:b5:0d:8e:
                    99:09:0c:58:73:57:a7:1d:95:59:c8:fe:ba:f4:79:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2D:CB:CA:7D:C5:3F:60:1F:F0:E6:71:4F:2A:81:92:1A:45:86:29
            X509v3 Authority Key Identifier:
                keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:34:b9:f0:a8:f5:38:6c:82:9a:f8:e9:a9:53:89:33:07:3f:
         c5:a1:b7:4e:8e:4d:af:a1:53:f0:ec:a4:a5:28:d3:50:e5:11:
         40:81:26:53:7e:21:d9:92:c2:68:65:89:c1:c2:d4:17:73:0b:
         51:fc:3b:a5:85:24:6f:12:c3:23:d9:f0:4b:a1:37:03:3b:7b:
         f3:57:94:cc:da:71:fb:cc:b3:97:7c:2b:25:fe:df:0a:61:c0:
         fa:71:7b:d7:72:71:63:dc:18:f8:6a:97:19:41:9a:75:d8:b4:
         04:46:3e:4e:94:de:0f:ed:ee:02:64:75:c0:7f:70:eb:80:f7:
         24:63:7b:33:5e:4a:40:a6:54:1d:ab:81:c3:3c:f8:89:d0:e7:
         36:1b:82:9f:db:73:50:03:d7:f3:46:af:0d:ae:cb:b0:43:db:
         84:c8:bb:36:f4:ee:5a:c4:a8:b7:07:19:49:d5:af:35:d2:e7:
         a5:e9:d5:d2:7b:fd:af:a4:de:46:ab:24:6b:18:2a:83:a6:02:
         88:ea:69:20:72:86:4a:53:a0:a4:76:35:f2:75:0c:07:54:19:
         57:e5:f5:93:4d:10:fd:21:51:d8:89:11:21:0c:38:71:cf:65:
         8b:95:c9:67:a7:61:c5:5b:74:d9:06:17:5d:ca:7f:8a:08:44:
         e5:d0:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:04:37 2025 by rpki-client