This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
File:                     4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json)
Hash identifier:          q3ODSN0+Fz/5uQyN8JICi3Goii91kGUoWucP8KmnIsc=
Subject key identifier:   8D:F0:C0:B8:D3:60:A4:25:85:99:E2:A9:50:A2:F3:47:2A:B6:7E:87
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Certificate issuer:       /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial:       63F892571C32A2DB6569AFA8B1F81DCA8497F5D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
Manifest number:          052B
Signing time:             Mon 01 Dec 2025 12:32:03 +0000
Manifest this update:     Mon 01 Dec 2025 12:27:03 +0000
Manifest next update:     Thu 04 Dec 2025 19:35:03 +0000
Files and hashes:         1: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=)
                          2: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=)
                          3: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=)
                          4: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: dKUx288pFoz4Qf5wg49azNFbgxkgYnq60Z/Hnx3FNQ4=)
                          5: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=)
                          6: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
                          rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 19:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f8:92:57:1c:32:a2:db:65:69:af:a8:b1:f8:1d:ca:84:97:f5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
        Validity
            Not Before: Dec  1 12:27:03 2025 GMT
            Not After : Dec  4 19:35:03 2025 GMT
        Subject: CN=8DF0C0B8D360A4258599E2A950A2F3472AB67E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c2:e7:82:98:9a:02:cd:c3:ef:b8:3b:dc:8e:
                    3b:e1:f1:92:f8:ea:59:5e:a1:22:a3:70:da:6f:bf:
                    48:87:0f:59:f8:a7:3e:8a:64:41:46:50:60:1f:93:
                    b4:6b:54:d4:5b:ce:9b:77:92:ba:53:90:df:9d:80:
                    d9:0d:f2:8a:76:3d:de:b6:1a:b0:3f:f2:25:8b:96:
                    9a:bd:5b:3a:17:19:36:31:b7:bb:83:51:5b:dd:df:
                    99:45:0a:4d:64:89:48:af:5b:91:b1:46:b9:f6:e5:
                    23:ca:5b:cf:5a:d5:6b:60:54:e5:7c:af:c0:aa:45:
                    76:bd:28:67:34:e2:47:01:da:ce:e5:09:5d:9b:58:
                    a9:d0:f1:84:36:39:42:1d:95:b4:55:ee:9a:f6:e2:
                    e6:81:a6:3d:98:47:e1:3e:5b:9e:8a:a2:93:76:da:
                    be:74:a5:14:80:52:2b:11:59:c8:10:e1:9b:7c:95:
                    2e:89:85:83:44:4b:31:2c:8e:68:0e:c3:19:08:14:
                    ba:1e:b7:3e:c1:52:ce:b3:f3:e8:df:87:72:6b:37:
                    ee:7d:39:18:d1:19:5e:59:23:7b:49:66:25:df:14:
                    9a:2f:14:5c:7d:6c:58:ae:e0:d1:00:56:da:4a:15:
                    62:ce:d6:0b:cc:e4:b6:e0:3a:64:80:ed:8a:25:1d:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F0:C0:B8:D3:60:A4:25:85:99:E2:A9:50:A2:F3:47:2A:B6:7E:87
            X509v3 Authority Key Identifier:
                keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b8:a6:f2:c2:67:89:d9:6c:8e:c4:ec:e8:78:33:ea:1d:83:
         96:65:70:60:17:2a:a8:54:bd:19:6c:7a:96:4a:dd:80:c8:7b:
         13:6a:88:d3:d6:79:69:e8:b3:d4:c1:32:9b:72:99:f2:f7:55:
         4f:e2:7c:1b:a8:26:6b:ce:a6:03:bf:89:0e:fe:c0:bc:77:6b:
         c1:ad:cd:12:db:c9:de:03:28:48:76:e1:0e:2a:6b:be:87:2b:
         dc:5b:7f:27:26:f1:c4:78:9c:b8:6b:f2:7a:b2:7f:54:65:f6:
         44:0e:98:73:40:4c:38:a6:4e:d2:2b:ea:05:19:df:ce:78:1b:
         a8:41:a2:c0:07:01:45:7b:60:68:e7:12:52:00:61:50:2c:c8:
         f7:26:3b:c2:d7:cb:4a:94:ef:0c:05:ca:a7:dd:4c:56:81:0a:
         59:05:fc:d3:75:3f:9d:f2:f7:32:df:cc:62:b1:d6:d9:b4:45:
         22:ad:cb:f7:b6:9c:c3:61:d4:bd:19:8f:a3:23:80:42:bf:db:
         0f:6b:59:42:20:9b:6b:d8:23:4d:29:99:41:af:f8:28:13:df:
         85:25:66:36:59:26:6f:05:82:65:5d:ba:4f:6b:6e:b6:d6:5c:
         31:9a:46:ca:15:da:5d:b0:39:6d:fe:35:1e:96:a4:2f:1a:25:
         9b:93:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:19 2025 by rpki-client