This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
File:                     42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json)
Hash identifier:          re0FERRoBgDShd8QOgTG64lhG9rpqhklfXlyj+hz+FE=
Subject key identifier:   7A:FD:F6:42:66:32:43:CC:94:20:AE:2E:A0:92:5E:37:04:57:90:41
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       7259F1E4D5C2AC1997BD6ABD953C466C8D94D906
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
Manifest number:          0355
Signing time:             Tue 16 Dec 2025 11:30:46 +0000
Manifest this update:     Tue 16 Dec 2025 11:25:46 +0000
Manifest next update:     Fri 19 Dec 2025 17:01:46 +0000
Files and hashes:         1: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=)
                          2: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: YNK7AdxqkfD//9s9NaOBIF/zk9kGpoNnaTU/YlsNXE0=)
                          3: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=)
                          4: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=)
                          5: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=)
                          6: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=)
                          7: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=)
                          8: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=)
                          9: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=)
                          10: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=)
                          11: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=)
                          12: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=)
                          13: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=)
                          14: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=)
                          15: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=)
                          16: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=)
                          17: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=)
                          18: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 17:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:59:f1:e4:d5:c2:ac:19:97:bd:6a:bd:95:3c:46:6c:8d:94:d9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: Dec 16 11:25:46 2025 GMT
            Not After : Dec 19 17:01:46 2025 GMT
        Subject: CN=7AFDF642663243CC9420AE2EA0925E3704579041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:45:bf:f6:b2:b6:52:b2:18:f0:27:83:f5:
                    e6:31:41:bd:5a:c3:05:19:73:c2:ec:31:03:f9:f2:
                    25:93:2f:67:65:77:ef:1d:9b:8e:75:48:1a:e9:4f:
                    f1:be:e7:0b:6a:c1:7f:2a:4a:5c:1f:55:48:87:2d:
                    de:a7:d4:5d:fc:0c:6e:dc:8f:02:d9:2a:fb:91:4a:
                    92:6f:5e:67:19:a5:36:2f:e2:89:68:b8:9e:42:a5:
                    5b:44:5d:ed:05:a1:c1:8c:40:59:94:e3:14:b9:66:
                    2e:02:1c:e5:0c:66:2c:c9:c7:d9:38:95:57:4c:82:
                    7d:0b:93:b7:51:d0:6a:3d:b2:4d:41:6e:b7:39:a9:
                    93:27:99:ec:19:c7:b9:7c:ab:df:45:1d:a2:1e:ba:
                    2b:ae:7d:e0:2b:07:34:2d:c9:88:9a:9a:30:de:65:
                    13:e7:f5:be:88:0f:8e:c1:a3:1c:7e:84:ff:d5:df:
                    0e:1c:ef:12:b4:fd:76:8b:e2:c7:49:c7:65:da:db:
                    e8:bd:6a:97:bb:65:52:25:b0:66:dc:1d:59:4a:9c:
                    03:47:6e:1b:0f:46:58:0e:2a:0e:d6:8c:8c:7e:b0:
                    a3:b7:11:a8:13:22:0e:44:75:b1:60:ef:24:1e:7e:
                    95:b7:63:4d:e3:52:31:42:60:54:d8:d4:4a:42:75:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:F6:42:66:32:43:CC:94:20:AE:2E:A0:92:5E:37:04:57:90:41
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:99:26:76:f7:57:1c:48:eb:9e:f6:ff:a3:53:81:50:f3:75:
         d2:e2:9b:c3:bb:d7:af:12:14:c2:58:3f:05:18:28:c7:19:c2:
         0c:4f:c4:34:cb:6c:f7:c4:c2:88:07:55:01:e5:8f:d2:f2:ea:
         91:07:ec:53:56:ad:21:14:00:50:b1:a8:af:2c:f3:67:03:5b:
         13:d5:de:0d:47:8a:c7:8c:d2:60:0f:f1:06:45:ff:08:c7:e1:
         98:7e:a0:18:65:b9:97:23:44:53:a3:75:41:4b:84:05:48:7e:
         0e:58:50:f4:34:f5:8c:3a:41:2b:ed:bd:a2:e2:cf:84:a3:8d:
         94:58:17:ec:5f:38:d6:a7:df:23:88:5c:43:3e:fb:19:b8:1e:
         99:f1:d8:78:49:36:52:a7:58:f4:47:84:b2:c8:27:84:84:0a:
         0e:03:53:9e:f0:63:b2:5f:87:5a:34:e8:4f:bc:83:34:45:36:
         00:dd:b2:88:d7:71:d3:1e:9f:8b:05:c9:2e:71:90:f4:09:d2:
         1c:e3:61:36:5a:0c:98:d2:bb:54:9a:38:15:e2:a2:aa:db:68:
         b9:6a:bb:0d:d1:77:b9:01:5c:c5:c2:6a:c9:26:75:d0:41:16:
         ea:11:ee:6f:78:b2:8d:97:9e:44:b6:a8:d5:c1:12:de:cd:b0:
         a7:c7:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:38:28 2025 by rpki-client