This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
File:                     981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json)
Hash identifier:          XizwHNlhAeRYZ+NuTvJ1xHFSQWOxljVqPp/kur12QME=
Subject key identifier:   05:47:56:72:D6:92:43:76:E0:F9:FE:E6:BD:08:BA:0D:22:D6:71:35
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       459B1B05A5036E2095E366F4C6F3378DE8AFD089
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
Manifest number:          059A
Signing time:             Wed 03 Dec 2025 10:31:24 +0000
Manifest this update:     Wed 03 Dec 2025 10:26:24 +0000
Manifest next update:     Sat 06 Dec 2025 11:38:24 +0000
Files and hashes:         1: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=)
                          2: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=)
                          3: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: gGq3gtPXXpT8qmppXJpdYMGRNCe8MtmuCS9LRZ9VUgI=)
                          4: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=)
                          5: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=)
                          6: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=)
                          7: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=)
                          8: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: slxJrksLG/ugoCdz0xpYsZxbcTeP+M/3OR1Tilc8hic=)
                          9: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=)
                          10: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=)
                          11: 3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa (hash: CzsB1i2n8blmvNya3o9w8kwH8dKsWQzSUJDKNEk5v+Y=)
                          12: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: wu8diV5jdWuux9C39Tvhu1GJ88vcA6Du/7ncHsnVM8k=)
                          13: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=)
                          14: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=)
                          15: 3230332e38342e3133362e302f32342d3234203d3e20333935373933.roa (hash: RFhrg4bv5ZNSWmuLud5F/oLaU4cTEMAfMqrRIOATFAw=)
                          16: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=)
                          17: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: L7B4TlCu6+XGwvVIhFVxD06j+oz/txAbz7A9RLeSSuk=)
                          18: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=)
                          19: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: XBonl+MDq5JKpWntnVm6TMfayZbg8tQu2RWN6XgAyJw=)
                          20: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=)
                          21: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: 4ViydsmHzZGRIjYcqWumsDDhB/3EARlf8fEVwdK7Adk=)
                          22: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: u/hRr1E7iAZVxPG4K+GYy4e7bkPpI7qrdTq8mm4/3Ao=)
                          23: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: T9tknLjTeQ+7ZUfv8SNf4lCYZ42qRdSxxizSEJYn0CA=)
                          24: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 11:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:1b:05:a5:03:6e:20:95:e3:66:f4:c6:f3:37:8d:e8:af:d0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Dec  3 10:26:24 2025 GMT
            Not After : Dec  6 11:38:24 2025 GMT
        Subject: CN=05475672D6924376E0F9FEE6BD08BA0D22D67135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:a9:08:94:e5:7a:cf:8d:b3:1f:bc:03:73:
                    2e:1b:4f:45:c3:b4:52:e3:a4:2a:2e:48:9f:c2:f3:
                    5f:bf:3b:7a:cd:de:5f:47:1c:1a:af:1c:79:2d:ff:
                    e1:b4:67:00:27:74:79:23:24:b4:76:ff:34:17:f9:
                    87:38:57:4b:a5:e5:11:b9:0d:1d:11:9f:ae:28:52:
                    52:b6:6b:bc:30:58:89:f4:eb:66:e6:e9:0c:e9:0c:
                    db:03:ec:98:64:79:d4:84:30:32:93:15:01:c8:3c:
                    66:38:fa:6c:62:91:c6:52:4b:9e:6e:48:d5:ac:49:
                    9f:f2:9c:31:e9:52:98:20:b9:58:bd:86:5f:42:08:
                    b8:b7:70:f4:19:e2:55:29:a1:5c:95:9e:47:3a:81:
                    e8:d9:05:ba:aa:1e:fc:82:3d:3d:c4:cc:76:80:8c:
                    c1:5c:26:22:1f:1e:2c:87:d0:af:32:79:bb:bc:bb:
                    2a:c2:76:57:37:f5:0d:78:aa:9f:1c:2f:48:98:a6:
                    b2:6d:32:a8:5d:8b:df:06:a9:1c:35:91:50:7f:d0:
                    fb:f8:cd:2f:e2:4c:ce:3c:89:f7:53:14:1e:0c:69:
                    6e:5f:eb:a2:60:d4:25:87:e6:7c:c6:2e:ea:76:af:
                    fa:a5:c1:e9:7f:6e:e8:3a:f5:73:ab:20:44:f9:44:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:47:56:72:D6:92:43:76:E0:F9:FE:E6:BD:08:BA:0D:22:D6:71:35
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:51:b7:00:eb:d8:9a:f8:2e:bc:87:96:d8:9a:37:5e:55:a6:
         59:b5:b7:7a:29:72:01:1e:8d:b4:5c:09:0a:93:27:d0:1d:f0:
         d6:8e:0f:47:25:1f:f4:a3:6d:95:ad:bb:cc:f9:41:0d:55:35:
         7d:4c:b9:74:12:2b:80:cd:39:c7:62:f1:0a:a0:93:0c:30:33:
         a7:85:4f:be:23:33:05:a6:52:e3:d5:fd:bb:dc:a0:36:7b:d3:
         c3:2b:94:a0:67:05:68:1d:ab:b1:fb:c5:2d:ca:23:d9:43:4a:
         26:16:45:95:65:59:f9:e5:ea:e9:fe:e8:4c:5b:9c:cc:7c:78:
         86:88:7f:f2:4a:53:36:02:53:90:aa:56:59:24:cb:d1:fc:21:
         a0:53:92:a2:a3:7a:de:c3:34:c4:f4:cc:0b:0d:1d:bf:27:a5:
         18:00:3b:17:de:5e:69:84:b8:8b:a5:0d:37:c3:85:59:a6:d8:
         f5:cc:34:81:69:3d:78:90:db:a9:67:b1:0f:9e:32:55:0f:a5:
         b4:be:da:05:e8:db:97:61:04:2d:73:07:f2:09:15:99:23:7d:
         e0:6c:53:72:0c:92:04:77:c6:19:aa:ae:6e:97:41:78:98:3c:
         52:38:e5:c6:f9:86:c9:64:cb:1a:32:fc:fd:b9:11:4f:b7:ed:
         a6:92:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:52:35 2025 by rpki-client