This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
File:                     639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json)
Hash identifier:          LsQL4OVnCjZXx/DmOv9U9uj3Sw4kj2OQH99yNJEoUuw=
Subject key identifier:   91:D2:30:2E:0D:D0:7B:0A:76:44:F4:AD:8A:3C:C7:DB:DC:11:84:D3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       1ADE17A6C11385E392C7EE7E74039E19C3E05034
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
Manifest number:          0D74
Signing time:             Mon 15 Dec 2025 12:51:57 +0000
Manifest this update:     Mon 15 Dec 2025 12:46:57 +0000
Manifest next update:     Thu 18 Dec 2025 21:19:57 +0000
Files and hashes:         1: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=)
                          2: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=)
                          3: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=)
                          4: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=)
                          5: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=)
                          6: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=)
                          7: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=)
                          8: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=)
                          9: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=)
                          10: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=)
                          11: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=)
                          12: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=)
                          13: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: 0FoOhtpmoSE3MA/zQQ3+GGx28S3ms2tD1awJ6fnxnzY=)
                          14: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=)
                          15: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=)
                          16: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
                          rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 21:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:de:17:a6:c1:13:85:e3:92:c7:ee:7e:74:03:9e:19:c3:e0:50:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Dec 15 12:46:57 2025 GMT
            Not After : Dec 18 21:19:57 2025 GMT
        Subject: CN=91D2302E0DD07B0A7644F4AD8A3CC7DBDC1184D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:c7:03:6c:4b:2f:76:a9:58:53:03:29:ad:
                    6e:cf:fc:3b:ca:0a:7d:a3:d4:5e:a1:85:10:4a:29:
                    bc:7e:2a:93:15:03:f8:b3:13:c4:2f:96:a0:d0:85:
                    f9:7f:09:26:10:9d:51:28:e6:f7:46:16:88:72:2b:
                    d3:49:8c:9c:fa:ba:81:aa:eb:a7:ae:f0:49:89:15:
                    2c:01:8a:dc:d3:28:76:0c:ee:c5:ff:13:3e:21:9f:
                    25:49:c8:dc:45:85:7b:a6:57:3a:69:04:13:9c:50:
                    fe:87:66:86:84:19:3f:e1:6b:3e:f7:33:23:05:b1:
                    b5:89:00:61:79:4a:18:52:83:f4:7d:69:27:c3:e3:
                    8c:df:8d:3c:60:aa:ca:6a:64:9d:7c:76:66:a2:6d:
                    c6:2e:83:f2:e6:87:67:4e:39:4e:bf:81:db:c7:b3:
                    92:82:bd:f9:b1:ba:a8:95:cc:9b:bf:54:43:10:a6:
                    50:d5:fc:36:a9:e8:57:be:d3:fd:c7:cc:ff:c3:6e:
                    dd:31:41:d1:cd:76:dd:df:1e:7a:11:73:08:4b:b2:
                    7b:d3:e9:9a:a6:86:67:92:8b:25:2e:42:ef:bf:8e:
                    38:57:6d:27:91:35:bc:98:d6:64:48:57:92:64:aa:
                    9e:3f:69:c7:5b:96:c2:9e:49:53:bf:db:67:7f:48:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D2:30:2E:0D:D0:7B:0A:76:44:F4:AD:8A:3C:C7:DB:DC:11:84:D3
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:dd:03:9d:36:3e:19:5c:97:a5:c2:f5:14:df:9c:97:49:
         3f:b1:f8:66:fb:60:a4:0e:25:56:b6:8e:78:10:e5:3e:b7:03:
         c6:ae:77:f2:dc:be:82:ad:c5:2b:87:2b:b6:95:60:ba:2d:c5:
         03:02:e1:d8:27:68:b9:dc:2d:c4:77:e1:be:a2:c3:3c:2b:fb:
         87:68:97:0a:48:97:ba:8e:5b:53:de:43:4d:92:9d:9b:be:e2:
         13:f2:01:87:24:e3:1a:ef:4f:0e:68:1a:d4:9a:95:d6:65:96:
         7c:02:3a:98:47:76:59:fc:e9:ae:96:f3:8a:37:76:63:a7:94:
         4a:7b:a8:04:7b:fe:62:7e:54:29:ea:ef:ae:58:57:da:9f:83:
         93:09:02:a5:40:1f:43:00:dd:b8:79:6f:2b:f8:a9:81:97:cc:
         1f:b2:33:28:94:c8:b7:f2:9e:a4:69:6c:a2:be:d3:ce:56:7f:
         f5:fe:ad:3b:fe:3c:8b:55:06:79:86:b6:81:ba:1b:5b:33:71:
         26:c9:b9:23:77:a6:90:39:60:cb:31:a6:8f:5f:12:cb:ac:d4:
         05:9f:7f:10:56:23:66:dc:ea:17:4c:f9:0d:4f:67:75:be:65:
         41:ac:53:ee:ce:7b:a1:78:97:1c:ae:1a:d4:1f:80:42:99:f7:
         a7:1c:9e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 21:52:21 2025 by rpki-client