This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
File:                     342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json)
Hash identifier:          JrEl/uW6yE0hkKsNoTXbKp/N7PPGMm6hIkd4GIGsSUs=
Subject key identifier:   5C:7D:95:7F:4B:8E:61:B5:E1:E8:A6:89:1A:67:86:5A:88:33:12:B8
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Certificate issuer:       /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial:       76CE10C7AED6A1AD92BFBEE9C282D0EB22433FC9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
Manifest number:          0248
Signing time:             Mon 01 Dec 2025 08:51:19 +0000
Manifest this update:     Mon 01 Dec 2025 08:46:19 +0000
Manifest next update:     Thu 04 Dec 2025 14:38:19 +0000
Files and hashes:         1: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=)
                          2: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=)
                          3: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=)
                          4: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=)
                          5: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=)
                          6: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=)
                          7: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: 1apAtJz3S32HAB6E9bFlT1kA5l31l45uj9oZv4wIrMQ=)
                          8: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=)
                          9: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=)
                          10: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=)
                          11: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=)
                          12: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=)
                          13: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=)
                          14: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=)
                          15: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=)
                          16: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=)
                          17: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=)
                          18: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=)
                          19: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
                          rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 14:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ce:10:c7:ae:d6:a1:ad:92:bf:be:e9:c2:82:d0:eb:22:43:3f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
        Validity
            Not Before: Dec  1 08:46:19 2025 GMT
            Not After : Dec  4 14:38:19 2025 GMT
        Subject: CN=5C7D957F4B8E61B5E1E8A6891A67865A883312B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:4b:16:5f:fe:e2:38:fb:61:cf:a9:e3:2c:
                    ab:50:f4:67:2c:7a:ee:bb:4a:68:57:10:de:3f:3d:
                    58:17:83:ce:fc:62:d6:67:21:46:36:b2:fe:5a:56:
                    66:b2:38:3a:0c:28:60:7a:75:6a:4e:41:16:8d:4e:
                    44:cf:db:4c:ab:c3:c6:c6:1a:20:b7:c5:db:b6:1b:
                    e5:4d:69:4d:68:61:19:7f:50:d5:10:2a:26:4f:a5:
                    b4:81:26:d1:7e:81:83:99:a4:46:5d:30:2b:e9:7b:
                    38:74:70:e0:f4:ae:b9:33:a3:48:cd:db:14:b5:22:
                    f0:a8:3a:13:fd:bf:db:dc:c4:ee:c5:86:65:82:2a:
                    1e:ff:97:72:f6:3b:ff:3c:0e:14:c3:87:01:61:ad:
                    61:d5:6c:e7:09:78:98:78:f1:1d:f6:62:35:56:26:
                    27:c6:ad:e9:43:5c:9c:b2:16:d7:d1:34:69:5e:ac:
                    58:53:e1:fc:bf:2a:69:5a:cb:0e:34:ad:a6:18:48:
                    8d:df:94:3e:f1:07:84:c4:c6:68:df:27:84:d8:36:
                    b5:e0:87:25:6c:5e:be:20:b7:18:0b:97:03:36:f4:
                    24:a7:72:4b:40:5a:a6:c7:7c:bc:75:71:bb:7d:95:
                    86:c3:77:98:73:e7:e4:cf:07:cf:a0:99:f5:b4:05:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7D:95:7F:4B:8E:61:B5:E1:E8:A6:89:1A:67:86:5A:88:33:12:B8
            X509v3 Authority Key Identifier:
                keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:48:31:48:d8:d0:b3:b1:15:6a:78:ff:11:a4:6c:55:24:
         47:15:fb:16:91:9e:1e:93:f3:d0:dd:bf:4d:3e:db:76:4b:0c:
         70:15:3e:90:68:6a:07:3a:a5:06:72:bc:be:a0:a6:01:23:2e:
         ed:bb:cd:35:2d:e0:e6:58:1d:44:d7:6a:84:ae:bb:ea:bf:ff:
         65:05:7b:a2:e9:9a:05:ca:b2:fd:f5:61:7d:2a:f2:b2:c5:32:
         1b:c4:a6:96:51:db:8b:2b:03:ec:93:76:b1:46:c7:a6:73:bb:
         4e:ba:34:bb:9d:0b:63:d6:5f:2c:02:05:30:8d:81:67:52:4b:
         26:8f:0b:c4:eb:99:51:56:1c:b1:35:20:15:9b:bc:4c:6f:62:
         c9:4b:82:da:13:9d:28:1c:3b:bd:9f:49:d6:5b:2d:4e:59:a3:
         1f:98:79:73:b5:9a:b8:99:0d:8a:7f:47:29:cb:e5:cf:ab:dc:
         59:b2:37:7e:5c:bb:04:fb:f4:a0:c3:49:45:b2:f7:43:2c:00:
         cc:8d:63:c2:d0:b7:d3:16:6f:59:02:13:ef:c9:6b:a7:91:b7:
         e2:f1:64:60:7f:bc:8c:3c:33:d1:9b:28:70:ff:f4:54:0a:e0:
         68:8a:b9:6a:41:73:2e:d9:46:24:a5:91:f0:bc:40:52:86:64:
         01:64:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:41 2025 by rpki-client