This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
File:                     BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft (raw, json)
Hash identifier:          PZjwUCL5Bn7SsBCJCr3etpDYHi4/5JLDGHnIEdrLmGQ=
Subject key identifier:   46:29:C2:99:B5:3C:9D:39:37:5F:79:A1:BC:7F:AA:28:EC:0D:CE:9C
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       495A9BAD2C1850F59A99DE13BB8E782096E83D5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
Manifest number:          052B
Signing time:             Tue 02 Dec 2025 03:41:17 +0000
Manifest this update:     Tue 02 Dec 2025 03:36:17 +0000
Manifest next update:     Fri 05 Dec 2025 11:18:17 +0000
Files and hashes:         1: 323430333a323730303a31303a3a2f34382d3438203d3e203338353030.roa (hash: 3E5JAaPCnmY7zISSQ4gI8lzsfCOHDli32AP+3Nlaqx8=)
                          2: 323430333a323730303a343a3a2f34382d3438203d3e203338353030.roa (hash: Has9KhYZW/xL+AZ5Y86DT/rX9uV6ZdOQ3QRaKxgL1+g=)
                          3: 323430333a323730303a373a3a2f34382d3438203d3e203338353030.roa (hash: zom4OgHCT9yNR9s7PClSziJLNh/98AcRHADEEh70B44=)
                          4: 323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa (hash: QNOvqxPhnejQxGTKHiQXSiXfIuY1m87nHG2q2XmKahg=)
                          5: 3133372e35392e31322e302f32342d3234203d3e203338353030.roa (hash: flQKP/0naoXCI/90O73XuvucNpqyALJ5YVya2pQLkEw=)
                          6: 3133372e35392e31342e302f32342d3234203d3e203338353030.roa (hash: 0fv19luagoO93f5fwpQzyxrCgwGajNrOA8tDwWa++20=)
                          7: 323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa (hash: in6zkVgSo1zvq2LTLhVOqlCHjB8xLXn2xL9+G3wkap0=)
                          8: 3131362e36382e3235322e302f32342d3234203d3e203338353030.roa (hash: vqAXc/V8UGRafSTW/TKjmRMeoC5nQdooNvEc7Q7KX+Q=)
                          9: 323430333a323730303a393a3a2f34382d3438203d3e203338353030.roa (hash: YrLtsOYvp+DPw1cXnGNExzyx3eWKJFFV1BLJsck7tXI=)
                          10: 323430333a323730303a353a3a2f34382d3438203d3e203338353030.roa (hash: dkBm1uq0fOeNnS/XAl8fOwdP51OmJH2MKhTJVDaflPk=)
                          11: 3130332e3234342e33372e302f32342d3234203d3e203338353030.roa (hash: CR1it/5lcj5mKjbJVyhsPIojVY8ODCkmMaMNHWrImtQ=)
                          12: 323430333a323730303a343030373a3a2f34382d3438203d3e203338353030.roa (hash: GOMGqpabFLARAkTD3/79W716x+tCxTdb6049snwD2sY=)
                          13: 323430333a323730303a343030313a3a2f34382d3438203d3e203338353030.roa (hash: KUe9YItWJewDr+vCEqi/EWllhXguJY0TmzIo3kUmGpg=)
                          14: 3133372e35392e31332e302f32342d3234203d3e203338353030.roa (hash: eSUzjWuiojseXg64akzIRz5XswNmVhnqy1cUbaNq3YA=)
                          15: 323430333a323730303a323a3a2f34382d3438203d3e203338353030.roa (hash: 0t+sP9mMUayz06wxXRa0Zlci2ba1YMNRtNd8apwlSzo=)
                          16: 323430333a323730303a3a2f34382d3438203d3e203338353030.roa (hash: C7t3QQh/DTqZqDmxOH5Nzo0bVmfi2oIbzbzkt/a9NWE=)
                          17: 3131362e36382e3234392e302f32342d3234203d3e203338353030.roa (hash: oY5bwkHOZ5o/T4nyqHVk+QlZTq6zSV5WkYvYpvg7OW0=)
                          18: 323430333a323730303a343030383a3a2f34382d3438203d3e203338353030.roa (hash: lU+XzrpXlPGqlVGdSD9IV3Pgign0OrucSJ9ueYpQFA4=)
                          19: 3130332e3234342e33362e302f32342d3234203d3e203338353030.roa (hash: ml8tgAzjPWfRZ6grIN5HL2FzB13oLZfVDnZYbJMHBAs=)
                          20: 3131362e36382e3234382e302f32342d3234203d3e203338353030.roa (hash: CjwAdgechVyDEmdpWTYBD8Ris/80uI0UGLAhyRKKJA0=)
                          21: 323430333a323730303a383a3a2f34382d3438203d3e203338353030.roa (hash: qURilkjtdA9tmzrVI6OrtqFXtdHl5I4HX6q7a9Ca7gg=)
                          22: 3131362e36382e3235352e302f32342d3234203d3e203338353030.roa (hash: 8srxXf6sCBp8LKU/ba9SFEFlNY8/TI8wDKtzcsi3W7k=)
                          23: 323430333a323730303a313a3a2f34382d3438203d3e203338353030.roa (hash: e98j/GnS4Qx/kvETXwDsBan3judrk6fv46l57y5vEAg=)
                          24: 3133372e35392e31352e302f32342d3234203d3e203338353030.roa (hash: lO5FLbufasmDWnZ9uvAVgaRmYYXGBSTz+dfylI0ofXQ=)
                          25: 3130332e3234342e33382e302f32342d3234203d3e203338353030.roa (hash: d8faUdzBnFVRw5kIwanXJwWwTtXxeTRqt8Ed9RkYJwQ=)
                          26: 323430333a323730303a343030353a3a2f34382d3438203d3e203338353030.roa (hash: ScL2Ml9V0JxrkWOtUekcUkbGo5E4qCUz801UmzIBxWo=)
                          27: 3130332e3234342e33392e302f32342d3234203d3e203338353030.roa (hash: 5BUitJKGxpFSJUUsM/tb96/1vZXkv4i9MubxNUYqkCI=)
                          28: 323430333a323730303a333a3a2f34382d3438203d3e203338353030.roa (hash: 4XZ+2oDbC6jWPVbtwhOIpx0Ovr9SsBW1YMGL1IND6yA=)
                          29: 3131362e36382e3235312e302f32342d3234203d3e203338353030.roa (hash: V3KmgD3tTwhMEvs0Z12c99jKw1ctfp/222r2PmQ0tu8=)
                          30: 3131362e36382e3235332e302f32342d3234203d3e203338353030.roa (hash: hTvjuYJru8sBC5Vi4eVcg0T8y4PjzTgW+TTHVszhGGY=)
                          31: 323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa (hash: brBoAiHnPAXN7w+iiY5nOKnIJikx1cWKFRJLTv9yELs=)
                          32: 323430333a323730303a343030343a3a2f34382d3438203d3e203338353030.roa (hash: +GSzXEw9XVO9MZTg/3tsdoDls1yUaHYhurx3LSZ7ZG4=)
                          33: 323430333a323730303a343031303a3a2f34382d3438203d3e203338353030.roa (hash: 8uCEZaq+ErAkXmWnljIKQtRBspsZSJtLGFr9COygbXs=)
                          34: 3131362e36382e3235342e302f32342d3234203d3e203338353030.roa (hash: brbz9ziFS0tbMcRonA9TyxfYawTYuBLpI2gS2ZyTNq8=)
                          35: 3131362e36382e3235302e302f32342d3234203d3e203338353030.roa (hash: FidrCQYO33Zq2TbkFlxgDF0SdKNPwCMdkDhbgsLO8bE=)
                          36: 323430333a323730303a363a3a2f34382d3438203d3e203338353030.roa (hash: jvNDZEnqhiROy2saBd3ptbOt84MblTLhLgl0wHJO/VY=)
                          37: 323430333a323730303a343030363a3a2f34382d3438203d3e203338353030.roa (hash: mT5M0yPm3/dROrkx7EXtMvuuuiLJJBueeArGpe0kXEU=)
                          38: 323430333a323730303a343030303a3a2f34382d3438203d3e203338353030.roa (hash: j8bdRIZx+6qyB9G1jeoDSrbJdadjDRQ67ND37zYlpko=)
                          39: BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl (hash: 30Vz7yBpNM8OrihA75vFzKeYsPMn8NVprFDic4ITsTw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 11:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5a:9b:ad:2c:18:50:f5:9a:99:de:13:bb:8e:78:20:96:e8:3d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Dec  2 03:36:17 2025 GMT
            Not After : Dec  5 11:18:17 2025 GMT
        Subject: CN=4629C299B53C9D39375F79A1BC7FAA28EC0DCE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:e5:ec:cd:5b:9a:13:89:44:52:a2:91:1b:
                    52:97:19:61:98:0f:b8:44:29:fc:c9:04:75:01:b7:
                    11:89:5f:0f:0c:05:a9:02:f0:1f:02:66:05:8b:ee:
                    2c:df:d0:67:48:14:ea:97:6f:b3:da:b5:bb:e4:fe:
                    e1:4b:96:5b:0d:a9:a3:5d:cc:68:f2:54:bf:3f:3a:
                    e1:be:f4:85:13:db:66:de:0c:d5:95:a8:fd:b6:4f:
                    e5:b0:6f:84:1c:41:cb:cc:04:9f:7e:55:17:ce:33:
                    2c:46:ea:77:ec:cf:13:1d:a6:2f:63:ff:35:fc:3e:
                    3f:ad:25:ec:d7:8a:ec:f9:1d:db:b7:e0:98:91:4a:
                    fb:7b:bd:fd:be:f5:d7:ea:86:fe:a1:48:5a:57:49:
                    ed:f8:52:7c:16:9b:0e:96:57:6e:57:fd:3a:fa:8e:
                    0f:80:cd:cc:0e:63:e8:e5:ff:41:74:1c:96:c7:4b:
                    69:06:63:8c:1e:00:21:3d:54:39:7b:3c:3c:86:6f:
                    6a:39:f4:48:83:e7:3d:28:29:b7:a6:fb:7a:2e:2b:
                    cb:9e:c2:31:a0:45:83:30:4c:08:57:f4:fb:4f:be:
                    09:d5:97:95:a4:20:b5:a5:f6:02:f2:99:47:40:5d:
                    b1:07:2f:5d:15:42:77:ea:52:b9:c5:63:52:32:7c:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:29:C2:99:B5:3C:9D:39:37:5F:79:A1:BC:7F:AA:28:EC:0D:CE:9C
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:7e:9d:68:f6:d9:cd:de:a8:92:c0:5b:de:a2:44:57:5e:
         80:6e:ea:2e:ba:30:c5:c8:e1:1d:1e:01:ca:f0:a1:13:95:40:
         dc:2b:fe:5a:02:42:c6:04:f0:bd:69:40:d9:24:0b:02:df:61:
         b6:d7:5e:56:c0:8f:24:ed:26:c6:10:66:d4:94:64:0d:6f:10:
         71:a4:40:11:8d:37:99:b6:38:96:60:ba:68:d4:eb:16:a3:72:
         a1:c6:b7:b2:b1:c8:a3:5e:ef:30:11:eb:43:d4:d1:f1:3f:d3:
         64:63:a4:55:17:58:75:d0:59:88:0b:0e:82:8f:33:d7:55:92:
         85:f4:72:62:eb:5b:11:3b:29:b0:8f:ed:21:b3:44:04:2f:98:
         2e:ba:72:1c:59:1c:51:fd:f4:69:06:51:be:b0:b6:0f:bc:c2:
         99:9f:2b:e8:d7:64:f1:2a:20:94:15:1a:ea:93:ac:a2:2c:c4:
         a3:4e:37:11:64:f8:3e:10:63:54:14:4f:b3:39:e0:f0:c6:15:
         2f:7a:b3:af:06:ca:68:86:4e:49:62:28:33:a3:cd:ad:10:f9:
         4e:2c:1e:4c:18:38:b4:8f:f0:51:d2:9d:14:07:d5:ee:8b:72:
         79:c0:49:91:0f:d4:12:b8:83:bb:50:0a:9d:0c:7f:0e:d1:14:
         e6:35:87:d4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSVqbrSwYUPWamd4Tu454IJboPV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD
RTFEQjFEMDAeFw0yNTEyMDIwMzM2MTdaFw0yNTEyMDUxMTE4MTdaMDMxMTAvBgNV
BAMTKDQ2MjlDMjk5QjUzQzlEMzkzNzVGNzlBMUJDN0ZBQTI4RUMwRENFOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oeXszVuaE4lEUqKRG1KXGWGY
D7hEKfzJBHUBtxGJXw8MBakC8B8CZgWL7izf0GdIFOqXb7Patbvk/uFLllsNqaNd
zGjyVL8/OuG+9IUT22beDNWVqP22T+Wwb4QcQcvMBJ9+VRfOMyxG6nfszxMdpi9j
/zX8Pj+tJezXiuz5Hdu34JiRSvt7vf2+9dfqhv6hSFpXSe34UnwWmw6WV25X/Tr6
jg+AzcwOY+jl/0F0HJbHS2kGY4weACE9VDl7PDyGb2o59EiD5z0oKbem+3ouK8ue
wjGgRYMwTAhX9PtPvgnVl5WkILWl9gLymUdAXbEHL10VQnfqUrnFY1IyfA6lAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURinCmbU8nTk3X3mhvH+qKOwNzpwwHwYDVR0j
BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF
OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE
QjFEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA0MDY4ZjMtYTc1Yi00NzY0LTll
ODAtMWZhNTcyOTIwN2ZjLzAvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4
ODVDRTFEQjFEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABr0fp1o9tnN3qiSwFveokRXXoBu6i66MMXI
4R0eAcrwoROVQNwr/loCQsYE8L1pQNkkCwLfYbbXXlbAjyTtJsYQZtSUZA1vEHGk
QBGNN5m2OJZgumjU6xajcqHGt7KxyKNe7zAR60PU0fE/02RjpFUXWHXQWYgLDoKP
M9dVkoX0cmLrWxE7KbCP7SGzRAQvmC66chxZHFH99GkGUb6wtg+8wpmfK+jXZPEq
IJQVGuqTrKIsxKNONxFk+D4QY1QUT7M54PDGFS96s68GymiGTkliKDOjza0Q+U4s
HkwYOLSP8FHSnRQH1e6LcnnASZEP1BK4g7tQCp0Mfw7RFOY1h9Q=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:29 2025 by rpki-client