This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
File:                     80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft (raw, json)
Hash identifier:          FxPuriWy06jK9bIR4brOGFkeirtO4LRc/nlT3yT/GTA=
Subject key identifier:   B9:CA:BA:48:62:A1:1A:FA:6B:8B:1B:9C:DA:39:2F:4B:F5:0A:ED:11
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       6A6D67D317477651888E203164C3DA57CB1449AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
Manifest number:          0531
Signing time:             Mon 01 Dec 2025 15:41:36 +0000
Manifest this update:     Mon 01 Dec 2025 15:36:36 +0000
Manifest next update:     Fri 05 Dec 2025 00:56:36 +0000
Files and hashes:         1: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (hash: UDxgb+p/OheGc5Pu54zU2k+ER7Buis6ZE5oNXaOKTTA=)
                          2: 3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa (hash: r2sMVBIlcCozBKFBq0diWRJjeE6cRdUNaq5HifiiwWA=)
                          3: 323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (hash: Pkxhtzc/wMq1OgU/fO/ZVo996RxoRVPZUmYGZ2IhOu0=)
                          4: 80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl (hash: DCTSOzfIVJUyYsbGa6ZEb119K3wxFyWyRuLiIoUSetc=)
                          5: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (hash: wQ5s1z2AdYlcJThfcBR2RUp7JW/nVYYistipQnAGWOk=)
                          6: 323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (hash: QJm/lblduNPd02BEuIg39qDUkH4IZEUKUU8ZLrF08QA=)
                          7: 323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (hash: wp6HGRFsjrQsDDxYN+2VcMhnqzQCe6fyQbIqHpdg2Os=)
                          8: 3130332e3134312e32302e302f32332d3233203d3e20313338383837.roa (hash: lmx0XZquBskC7D+0GLv2mO10TyL75yCcIcmOAKJbJoQ=)
                          9: 323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa (hash: 9Hphz4rTA2sQyZSSBKURj5EBn+fJ7avpUnADOEhDzkQ=)
                          10: 323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (hash: ruIZZO7QM8ImQmI2gqHbRwgzA5H9KzvEbmp6IKH6GiU=)
                          11: 3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (hash: zfEP/Pp+voTq+tnwh6zrXyttg/V3CtiXWPgzCewZNzw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 00:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6d:67:d3:17:47:76:51:88:8e:20:31:64:c3:da:57:cb:14:49:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Dec  1 15:36:36 2025 GMT
            Not After : Dec  5 00:56:36 2025 GMT
        Subject: CN=B9CABA4862A11AFA6B8B1B9CDA392F4BF50AED11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:dd:06:81:e1:e8:52:92:ec:9d:8b:86:95:
                    96:0c:93:f1:7d:ce:97:8a:2d:41:02:1c:13:ba:47:
                    64:37:77:51:05:51:64:91:08:5c:2c:ae:51:13:23:
                    7a:05:fe:ea:6a:68:6e:bc:94:d3:4e:a9:bc:cf:0d:
                    db:52:65:a1:73:9d:e8:df:19:76:34:41:b8:91:39:
                    d8:5d:6e:12:f1:b7:4d:f2:2b:0b:12:66:a4:ee:68:
                    af:a2:18:92:46:7d:ce:e1:a4:59:20:5d:43:d8:3d:
                    69:1b:e6:01:60:e6:f5:66:4c:a7:f6:61:1b:5b:d3:
                    c8:62:c2:dd:76:b2:b9:75:77:0c:20:29:e1:98:d8:
                    f8:a7:4c:eb:24:20:f3:82:7a:30:c5:46:29:06:4a:
                    77:44:dc:af:ef:13:67:94:23:c1:de:38:2e:b5:58:
                    77:30:42:8c:8a:24:41:49:08:79:34:5a:d5:79:a0:
                    4a:9c:de:08:e1:78:95:b3:21:2d:1f:17:ae:28:ea:
                    32:9c:a3:0b:2c:6b:d4:1f:54:11:d5:bd:2a:a0:fe:
                    b2:fc:a3:e5:03:1b:c4:92:90:71:9a:70:c3:0f:b0:
                    ef:2a:66:94:54:b2:73:2d:21:a2:d7:5f:bd:1c:8e:
                    ef:b0:00:2c:aa:7e:95:69:e9:ce:a8:1d:e0:ec:14:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CA:BA:48:62:A1:1A:FA:6B:8B:1B:9C:DA:39:2F:4B:F5:0A:ED:11
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:04:b2:14:e7:e0:a9:b4:11:25:06:2c:06:ee:17:5d:c5:c1:
         2d:02:37:8b:d3:c1:72:4d:ab:34:44:ba:d4:3d:38:cb:7e:62:
         2f:e4:4f:54:46:2f:02:3c:bc:0a:ee:0f:6a:c8:df:9a:c4:c5:
         ea:63:17:0a:3f:62:53:a8:27:96:e3:5a:90:5d:f9:8d:25:60:
         a2:7f:9b:e5:ae:7e:c2:10:7d:fc:46:2e:b4:d3:1f:e4:a1:51:
         04:da:03:64:7b:17:59:29:ed:ba:17:55:d0:2e:13:e7:12:ff:
         30:07:ec:f2:db:50:56:65:60:cc:fa:6a:61:f4:bc:4b:98:be:
         08:f4:09:ea:64:1d:dc:9b:b5:26:b1:24:90:a1:0f:87:b8:ab:
         4a:17:b3:30:b7:f8:1d:35:d9:f0:3b:5a:30:d9:60:58:27:86:
         5f:c0:98:51:35:34:3b:61:8d:6d:cd:09:b7:61:74:9e:71:f9:
         95:8a:3a:c0:54:23:af:6c:b9:31:30:e2:bf:f7:28:9a:87:71:
         1e:6b:ee:05:24:58:05:ad:9a:4e:e3:fc:45:09:1c:17:72:5a:
         d4:c6:f2:13:8b:37:76:85:d3:eb:56:57:71:47:f0:e1:8d:0d:
         0e:cb:bd:3a:1e:43:aa:30:f4:a8:33:16:63:1a:35:98:ec:49:
         a1:31:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:02 2025 by rpki-client