This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          o2XsC3NaTKue8pH1AxtAfo6ADging0kVS/mVHsWNV0Q=
Subject key identifier:   93:31:52:1A:D1:71:52:AA:8D:A0:7E:E6:E1:E3:92:98:20:C7:90:45
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       6A732E0D3FDB40BEBEC4A88869E11B2B160D76D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          010D
Signing time:             Mon 01 Dec 2025 19:51:45 +0000
Manifest this update:     Mon 01 Dec 2025 19:46:45 +0000
Manifest next update:     Fri 05 Dec 2025 07:20:45 +0000
Files and hashes:         1: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
                          2: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: V6jRTxFKProjnJS5CqdjyQA5Ai3dRN2Uk1yCg+7dczE=)
                          3: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
                          4: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          5: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          6: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          7: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          8: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          9: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          10: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)
                          11: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
                          12: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 07:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:2e:0d:3f:db:40:be:be:c4:a8:88:69:e1:1b:2b:16:0d:76:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Dec  1 19:46:45 2025 GMT
            Not After : Dec  5 07:20:45 2025 GMT
        Subject: CN=9331521AD17152AA8DA07EE6E1E3929820C79045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:2b:71:c3:d7:29:72:f7:91:f2:21:cd:8c:
                    1b:c1:ef:91:f9:6d:01:ab:13:0a:44:61:a9:ee:a9:
                    85:a8:6b:89:a1:08:a3:1d:0f:31:e1:63:74:ce:25:
                    c1:10:4f:ea:03:bd:87:c5:3b:55:28:70:9d:ba:df:
                    03:49:67:c1:ef:ec:6e:88:51:dd:4f:b2:14:6e:7c:
                    9b:9a:f7:68:6b:37:67:6e:91:cc:28:aa:6a:03:db:
                    47:dc:bd:eb:f2:75:20:4a:53:b2:31:39:2c:4e:e9:
                    85:35:87:34:88:6a:c1:e0:47:d3:16:ed:b8:1f:9e:
                    93:0c:25:b7:7a:38:19:32:29:84:45:86:db:4e:f7:
                    66:16:f7:6c:ae:d5:05:b3:5b:db:00:d6:56:03:8d:
                    e6:b7:cd:ea:ec:23:0e:6c:6a:b3:37:94:6c:8f:2f:
                    a1:ed:b4:8b:ef:3a:cd:18:45:12:96:81:00:58:54:
                    53:e5:33:9e:ac:0c:34:c9:25:a9:3b:79:67:2c:42:
                    24:d8:e4:5b:28:b4:83:15:da:37:66:fb:79:97:6d:
                    cc:e9:80:74:bc:56:e9:26:0c:16:95:e2:f6:f7:f3:
                    c0:77:ab:e9:01:3b:90:4a:48:6b:20:1e:6d:e6:44:
                    2e:7d:76:19:e8:de:54:05:69:94:95:d7:4b:31:ce:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:52:1A:D1:71:52:AA:8D:A0:7E:E6:E1:E3:92:98:20:C7:90:45
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cc:4b:0c:c5:19:70:84:0c:c5:17:cc:f9:7b:ea:6e:74:95:
         ca:5b:33:fa:b8:14:7d:c5:bb:01:05:32:a9:40:87:3c:32:91:
         3b:23:0b:03:1b:52:5e:0b:4a:67:2a:de:b5:5c:04:b9:aa:d5:
         f1:a4:c2:33:26:f4:51:72:a3:33:82:fe:da:65:3b:f1:8e:5d:
         6b:13:3c:69:b8:e3:c1:02:c3:be:f5:6d:93:f6:44:02:7c:1c:
         3c:2a:cc:88:5e:e4:64:56:53:8b:21:16:e8:ee:28:ed:52:10:
         d8:36:ab:09:2a:eb:89:5b:08:ff:fc:67:81:41:f0:63:83:de:
         0d:29:61:2a:80:fd:c1:a6:f1:fb:e7:52:96:3d:56:2c:7a:f4:
         04:d2:7e:58:b5:f1:75:f6:a1:ef:f5:31:f1:97:a3:62:24:4e:
         53:91:fc:ed:4e:45:52:74:7c:22:dc:ac:18:ad:0c:c0:88:cb:
         e1:24:d9:17:b7:37:cb:90:fc:39:e4:a8:4c:8c:c9:db:ad:81:
         cf:c1:bc:c3:83:50:29:88:dc:6a:41:52:9c:78:66:36:87:62:
         2a:c0:7e:6b:56:a4:d6:df:df:c7:3c:74:fc:d7:35:b3:3d:cd:
         67:51:a8:ab:72:03:c4:e0:e1:1b:31:0b:b8:0b:42:fd:59:9d:
         32:e8:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:29 2025 by rpki-client