This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
File:                     5058CBC5AF21280546887DEF6CFA4341A8F99150.mft (raw, json)
Hash identifier:          kDf/7aqMwdD9mPiMliGqbSuzYeTBJ8tY3bveMihr8so=
Subject key identifier:   C3:27:2C:25:A7:5F:D4:E2:AB:6A:D2:40:6E:2A:87:56:EC:51:EC:FA
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       6CF4163087E3215430E278F7D861D0493B1AA864
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
Manifest number:          010A
Signing time:             Sat 13 Dec 2025 04:02:08 +0000
Manifest this update:     Sat 13 Dec 2025 03:57:08 +0000
Manifest next update:     Tue 16 Dec 2025 15:04:08 +0000
Files and hashes:         1: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: U7zsrHiqdt1Qo1B6xfxOyIpSIT6Eg44KAPPrNmLrIG4=)
                          2: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: xIwOhaK9F8GaMLO+48a1gHgLSh8/QXMa+ox/aPfD8ZE=)
                          3: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: hEA8tWNHo/TIh0zdljEtCOyHV35vtVjy/xEF9Jp2eSk=)
                          4: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: VB7muXOs/KUgbeY56FO085YD+k7/KBG+CVGoqwGS/LQ=)
                          5: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: f8b8ZEBPlEImYkbnkpmvkas1RzOl3JK/cPP6s/pxu7I=)
                          6: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: q9iza0H2rtEt+ACiqvHrrsVLjS6bvi7IjiExCl+Gt50=)
                          7: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: NITrN6jD7nr5oOwLkcfYoDWIPHvMh97xHgy4U3OmoE8=)
                          8: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (hash: 31mkkj2+9HZK3DntlbInuHBDcdFSQRlGXD8Zmc4rUM0=)
                          9: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 08dE8+5h5VM8IAQN0ml1YiJAjJEdE4Qbpafz+/inBuI=)
                          10: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: /r/8FbAnrRY9+Q4m/2LANGmYkN67339eqGM2Pr09v38=)
                          11: 5058CBC5AF21280546887DEF6CFA4341A8F99150.crl (hash: ClFM7lJYQAAYEHeBmBCWIuVsL2Rbfn5eqwzzhWJvT78=)
                          12: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: BdFOwYWDeGnfKDAaGDA7BBj23j1cFiNFG1WQ7TDA43I=)
                          13: 3130332e332e3231342e302f32342d3234203d3e203338313439.roa (hash: 1FiHn4gIC4kH5MoP4rKX52q2L0AmuUmzqqq7XVdC5N0=)
                          14: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: oYNKTwfcxqyIB1OXRbrwMgJ3fSYv5LQtaFy8X3lU6Gg=)
                          15: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: Axn8ERr+dCmvsiqqyuPKnJfBVVJriYKk4K22F1CTADk=)
                          16: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (hash: tgGGslIm+JlwZ3B9SMFEH85qZqhmUeU8C5Oc+jwQtf0=)
                          17: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: vVq7LUx06+oQEtVvYge1Q2+hkKlr27bVyXKL74EChRk=)
                          18: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (hash: CEJ3yKIwnTpt+ImukVgRvxnWPT8Hth1fQgkKpGWcSEo=)
                          19: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: +yojSrIhe0qfYYoNaS+bjIGGRqdco9vP3EvqLvXSniA=)
                          20: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: qykkhhxHnO0ydNs5JBAQOA0f9BAZyPwR6KhTyOO68q8=)
                          21: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: f7FOJnMyBZ4XNlHdy991ZxwGJQehkmOcfk+LL3+U5Fs=)
                          22: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: sueljug0A0cLELzQ10q3SYM/qivmbpI6TdGOwm3lCaU=)
                          23: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: DCq8NWxNUdZYR2PU43lxvyiXQg84ScqhviiyUTDm8RE=)
                          24: 3135302e3132392e3139312e302f32342d3234203d3e203338313439.roa (hash: sg9h3bKYAlqGHJDMvyUj6H0/M1Aw0iaDSiX106si2NI=)
                          25: 3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (hash: H5limOsnw+oXhtBdjEt0fmYaX6A1zxSuyCkqRKHAtzA=)
                          26: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: 5psPknEmypZIRcV8YM/0X/lutsHgczkNWReWTG7yCJE=)
                          27: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: Eh7tmqkuq57xlfobk4M7FLmYqi5AfrKI1DM6fiC6my0=)
                          28: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: aHFMnyhh47UaoLaj5P570D9nqN6nQjfKB0KyJ10Bqlo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 13:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f4:16:30:87:e3:21:54:30:e2:78:f7:d8:61:d0:49:3b:1a:a8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Dec 13 03:57:08 2025 GMT
            Not After : Dec 16 15:04:08 2025 GMT
        Subject: CN=C3272C25A75FD4E2AB6AD2406E2A8756EC51ECFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:6a:89:f8:7e:ef:15:4b:82:45:f8:ad:5d:
                    6e:85:18:ed:6d:b1:52:fb:ef:31:ca:d1:2b:1f:a2:
                    f4:94:76:67:6c:20:6f:c4:26:c1:c2:d4:81:ad:02:
                    85:f0:76:02:fb:cc:e8:c9:b9:ab:0d:de:55:2e:17:
                    20:dd:41:88:f5:f9:09:98:df:9c:ad:36:02:b4:b8:
                    af:4a:31:1a:d0:b1:ae:aa:a7:a0:bd:db:a4:17:1f:
                    00:ca:b2:98:da:90:a9:a1:12:e3:8c:c4:27:6c:ce:
                    ec:2a:1b:32:82:ad:33:99:56:98:35:b5:77:b9:c7:
                    5c:d1:04:4b:52:bf:ea:77:93:50:16:e2:b4:90:37:
                    33:52:75:ef:b5:ba:29:b3:9f:2a:94:a8:e3:43:d6:
                    fc:1f:ba:dd:4e:17:86:72:0d:28:7c:85:a0:f6:d4:
                    e5:2a:56:22:92:92:a1:06:94:19:ef:71:b4:af:92:
                    63:50:d1:15:12:63:fd:da:ec:fb:3f:2d:de:06:91:
                    be:9a:e8:c2:7b:da:52:c7:d1:14:e8:73:5e:40:a1:
                    98:9c:65:ff:8f:36:f7:0d:b3:f8:4e:44:39:08:73:
                    50:ca:6c:1b:4d:b4:41:87:68:1f:0a:ef:cf:06:bc:
                    32:fc:a0:e0:95:3a:3a:4d:2a:bb:1d:cb:17:0c:ce:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:27:2C:25:A7:5F:D4:E2:AB:6A:D2:40:6E:2A:87:56:EC:51:EC:FA
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:46:83:7a:f1:08:00:38:f0:fa:ab:9f:65:d3:dd:84:27:39:
         2c:86:96:e3:3f:a9:42:eb:e6:c0:fb:08:52:e6:28:d2:35:35:
         d0:24:8b:7d:fa:a5:76:04:57:f7:89:de:99:84:e8:5d:e1:2a:
         69:68:12:31:dc:57:3c:e8:54:63:0c:d1:52:73:48:17:25:67:
         11:51:ff:22:ea:58:b4:cd:8f:ca:c5:75:e1:2f:65:18:c2:f5:
         46:bb:00:ea:8c:52:b0:10:d1:68:08:e8:06:2e:8d:df:2e:83:
         c9:e6:44:88:af:b0:9a:d7:04:c5:f0:93:79:10:3f:f9:8e:0e:
         a2:ef:e3:92:a0:1d:ca:7c:1c:31:c7:b4:2e:6c:7e:37:cc:b2:
         13:d2:12:2d:b0:3c:c4:68:2d:51:9e:b4:76:be:cb:b1:1e:b6:
         0c:d7:df:5d:11:b7:eb:9d:13:5c:91:2a:17:70:ba:c1:75:97:
         8d:fc:6a:7d:87:e0:03:a4:f0:65:28:af:ef:77:94:95:38:c3:
         2a:2f:3e:b5:ea:fe:53:8b:e8:b6:e8:c9:72:65:f5:44:b1:0d:
         35:61:b2:a7:40:f5:8b:d8:36:b1:02:23:0c:ee:d4:0b:c2:f3:
         3c:90:e8:74:5a:05:da:4d:73:5d:8b:e6:79:81:f2:da:92:3f:
         5f:af:75:a1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbPQWMIfjIVQw4nj32GHQSTsaqGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB
OEY5OTE1MDAeFw0yNTEyMTMwMzU3MDhaFw0yNTEyMTYxNTA0MDhaMDMxMTAvBgNV
BAMTKEMzMjcyQzI1QTc1RkQ0RTJBQjZBRDI0MDZFMkE4NzU2RUM1MUVDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfGqJ+H7vFUuCRfitXW6FGO1t
sVL77zHK0SsfovSUdmdsIG/EJsHC1IGtAoXwdgL7zOjJuasN3lUuFyDdQYj1+QmY
35ytNgK0uK9KMRrQsa6qp6C926QXHwDKspjakKmhEuOMxCdszuwqGzKCrTOZVpg1
tXe5x1zRBEtSv+p3k1AW4rSQNzNSde+1uimznyqUqOND1vwfut1OF4ZyDSh8haD2
1OUqViKSkqEGlBnvcbSvkmNQ0RUSY/3a7Ps/Ld4Gkb6a6MJ72lLH0RToc15AoZic
Zf+PNvcNs/hORDkIc1DKbBtNtEGHaB8K788GvDL8oOCVOjpNKrsdyxcMzvzFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwycsJadf1OKratJAbiqHVuxR7PowHwYDVR0j
BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG
MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5
OTE1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhlM2IzOWMtZGExMS00NWVlLWFh
YjMtNWNiMTRlYzQ0NzBjLzAvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQz
NDFBOEY5OTE1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFJGg3rxCAA48Pqrn2XT3YQnOSyGluM/qULr
5sD7CFLmKNI1NdAki336pXYEV/eJ3pmE6F3hKmloEjHcVzzoVGMM0VJzSBclZxFR
/yLqWLTNj8rFdeEvZRjC9Ua7AOqMUrAQ0WgI6AYujd8ug8nmRIivsJrXBMXwk3kQ
P/mODqLv45KgHcp8HDHHtC5sfjfMshPSEi2wPMRoLVGetHa+y7EetgzX310Rt+ud
E1yRKhdwusF1l438an2H4AOk8GUor+93lJU4wyovPrXq/lOL6LboyXJl9USxDTVh
sqdA9YvYNrECIwzu1AvC8zyQ6HRaBdpNc12L5nmB8tqSP1+vdaE=
-----END CERTIFICATE-----
Generated at Sat Dec 13 23:02:53 2025 by rpki-client