This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
File:                     C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json)
Hash identifier:          aT/WUdFAPm43ixCzSY5qjvHtha5FaqDjxqIWkU20TbU=
Subject key identifier:   C1:DF:51:6D:C8:67:A9:D3:86:C9:06:78:A3:BB:7C:E4:8C:13:32:19
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Certificate issuer:       /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial:       2D0C476D82F5651EB21E1B220D35697DF7C5191A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
Manifest number:          0484
Signing time:             Mon 22 Dec 2025 13:21:25 +0000
Manifest this update:     Mon 22 Dec 2025 13:16:25 +0000
Manifest next update:     Thu 25 Dec 2025 20:25:25 +0000
Files and hashes:         1: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=)
                          2: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=)
                          3: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=)
                          4: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=)
                          5: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=)
                          6: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: F4KKHHBQtRhFkfO8ziC7JVv7jseUa/0jDVjvOujLbhk=)
                          7: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=)
                          8: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=)
                          9: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
                          rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0c:47:6d:82:f5:65:1e:b2:1e:1b:22:0d:35:69:7d:f7:c5:19:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
        Validity
            Not Before: Dec 22 13:16:25 2025 GMT
            Not After : Dec 25 20:25:25 2025 GMT
        Subject: CN=C1DF516DC867A9D386C90678A3BB7CE48C133219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:9f:97:fb:b9:41:86:b3:90:1a:22:07:1e:
                    51:ae:f2:d1:14:be:ce:9e:3f:b8:ee:d6:5d:10:19:
                    c1:21:56:0f:0c:47:7f:de:50:ca:46:6b:96:4e:a9:
                    82:7f:2c:2b:1f:d5:28:6a:85:bf:fe:25:0f:5a:18:
                    12:fe:07:76:bb:17:7d:3a:43:33:ff:7f:1e:d0:83:
                    d4:3e:4b:43:f5:3a:46:ff:fe:02:b7:7c:b3:64:da:
                    78:1a:2c:6c:c4:d6:35:57:cc:d7:29:63:3d:9b:a1:
                    35:a8:1d:72:fa:16:01:cf:52:72:5d:2a:fa:bb:a6:
                    09:83:6e:1b:be:35:a3:69:2c:9c:54:32:32:2b:5c:
                    6d:72:09:f1:ed:b7:32:66:99:82:a2:03:c3:47:f7:
                    77:c5:1e:7e:4b:21:a8:eb:75:65:a6:b7:cb:7b:06:
                    fd:87:3b:3a:94:e6:a7:ff:27:b6:a4:3f:58:08:9d:
                    dc:0d:23:99:07:5c:e6:03:31:2f:f5:84:da:20:03:
                    fc:64:cd:e2:dc:f6:52:27:1f:cb:df:d7:d2:7c:d7:
                    6e:e1:ad:61:ac:1e:91:74:bb:bc:50:0b:8c:a5:e9:
                    64:69:94:e5:79:9a:75:e4:ec:bf:bd:ef:eb:40:49:
                    36:7c:47:5f:1b:5b:08:69:14:db:4d:14:1b:4f:7a:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DF:51:6D:C8:67:A9:D3:86:C9:06:78:A3:BB:7C:E4:8C:13:32:19
            X509v3 Authority Key Identifier:
                keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:26:d0:4f:2a:a6:e9:c5:a1:b7:be:8b:3b:4e:53:49:f3:37:
         e6:dd:14:03:f9:da:87:a9:29:70:e9:6d:aa:fc:32:a5:90:70:
         4e:fd:d7:47:77:3e:5e:39:d2:2d:c0:90:86:96:0a:6d:5d:2f:
         3d:8f:61:00:e3:59:97:a5:d6:66:02:d4:65:af:0b:83:52:de:
         8b:1d:14:0c:92:f1:37:b1:35:e2:28:83:3a:74:c9:8b:14:7a:
         6f:c4:38:82:21:34:a4:ac:03:37:32:60:79:04:5d:05:60:9e:
         dd:52:9c:4d:ed:2a:fb:ca:99:57:2e:45:f1:0b:bb:0f:64:1e:
         a1:07:7b:85:48:fc:54:06:09:17:5a:6f:0e:a2:f4:9c:73:4f:
         64:58:92:70:51:b9:fb:69:63:5b:89:0d:50:a0:0a:a3:3c:17:
         0d:6d:fb:5e:43:e4:2d:7b:bf:c6:78:73:f2:c8:5d:80:ca:4b:
         46:cd:1c:e2:eb:a8:98:d8:0c:fa:5d:f3:7f:81:40:4f:b5:fa:
         3e:30:78:81:ad:1f:fc:87:5a:1a:01:bc:9c:9d:7b:8e:a1:71:
         2f:a0:9b:d2:29:c2:d6:9f:68:f7:82:71:90:4b:53:14:dd:e6:
         29:4b:c7:a0:8d:0f:e3:31:12:1e:d0:88:fc:d9:85:97:6e:46:
         1e:82:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:22:14 2025 by rpki-client