This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
File:                     B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json)
Hash identifier:          YA4x8Ktf0w2JmOp3ocaGZ1oCwcbtuolTl9jNsYbcLBw=
Subject key identifier:   F1:CF:FD:53:59:9B:5A:FE:E2:BB:1B:7D:E9:D8:3E:1F:8B:D7:3C:4A
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       79F6D040C423C903F4F2EB0843FA3B227EB8EDFD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
Manifest number:          053A
Signing time:             Mon 15 Dec 2025 07:40:05 +0000
Manifest this update:     Mon 15 Dec 2025 07:35:05 +0000
Manifest next update:     Thu 18 Dec 2025 11:55:05 +0000
Files and hashes:         1: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=)
                          2: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=)
                          3: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=)
                          4: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=)
                          5: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=)
                          6: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=)
                          7: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=)
                          8: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=)
                          9: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: e06ECtpScK59ZNy1jQCdL7Uz+p4+RJRegSrh5qDymBY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 11:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f6:d0:40:c4:23:c9:03:f4:f2:eb:08:43:fa:3b:22:7e:b8:ed:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Dec 15 07:35:05 2025 GMT
            Not After : Dec 18 11:55:05 2025 GMT
        Subject: CN=F1CFFD53599B5AFEE2BB1B7DE9D83E1F8BD73C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:9f:7c:ef:df:ef:8a:d7:9b:a5:e3:3e:30:
                    8b:dc:fe:08:09:b2:bb:fa:c7:98:77:94:38:67:f8:
                    0c:27:0d:42:7c:7c:40:68:ea:25:d0:e0:2a:4a:a6:
                    0b:7f:68:7a:a0:f2:87:bb:15:66:94:5d:59:01:47:
                    98:d4:0a:77:10:f4:7d:ff:02:73:3e:99:a1:68:4e:
                    58:65:75:7c:54:85:0b:24:85:f7:4d:aa:e6:aa:3a:
                    62:ec:2b:ca:c6:16:2f:44:47:d0:4f:ab:ad:6e:db:
                    0c:ff:be:d9:fc:b3:d1:ee:69:68:bd:48:5d:f7:c3:
                    99:2e:1e:f7:a3:1c:62:ca:56:2e:74:63:5f:46:31:
                    c5:f9:b6:2b:8b:05:01:a9:17:65:6c:20:15:2f:e1:
                    4c:66:b8:fd:9e:68:2e:4e:2d:92:d7:04:35:08:c3:
                    24:92:a2:50:de:19:7f:fa:b5:16:55:7d:3a:bc:89:
                    50:06:41:1c:4b:83:3a:84:ea:27:db:13:32:1f:60:
                    fc:2c:f1:2a:e8:ba:bf:0d:06:d2:67:f3:8e:72:2f:
                    43:91:4c:8e:55:ff:19:90:03:a7:ff:98:09:8a:99:
                    6c:1d:61:6c:1f:96:ae:be:3c:ce:b9:16:9e:60:19:
                    7b:ce:65:1c:89:31:45:c7:f5:f9:31:6a:8a:bc:03:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CF:FD:53:59:9B:5A:FE:E2:BB:1B:7D:E9:D8:3E:1F:8B:D7:3C:4A
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:98:f0:68:19:40:c7:f8:4b:d9:d1:6c:e3:fd:a6:aa:7a:
         30:e0:70:39:d8:9d:34:75:be:77:85:27:74:47:6c:73:1d:bb:
         b8:56:11:cd:36:3d:06:aa:df:eb:41:e6:83:91:0b:98:8b:c2:
         32:c0:81:31:c2:3a:a7:b4:b2:69:25:f9:37:26:b2:fd:e0:cf:
         59:de:ea:09:cf:87:e8:90:a8:4f:4e:ae:43:dd:ed:51:32:4c:
         2f:b3:e6:db:3f:06:1e:ab:7a:41:da:ec:ed:23:f7:a4:c6:6e:
         cb:87:62:7a:35:f2:9e:b2:0f:4e:27:99:e3:20:a0:27:45:1f:
         44:da:99:8a:78:96:45:f7:45:58:40:9b:bf:03:fc:f4:44:8a:
         9d:07:15:fb:e3:13:19:c9:e7:b2:34:5c:67:84:30:fc:2d:5f:
         30:6a:40:77:da:dd:30:ca:de:6a:3e:60:83:50:c0:78:ee:17:
         19:6c:df:f9:fd:bb:1d:53:a4:20:1e:e4:86:38:55:76:f0:d1:
         31:b8:cc:8a:6e:df:79:66:d5:c7:89:14:02:32:ef:e9:82:46:
         de:d8:4b:93:7c:73:41:8a:6c:f2:8c:77:d2:ed:98:d2:95:f1:
         46:b8:6e:9c:72:c0:17:b1:6f:99:16:ce:6a:3e:cf:4a:50:a2:
         42:a0:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:01:33 2025 by rpki-client