This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
File:                     C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json)
Hash identifier:          k+0CBCgmisPr6++/XHwS/AuzWC0PPFQZajXs1JYwSw8=
Subject key identifier:   D0:37:10:AC:F9:20:CA:8F:29:C0:F9:5E:F3:EF:58:8D:01:BA:99:DF
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       69A9D2BFF8A019051DC6835573E12871C49AD97D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
Manifest number:          039C
Signing time:             Wed 17 Dec 2025 17:42:16 +0000
Manifest this update:     Wed 17 Dec 2025 17:37:16 +0000
Manifest next update:     Sun 21 Dec 2025 05:24:16 +0000
Files and hashes:         1: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: VEDwBMu7e2mzL/h9CHSnsP+W8nFPBXkEhV06ak5Sn4k=)
                          2: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: /wV95wT81KDKro/jg/Buo94wrPpWyGBGso5Gssi1qLc=)
                          3: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: q+4LJqnEtPR8u/O7vXDxEMWbUC+3pBdRVabjnpWaIW8=)
                          4: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=)
                          5: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA=)
                          6: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: tdQmhQ4M5xlrRyLy9jaYN5NqubGy3fQuODZN5+mAOlw=)
                          7: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU=)
                          8: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=)
                          9: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: TzoAuOSZ6mXbYFD7JpUog8X7cU+aL4pu97WqgSsQlww=)
                          10: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=)
                          11: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=)
                          12: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: YtgOnaLw1bxl1wUrgM2neAz8Qf57lo3CvBW85nMyhJg=)
                          13: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: TPAjUCjHJnWAtWeWIogMrgqyIk1DQzed8sLTl5HA/OY=)
                          14: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: OxhA3uXfrHkYk9hpK8Kprlt50rQpJAHKf4/psbChj9g=)
                          15: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: r1xG0EZ+diPvqjo3maUSgSdAXF/PbzNzYbElj3DkPms=)
                          16: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: s1sd22aoOx7eVnGzzPZfaCEnUeLM+0ey0B/Ng0FNQzE=)
                          17: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: pMSHdCGU3wSWW64VJ8Q+XCnRMyb8p81kTgkpP+Gwk14=)
                          18: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: YfbB3z09y4MNoTi1HjR4+z9IdxMYyBM89bj8p3WiTw4=)
                          19: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 8c4EuCrXR9USSkoSueUSWcZF3Vya08SYcqUOI9OfmOY=)
                          20: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: Giz7os34qxdcaeyi2EtKcr2LS4LsMlTnJlV8pqSpEa4=)
                          21: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: f0QuTjuXU3+PMwtOvyLhhE3F7fk0wnPs64pd29FWWiY=)
                          22: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: xUdwOu6GtGdzxItV3iA1A5hAD2Ey5dnmQ19p3DcRu10=)
                          23: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: BEXTqeRuOYeCds/GtbXckcTCx17EaQiOC1/BtPp70DI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 05:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a9:d2:bf:f8:a0:19:05:1d:c6:83:55:73:e1:28:71:c4:9a:d9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec 17 17:37:16 2025 GMT
            Not After : Dec 21 05:24:16 2025 GMT
        Subject: CN=D03710ACF920CA8F29C0F95EF3EF588D01BA99DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:38:70:36:a7:41:6f:83:3e:47:c0:b3:5f:
                    90:75:c6:2a:c3:98:6d:62:ad:87:6c:42:ee:2b:d1:
                    cf:31:03:f8:97:6f:f3:53:d4:2a:0e:35:67:b2:01:
                    24:bf:b7:db:b0:b4:5b:38:ca:c0:a4:3a:a4:1b:38:
                    e8:70:aa:83:9d:0e:38:42:ac:d4:0f:3c:cb:db:dd:
                    30:87:05:78:16:95:0e:44:45:fb:5e:24:ff:e2:4e:
                    9d:25:c4:9d:e0:83:32:57:9d:7d:1a:83:d1:79:c7:
                    ea:9a:84:d0:d9:56:c3:15:a8:fe:fa:54:15:3f:10:
                    5c:4f:9c:7c:37:81:6a:11:2f:9c:4c:3c:d5:4d:f5:
                    15:e9:99:9d:ce:94:b0:ba:db:22:68:9a:2a:6f:22:
                    42:f4:cc:b2:be:bf:56:e9:8f:05:7d:8a:c3:4c:46:
                    48:5c:a4:d1:5f:e2:ba:80:13:cb:7d:2b:4f:d9:4a:
                    ef:90:46:7e:b9:0a:8b:b4:83:2e:92:6c:d9:68:fb:
                    30:ec:d7:ad:60:f6:71:9e:fc:74:89:c1:ff:bf:94:
                    a8:0f:94:27:b9:68:7c:bd:d2:cf:33:fc:0c:0a:0d:
                    51:37:ab:81:d8:22:9c:ed:6a:d9:7c:1a:84:14:6c:
                    bf:b3:f7:60:02:a7:42:f1:9b:40:3c:2d:45:28:d9:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:37:10:AC:F9:20:CA:8F:29:C0:F9:5E:F3:EF:58:8D:01:BA:99:DF
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:61:d6:82:68:ff:a8:58:61:77:66:5c:9b:bc:c0:3b:c6:
         ad:a8:9e:fd:fc:1c:1a:d0:c5:09:b0:66:10:85:0c:48:31:9a:
         d6:14:be:f0:26:b7:f2:a9:32:a5:b4:c9:fd:68:58:3c:ad:43:
         c5:cf:8a:1c:66:26:35:98:3f:b1:60:94:c8:78:0f:4f:11:77:
         14:15:92:f3:82:11:76:7b:ce:a8:d6:3d:68:7a:e2:6a:24:65:
         2c:70:01:97:f1:58:e0:58:b4:4a:45:ad:b0:f8:a6:59:0a:04:
         ab:aa:42:1a:57:d7:da:3d:72:b6:b8:e2:e7:7a:77:30:90:09:
         35:50:df:7c:0c:05:09:a1:af:1d:11:15:0d:3e:25:1a:ed:01:
         a9:76:88:0a:85:8b:b9:37:12:7a:19:74:55:72:be:fe:09:02:
         c3:d6:07:ef:76:8b:28:79:5f:e7:88:fd:50:c0:6e:8f:47:fa:
         6c:19:52:1c:3c:0e:a5:79:46:1c:d1:90:18:4c:ce:f7:60:c7:
         0c:0f:68:bc:f0:0b:82:ba:70:af:2a:ca:b2:f3:f9:b1:a1:b8:
         24:44:f3:56:db:17:ff:ec:33:82:ce:c0:d6:af:b9:d9:80:a1:
         08:a5:dd:44:28:a5:b2:a3:39:44:a0:74:28:ca:59:0f:38:17:
         c7:74:70:64
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaanSv/igGQUdxoNVc+EoccSa2X0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE
MzhBQzI2RDAeFw0yNTEyMTcxNzM3MTZaFw0yNTEyMjEwNTI0MTZaMDMxMTAvBgNV
BAMTKEQwMzcxMEFDRjkyMENBOEYyOUMwRjk1RUYzRUY1ODhEMDFCQTk5REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVxjhwNqdBb4M+R8CzX5B1xirD
mG1irYdsQu4r0c8xA/iXb/NT1CoONWeyASS/t9uwtFs4ysCkOqQbOOhwqoOdDjhC
rNQPPMvb3TCHBXgWlQ5ERfteJP/iTp0lxJ3ggzJXnX0ag9F5x+qahNDZVsMVqP76
VBU/EFxPnHw3gWoRL5xMPNVN9RXpmZ3OlLC62yJomipvIkL0zLK+v1bpjwV9isNM
RkhcpNFf4rqAE8t9K0/ZSu+QRn65Cou0gy6SbNlo+zDs161g9nGe/HSJwf+/lKgP
lCe5aHy90s8z/AwKDVE3q4HYIpztatl8GoQUbL+z92ACp0Lxm0A8LUUo2fAFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0DcQrPkgyo8pwPle8+9YjQG6md8wHwYDVR0j
BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2
QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB
QzI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl
OTctYzU1ZjY4ZTA1ODlhLzAvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0
MjlEMzhBQzI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGVNYdaCaP+oWGF3ZlybvMA7xq2onv38HBrQ
xQmwZhCFDEgxmtYUvvAmt/KpMqW0yf1oWDytQ8XPihxmJjWYP7FglMh4D08RdxQV
kvOCEXZ7zqjWPWh64mokZSxwAZfxWOBYtEpFrbD4plkKBKuqQhpX19o9cra44ud6
dzCQCTVQ33wMBQmhrx0RFQ0+JRrtAal2iAqFi7k3EnoZdFVyvv4JAsPWB+92iyh5
X+eI/VDAbo9H+mwZUhw8DqV5RhzRkBhMzvdgxwwPaLzwC4K6cK8qyrLz+bGhuCRE
81bbF//sM4LOwNavudmAoQil3UQopbKjOUSgdCjKWQ84F8d0cGQ=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:18:38 2025 by rpki-client