This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
File:                     ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json)
Hash identifier:          IXq3UxcV4ShyUCDaQso3yas/l0S8Ziqo77+xuSOaEZE=
Subject key identifier:   9F:3F:F5:17:3A:4B:48:51:84:4D:61:CA:47:67:BF:D0:4E:8A:11:E4
Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE
Certificate issuer:       /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
Certificate serial:       1DCF60D2F2E27A13F7D8B10DC119EC46C3197E77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
Manifest number:          030F
Signing time:             Thu 18 Dec 2025 21:01:11 +0000
Manifest this update:     Thu 18 Dec 2025 20:56:11 +0000
Manifest next update:     Mon 22 Dec 2025 06:47:11 +0000
Files and hashes:         1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: tDZ0wFbDMKMfPTFB8lcMKBnzPbeN46mN61LlccX+yiY=)
                          2: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: yAYpIB/dQZr6vevZ0fOhlZIVuGsf4pQJ59GZEHzSRIs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl
                          rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:60:d2:f2:e2:7a:13:f7:d8:b1:0d:c1:19:ec:46:c3:19:7e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
        Validity
            Not Before: Dec 18 20:56:11 2025 GMT
            Not After : Dec 22 06:47:11 2025 GMT
        Subject: CN=9F3FF5173A4B4851844D61CA4767BFD04E8A11E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:b4:8f:d9:0e:2c:85:58:51:2f:89:bb:e9:
                    84:bd:17:1b:da:24:72:99:1f:c3:6a:87:39:30:b6:
                    a0:5f:52:19:7f:37:f7:4d:f2:7b:b2:7f:9f:96:00:
                    a5:35:dd:c4:d5:a7:9a:57:a9:f7:93:03:84:02:07:
                    d2:77:ef:84:73:de:b5:5d:f7:dc:4c:8a:4d:8e:82:
                    02:f2:3b:1e:5a:13:56:aa:61:13:b5:d9:22:25:6e:
                    57:1d:4e:a2:49:14:38:2a:8b:6e:d8:fe:8f:eb:b7:
                    66:dc:0e:28:c9:4a:c0:69:f6:09:20:1c:b8:01:84:
                    05:fa:c8:cc:fe:bc:e4:8a:8b:92:ba:e4:c1:ff:1d:
                    fc:b7:9c:94:55:b5:1b:3b:b6:8e:e4:81:a7:12:b2:
                    bf:75:4f:7f:9a:6b:3d:f0:fd:e7:7a:2d:da:a5:7b:
                    0f:54:fc:e8:65:06:d7:09:7c:5c:ba:f5:c1:b7:23:
                    49:a7:ea:4e:64:5d:75:21:2b:c0:ce:cf:cf:eb:2f:
                    d8:58:bb:5b:70:0f:83:d8:01:c2:07:4f:24:12:e1:
                    cd:fa:ca:aa:dc:86:32:50:49:e1:68:39:8e:34:79:
                    f7:ef:85:d3:e7:e5:de:7d:ba:f8:b0:cf:ed:a1:6d:
                    69:7d:31:d9:e3:43:b4:64:4d:9f:49:4e:7c:1a:f5:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3F:F5:17:3A:4B:48:51:84:4D:61:CA:47:67:BF:D0:4E:8A:11:E4
            X509v3 Authority Key Identifier:
                keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cf:3f:4c:19:76:17:26:0d:05:ec:f7:14:bc:b6:e1:c4:74:
         c8:d7:a9:ee:1f:6a:37:be:72:be:a4:34:7d:08:68:3d:b9:49:
         de:0b:76:05:96:19:80:17:de:ec:24:bf:7e:4c:65:9a:a8:ff:
         9e:57:e4:5e:4b:88:0f:ea:f4:98:e1:cd:a0:ed:1e:a8:a5:7f:
         3f:4b:dd:15:d7:5c:1c:63:25:ba:4b:61:31:47:dd:35:a7:d2:
         25:15:51:08:13:f2:98:7c:2e:db:15:9b:06:51:25:cf:9d:7d:
         31:54:a0:ed:6d:d6:de:70:b2:34:59:bd:ab:7a:94:ce:f3:fa:
         f8:d5:19:50:dc:5d:d3:3c:0a:ee:b0:d7:09:dc:2b:b8:9c:6a:
         5a:fa:28:19:77:72:cb:ae:46:b1:88:82:a7:aa:c4:0b:85:49:
         a3:0c:1a:db:c1:87:6a:e1:bd:cd:43:82:1c:8e:14:f3:85:a0:
         e8:26:02:c9:d9:ef:b1:f1:fa:0c:22:28:6c:fe:be:db:e3:7e:
         78:31:1b:09:74:64:0f:ec:51:1c:f3:29:3c:f2:86:aa:40:43:
         35:77:12:13:ec:c7:13:ab:8e:66:46:f9:f5:45:9a:99:11:81:
         4a:49:e4:9f:75:84:e6:79:e2:58:f4:8a:36:98:22:2c:6e:52:
         75:5f:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:06:48 2025 by rpki-client