This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
File:                     DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json)
Hash identifier:          6gJKtVcmQBE/NjjaQRUbPlflA5nOksYZW0/VFvJkFUI=
Subject key identifier:   2A:18:87:E9:84:F9:11:98:1F:1D:E9:4B:C7:A9:9E:07:17:3F:84:00
Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70
Certificate issuer:       /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
Certificate serial:       44DE00DDBB78FF510CEC4B1D8F52E72C722128BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
Manifest number:          0143
Signing time:             Wed 03 Dec 2025 11:31:50 +0000
Manifest this update:     Wed 03 Dec 2025 11:26:50 +0000
Manifest next update:     Sat 06 Dec 2025 16:34:50 +0000
Files and hashes:         1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: 7uxPzrcgkLoWXPV0IbzOfgfQx6NNMyyFyeIVhsDstY8=)
                          2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl
                          rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:de:00:dd:bb:78:ff:51:0c:ec:4b:1d:8f:52:e7:2c:72:21:28:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
        Validity
            Not Before: Dec  3 11:26:50 2025 GMT
            Not After : Dec  6 16:34:50 2025 GMT
        Subject: CN=2A1887E984F911981F1DE94BC7A99E07173F8400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:7c:46:65:7e:e1:54:b4:82:1c:4a:ec:9b:
                    0e:93:00:aa:66:07:82:cf:13:4a:47:5a:5d:b5:6d:
                    91:e1:84:34:d7:35:b1:08:c0:33:a1:62:2c:87:8c:
                    4a:d8:af:00:35:96:33:b7:41:0d:95:41:a1:77:9a:
                    41:c8:ef:a8:14:7a:cf:5e:10:8a:7c:cb:83:9f:29:
                    4c:eb:a1:53:66:0a:8e:0b:35:65:2b:1e:67:0f:67:
                    f1:44:da:d7:25:85:12:76:08:f4:07:cd:48:7c:71:
                    46:e2:eb:c0:e4:3b:11:e3:ea:e6:d4:e1:56:32:6a:
                    68:12:ae:9e:02:34:8e:1e:b8:48:b5:40:05:86:94:
                    f3:d5:e0:3e:cf:c1:cf:62:2c:dd:bb:d7:f0:bb:9d:
                    84:ca:ed:6a:c3:89:a9:f4:d6:9f:b8:26:a0:41:a5:
                    88:0c:92:7b:bb:9f:49:f9:3f:c9:fa:66:84:51:9a:
                    0a:06:b3:7b:03:7c:a6:59:73:9d:63:7a:de:2b:57:
                    9a:5b:14:49:65:c3:10:a7:15:2a:59:2f:6a:76:6e:
                    8d:7a:6e:81:7d:5c:a5:08:12:60:2a:2c:aa:a7:fc:
                    fb:5b:29:09:5a:6a:6b:e3:83:d0:85:d0:a9:1d:a7:
                    68:63:ee:27:3b:7d:0e:5a:73:bb:49:26:1d:b1:43:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:87:E9:84:F9:11:98:1F:1D:E9:4B:C7:A9:9E:07:17:3F:84:00
            X509v3 Authority Key Identifier:
                keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4e:58:7a:d6:57:da:52:e0:35:9a:a7:cf:d8:37:ee:f7:ea:
         a4:8e:9f:4a:5c:de:cd:65:a4:f1:4d:bb:24:18:b4:69:33:32:
         b4:eb:3d:c0:08:df:a9:56:b4:88:9f:ae:ef:9a:58:48:09:d6:
         36:1d:81:37:73:f4:eb:5e:a5:ce:2d:2b:8c:f2:79:9d:bd:6f:
         80:bc:bd:58:07:b1:59:b1:a0:ee:95:28:de:e4:80:b2:ec:08:
         73:9d:ac:b7:d0:5e:4b:8b:cb:18:24:6d:1a:83:30:d7:75:cc:
         a2:50:e1:fc:21:d1:e8:da:0e:cb:27:2b:7b:e7:97:9c:1b:eb:
         9b:0c:c1:10:9c:45:55:8d:5a:04:3f:10:79:a6:d7:7c:7a:74:
         5b:e8:aa:b7:52:5e:65:61:71:9f:d5:f1:91:a3:9c:54:a2:f7:
         c2:e8:5e:94:03:5f:4d:0b:8f:b6:46:11:c4:6c:b7:8f:4c:52:
         ef:0c:f1:4f:ec:8a:cc:f7:b0:0a:62:78:3b:be:e1:7e:37:65:
         d7:bc:67:b2:ba:47:0b:7f:38:e2:7f:ec:d4:0d:f0:5d:b4:e4:
         04:a3:83:76:92:8c:ab:80:5d:58:f6:75:98:4a:4c:d9:e1:92:
         f3:eb:2d:f0:8a:87:1b:17:a4:d9:26:c8:7f:7a:fd:f3:78:7d:
         ce:c2:ae:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURN4A3bt4/1EM7Esdj1LnLHIhKLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD
NjM0MkI3MDAeFw0yNTEyMDMxMTI2NTBaFw0yNTEyMDYxNjM0NTBaMDMxMTAvBgNV
BAMTKDJBMTg4N0U5ODRGOTExOTgxRjFERTk0QkM3QTk5RTA3MTczRjg0MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFHxGZX7hVLSCHErsmw6TAKpm
B4LPE0pHWl21bZHhhDTXNbEIwDOhYiyHjErYrwA1ljO3QQ2VQaF3mkHI76gUes9e
EIp8y4OfKUzroVNmCo4LNWUrHmcPZ/FE2tclhRJ2CPQHzUh8cUbi68DkOxHj6ubU
4VYyamgSrp4CNI4euEi1QAWGlPPV4D7Pwc9iLN271/C7nYTK7WrDian01p+4JqBB
pYgMknu7n0n5P8n6ZoRRmgoGs3sDfKZZc51jet4rV5pbFEllwxCnFSpZL2p2bo16
boF9XKUIEmAqLKqn/PtbKQlaamvjg9CF0Kkdp2hj7ic7fQ5ac7tJJh2xQ6f3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKhiH6YT5EZgfHelLx6meBxc/hAAwHwYDVR0j
BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2
QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0
MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz
NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw
MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC9OWHrWV9pS4DWap8/YN+736qSOn0pc3s1l
pPFNuyQYtGkzMrTrPcAI36lWtIifru+aWEgJ1jYdgTdz9Otepc4tK4zyeZ29b4C8
vVgHsVmxoO6VKN7kgLLsCHOdrLfQXkuLyxgkbRqDMNd1zKJQ4fwh0ejaDssnK3vn
l5wb65sMwRCcRVWNWgQ/EHmm13x6dFvoqrdSXmVhcZ/V8ZGjnFSi98LoXpQDX00L
j7ZGEcRst49MUu8M8U/sisz3sApieDu+4X43Zde8Z7K6Rwt/OOJ/7NQN8F205ASj
g3aSjKuAXVj2dZhKTNnhkvPrLfCKhxsXpNkmyH96/fN4fc7Crs4=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:37 2025 by rpki-client