This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
File:                     D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json)
Hash identifier:          olLhCEQkjsmULM2Fo9kdF7AvU9p+m71cdFM7OVBoz5o=
Subject key identifier:   15:C3:DC:04:FA:51:5C:B5:4C:23:40:F0:43:34:14:04:30:FE:08:C4
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Certificate issuer:       /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial:       7BA48E0AE834EBE24744B6161F3500B63F61D467
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
Manifest number:          01F5
Signing time:             Tue 02 Dec 2025 14:01:12 +0000
Manifest this update:     Tue 02 Dec 2025 13:56:12 +0000
Manifest next update:     Sat 06 Dec 2025 01:20:12 +0000
Files and hashes:         1: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: 6MS+hpY8AAAW2vT3UGxha7ncda+Mv46TSI1kZZNVt4E=)
                          2: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: o9JWChuMppyDlwbbP2wl7a1BlqxO7U1pMNyySwQnepQ=)
                          3: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: q2HyhqMcqNKr/1kOvWeC7Bv0LZJy34QkHpHUyM3pSpc=)
                          4: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: D5/nCPHdYPg4x0EsuFKIju0GbogWnKrQBKCIoI/i2JE=)
                          5: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 2I1hpf1XM01hpFE4apAQaCDZ2SJv/6pMmkxZHdmPTWg=)
                          6: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: Pkdf7SsfkpbiJuE6kdJ40FkL/ss5mA3yBuB75QVgOO8=)
                          7: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=)
                          8: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: CFppjbu+j9vN8xa/dDTxQelhICtYUCoA83bushfIr2o=)
                          9: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
                          rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 01:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a4:8e:0a:e8:34:eb:e2:47:44:b6:16:1f:35:00:b6:3f:61:d4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
        Validity
            Not Before: Dec  2 13:56:12 2025 GMT
            Not After : Dec  6 01:20:12 2025 GMT
        Subject: CN=15C3DC04FA515CB54C2340F04334140430FE08C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:ff:e1:ce:e9:66:05:5d:42:4b:98:4e:37:
                    66:a7:03:22:ab:e5:cc:c7:ad:31:a8:54:01:b4:c1:
                    02:2b:90:a4:b1:3c:cb:22:d3:6c:c0:ca:d2:87:54:
                    17:98:be:2a:4f:a4:76:f7:a1:11:1a:70:e1:74:01:
                    a4:a7:73:94:ca:2f:16:f9:26:76:3d:70:ce:e7:41:
                    b2:48:e0:5b:53:89:0a:41:04:d4:d7:b2:6f:a0:dd:
                    2f:92:83:98:9d:1b:21:ff:80:d7:11:86:cf:b2:ef:
                    83:78:c2:bb:d2:32:10:77:e7:aa:f7:a2:a6:4e:85:
                    c5:4c:5b:48:06:59:c9:55:40:13:ef:fc:71:23:07:
                    eb:0d:aa:8c:cd:21:d2:af:72:db:8f:2a:7d:48:e9:
                    17:13:bc:ff:5a:e1:b6:6f:f0:9b:3e:c5:c6:28:e9:
                    b8:4b:d5:01:84:54:6c:12:60:a6:0c:c6:5f:c5:80:
                    5d:63:7c:5a:f3:9f:af:cf:9e:dd:19:0f:03:ed:db:
                    54:25:0e:fe:59:43:db:1d:35:8c:26:5e:c0:78:d1:
                    e5:b5:d2:e9:48:d1:f1:20:70:fd:7f:70:f6:68:1d:
                    89:9c:eb:df:a5:e1:c4:cd:84:8c:e4:49:c4:b9:20:
                    72:4f:df:a9:08:5d:ef:be:c1:5a:89:08:4c:ef:a8:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C3:DC:04:FA:51:5C:B5:4C:23:40:F0:43:34:14:04:30:FE:08:C4
            X509v3 Authority Key Identifier:
                keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:45:6c:b9:63:fa:cb:09:a1:5b:00:22:d4:35:37:1a:57:b4:
         d2:df:b7:56:af:b8:b2:d7:cc:e9:a4:a1:4d:e1:ca:e4:17:d0:
         fc:af:e7:79:0e:a0:60:94:98:53:45:7f:29:43:78:bf:2f:3a:
         b6:20:98:40:9c:4a:a4:d7:ae:a8:b1:c8:62:40:84:46:07:91:
         49:7e:97:7e:88:75:ee:16:ed:ee:85:72:11:b6:8d:b9:7d:5a:
         1d:d0:1d:47:60:f6:d7:ee:62:00:8d:0e:b4:29:39:27:14:c9:
         84:d9:76:ae:bd:23:92:3d:b0:50:ef:61:34:c5:ae:a9:11:a8:
         a4:d3:aa:55:7a:45:64:10:44:58:aa:21:37:73:56:2c:6d:61:
         ba:98:b2:ac:6b:bb:8f:70:18:6d:bf:f0:96:1e:1e:df:4a:af:
         30:08:b7:40:27:1d:58:a1:5f:5b:a7:8e:81:98:9f:31:a3:ec:
         f0:a8:fe:0d:c7:05:7a:e8:3c:d2:3a:e6:b7:a2:49:1c:f3:63:
         64:31:11:46:2a:7e:de:f0:fb:df:75:57:38:53:83:73:d9:44:
         5c:f3:38:c9:0f:c5:72:0b:6a:8b:f8:c1:26:80:9e:cc:3d:25:
         a2:85:80:ed:da:6f:9d:49:67:00:97:e6:34:d2:51:82:a3:09:
         ce:43:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:55:10 2025 by rpki-client