This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
File:                     47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft (raw, json)
Hash identifier:          igKrS1On2+UCauVLe3GjnzvUQrixTyD2MkRGnqTK+B8=
Subject key identifier:   70:3A:11:34:7C:9C:15:42:A2:6A:56:9F:FC:66:02:6A:CC:60:F3:19
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       3C1D1178D7CD32AB4427AFF266C2674E868AB586
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
Manifest number:          0541
Signing time:             Mon 01 Dec 2025 21:32:41 +0000
Manifest this update:     Mon 01 Dec 2025 21:27:41 +0000
Manifest next update:     Fri 05 Dec 2025 04:32:41 +0000
Files and hashes:         1: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (hash: Q7K6vxdURqUVSTL2QfOJv0VWNAbfREV5qlrBrpZeG6I=)
                          2: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (hash: Ro4VwJnTaG/NeUG6CyxbPAddbmOcZkAvVjQYjSzO/Mo=)
                          3: 323430333a623230303a3166653a3a2f34382d3438203d3e203233363731.roa (hash: 33YyvmLMqhZHlF7KJWBhAIcrQi1mJNeErJXlgE4dA9I=)
                          4: 47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl (hash: 5sK+NVe5FvSsjyquJ/crcnwvxnhnX1iaw+3GRM5v3Mk=)
                          5: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (hash: Oy5e7U/30QVlyKxMTN7vJxNvo6wTwC5oIUWauMMWfdo=)
                          6: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (hash: jLhZx5mtiEAtxHo0r3n7tiNwdx/V4EFJlvX7pV1BZjQ=)
                          7: 3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (hash: lbnWZKH0GPtjWhFyMTf9c/PsNGVPciiwPzsQOX+Yzc8=)
                          8: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (hash: iSE7SlBpYXDTIvrotxnrP3PFTmmB98DokgHfrrkNkRo=)
                          9: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (hash: hJFdnnFqf4q4VdOkKOAgrkVtfC9wQ0ni99baqMKqYMY=)
                          10: 3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (hash: oro99xPF0g8Z1jg47VoAobJMfgIUYlWHNueiwIHbC6Q=)
                          11: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (hash: sW9/hG0RWFfw6EKpkp4ujTdk8BVnOXVgNyKBaEt5vdk=)
                          12: 3131312e39322e3136372e302f32342d3234203d3e203233363731.roa (hash: 4hjY9Fjlzmj94VSsHtzX7aFufDgxxFUYB9x0rBt/afw=)
                          13: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (hash: o4W2Bn3hIO35RbuFmhkTKwAoJsgLCdi8pu7yd1yS3Ms=)
                          14: 323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (hash: ts0AEf7tiHhCVv2ig8cqn7e5DacXGcYUg0GU/UCUV0c=)
                          15: 3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (hash: df0Q+ODl4p6I3yq1hTHdmDcT4TE0771iCXobeoyheBo=)
                          16: 3131312e39322e3137342e302f32332d3234203d3e203233363731.roa (hash: 8ak9Wna4PDMgD/5N0XmaPxXzV+DSrg2LKuSQaDnQR1U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 04:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1d:11:78:d7:cd:32:ab:44:27:af:f2:66:c2:67:4e:86:8a:b5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Dec  1 21:27:41 2025 GMT
            Not After : Dec  5 04:32:41 2025 GMT
        Subject: CN=703A11347C9C1542A26A569FFC66026ACC60F319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:21:83:55:94:b1:ed:4b:0d:6b:33:39:1a:8f:
                    5b:23:70:86:c0:ab:0b:86:17:c3:29:f5:d9:75:4f:
                    14:68:d9:2f:95:57:da:d8:67:9b:58:66:2d:5b:a0:
                    6e:0d:86:99:11:2b:db:1d:5c:38:d3:51:f8:7d:41:
                    8c:e8:fc:05:cc:d1:37:ea:4e:c0:ba:ea:84:8f:37:
                    6a:99:33:57:ef:12:a6:a9:1b:4e:fb:89:d6:72:2b:
                    c8:90:e9:4a:b5:16:d0:7a:50:02:e8:2c:53:5d:f2:
                    2e:65:db:d1:e4:78:c9:3a:78:73:4f:0b:fb:47:e2:
                    f8:0f:0d:5c:34:19:2c:05:ac:bc:07:ca:6f:59:67:
                    c9:93:94:a9:5a:de:83:13:bb:2b:51:20:34:da:f1:
                    a4:ba:07:25:45:e4:17:34:e2:96:f2:a0:49:af:7a:
                    f0:8b:42:be:b3:ab:e2:01:eb:1b:bd:7a:62:29:3e:
                    25:9e:7c:89:2f:d2:32:b3:f4:c7:5f:05:be:e0:3b:
                    ab:83:fb:69:cd:37:88:e3:f8:92:30:41:5b:4e:3f:
                    22:2f:ea:e2:f4:32:51:58:04:2f:20:f8:e9:5a:e4:
                    3d:a2:48:79:ad:a1:c8:b8:aa:a5:fa:fa:c7:82:15:
                    a2:24:3e:51:d8:5f:0f:e1:57:59:fb:17:b0:6f:a4:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3A:11:34:7C:9C:15:42:A2:6A:56:9F:FC:66:02:6A:CC:60:F3:19
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:46:37:a5:7e:0a:a8:c5:56:9e:d6:ca:ad:33:7d:da:44:52:
         91:07:39:82:68:42:35:e2:3b:9b:81:61:ca:3a:73:59:b9:10:
         aa:bf:e7:88:c1:93:91:a1:f4:98:1a:8c:1b:6a:b2:07:7e:72:
         80:f5:7f:bc:33:4c:fd:bc:00:a6:38:f8:c7:01:8a:1b:e8:df:
         50:e0:76:f6:f0:48:d0:46:c9:f9:51:cb:0e:fa:7d:3d:4b:3f:
         88:2a:b7:54:c9:9f:99:a7:8c:57:37:07:6b:b2:55:e2:85:23:
         ec:7b:3d:1c:0e:75:69:64:4c:ac:89:b5:53:cf:8f:1a:61:72:
         1c:9e:cc:12:e1:e6:6d:6f:7c:3a:3b:fd:1f:fe:07:75:b5:0f:
         d9:39:37:80:6f:17:b6:04:60:cd:be:f2:8d:e9:b2:a9:6d:b5:
         db:e2:e1:7b:d0:c4:b0:0f:e4:35:4b:86:27:27:d8:4b:55:f4:
         01:25:65:e8:7f:4d:50:ae:0e:a8:69:af:f6:9d:86:6e:9a:3f:
         36:c2:41:1d:4f:92:52:a7:b4:92:66:10:95:c8:61:50:44:c2:
         e1:71:81:2b:f0:5c:32:f0:4a:95:8d:ea:89:04:60:74:c3:a7:
         73:a2:df:05:58:c9:70:ec:9e:eb:f7:4a:74:34:3a:03:53:5f:
         1a:52:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:43 2025 by rpki-client