This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
File:                     846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json)
Hash identifier:          DLJH2mMFIUq0PUgnDuzZ/Nq9f0TBC/4HeuhgH5uZ5ME=
Subject key identifier:   78:72:08:EC:94:1B:5F:2B:AA:24:67:D9:A6:1E:B8:92:BA:C1:36:27
Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0
Certificate issuer:       /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
Certificate serial:       15A998928044F03E785148DBAACF84FA8CB6ADFA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
Manifest number:          039E
Signing time:             Mon 29 Dec 2025 05:51:59 +0000
Manifest this update:     Mon 29 Dec 2025 05:46:59 +0000
Manifest next update:     Thu 01 Jan 2026 12:29:59 +0000
Files and hashes:         1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: Q4Oc88JvSyYj9oul2NUPTP1LvrKPeQ5VJazRv0pTjnw=)
                          2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl
                          rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 12:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a9:98:92:80:44:f0:3e:78:51:48:db:aa:cf:84:fa:8c:b6:ad:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
        Validity
            Not Before: Dec 29 05:46:59 2025 GMT
            Not After : Jan  1 12:29:59 2026 GMT
        Subject: CN=787208EC941B5F2BAA2467D9A61EB892BAC13627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:fb:51:e6:39:85:2a:2b:6c:50:42:ff:c7:
                    03:6f:10:d6:53:a1:5c:b7:48:42:03:f3:c7:48:98:
                    99:96:5f:bd:9c:10:53:cf:d0:10:12:25:64:ee:7e:
                    82:4b:22:8f:67:6d:01:93:90:6b:a9:49:68:e6:b1:
                    dc:78:a7:51:46:fb:3b:ce:34:5c:82:e3:b2:4f:6d:
                    2b:fb:d4:de:3e:8c:f6:55:de:20:ff:f3:30:87:c9:
                    4c:b0:a9:1f:b3:26:3d:df:45:ab:0e:61:fb:e9:03:
                    d9:af:5a:24:a2:fb:82:98:8d:3b:bb:9a:eb:e0:38:
                    d5:3d:bf:c1:f9:b1:ad:34:b8:74:7a:a4:df:31:23:
                    e4:0f:ff:b9:b3:a0:3d:94:8b:61:5f:7a:31:58:92:
                    4a:f0:bf:0c:53:77:84:3e:41:60:08:2e:07:03:6a:
                    c3:78:5a:6b:da:59:bc:6c:d6:2a:fa:11:8a:38:e8:
                    38:e7:e5:f4:1b:96:ee:91:3a:df:f3:b4:0b:cf:1f:
                    da:bf:27:59:bb:81:0a:67:45:cb:07:23:c9:68:a3:
                    d5:e6:af:57:c2:cb:b2:4a:1b:be:93:5c:04:c3:7d:
                    42:c9:77:8a:f2:b6:20:a1:9f:99:a3:08:32:c5:6e:
                    df:36:83:d4:2c:c7:c7:1f:eb:1f:dc:ad:53:f5:a8:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:72:08:EC:94:1B:5F:2B:AA:24:67:D9:A6:1E:B8:92:BA:C1:36:27
            X509v3 Authority Key Identifier:
                keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ea:ed:4d:51:23:75:c0:35:d5:96:87:65:66:d6:1f:1f:92:
         6e:27:b3:05:11:2f:7f:4b:42:cd:ed:cc:76:81:9c:f8:8f:c5:
         67:d4:f7:80:1e:f9:dd:06:7c:d8:3f:7a:09:3b:fd:83:9b:3b:
         fa:da:32:fc:df:0c:b3:bb:0e:10:5b:68:e7:fb:af:1b:8a:a2:
         18:43:87:53:35:e2:df:db:8a:cb:dd:62:9d:b9:e8:0c:58:fe:
         44:cf:07:39:54:b7:6d:d1:2b:b6:ce:5d:32:20:56:a0:12:1d:
         d6:83:67:1b:f6:36:44:91:18:fc:a0:6c:ef:fa:a3:db:39:98:
         6f:82:69:d4:79:5f:53:ba:03:52:4a:c9:99:df:8a:2e:fa:4c:
         ed:0b:80:dc:04:59:00:ce:81:45:d6:42:4f:a6:81:e9:6d:a7:
         8c:10:3f:3a:82:7d:bf:24:e4:17:d0:50:78:69:00:b9:1f:5c:
         27:7b:76:71:5a:4f:71:88:3d:4f:84:97:a8:0a:a2:73:74:9c:
         6b:7c:71:1b:70:18:d9:28:93:62:63:ef:51:8e:93:aa:13:11:
         c3:ee:9e:5f:34:17:fa:8d:4e:a0:07:68:15:68:04:ce:c5:dc:
         fd:fb:0b:79:93:30:a3:27:b2:37:01:17:10:6b:2f:a5:70:91:
         2b:1b:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 01:33:32 2025 by rpki-client