This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
File:                     03315D0E966A85B878EA9058B8CF03EAF2881889.mft (raw, json)
Hash identifier:          qkOncqadSkn72KldFr9o1oHB13aQx8acTS7gnna8N4o=
Subject key identifier:   27:64:2D:E1:5D:9C:5C:CC:2A:2B:04:47:BD:8A:EC:71:ED:F0:8B:0A
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       6D6D575677E86E8697BFD54DD33F1BD8A55EB13E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
Manifest number:          0532
Signing time:             Sat 20 Dec 2025 03:22:37 +0000
Manifest this update:     Sat 20 Dec 2025 03:17:37 +0000
Manifest next update:     Tue 23 Dec 2025 04:47:37 +0000
Files and hashes:         1: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: hoLbivleHtt89cCReqbvfZYyTkoCRfwcqA081C1+9Gw=)
                          2: 03315D0E966A85B878EA9058B8CF03EAF2881889.crl (hash: fk0FJvBS3soikKWbGjJy7Yw163d/wE9LCYJejwm5dsA=)
                          3: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=)
                          4: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w=)
                          5: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=)
                          6: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=)
                          7: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: FQaLrXQaTAavmrBmVo9QPPvdOGdpfu5PAx/qFXOh+QY=)
                          8: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: DkpLk9wjtee+olEloYKtXa5HH1pKUw3+B87062+6qXc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 04:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6d:57:56:77:e8:6e:86:97:bf:d5:4d:d3:3f:1b:d8:a5:5e:b1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Dec 20 03:17:37 2025 GMT
            Not After : Dec 23 04:47:37 2025 GMT
        Subject: CN=27642DE15D9C5CCC2A2B0447BD8AEC71EDF08B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:7e:4e:04:66:0e:4e:3a:82:cf:36:9d:3c:
                    96:b1:0f:e5:ed:99:0e:8d:87:93:cf:0a:4f:52:0b:
                    d0:b1:df:83:e4:50:2e:f5:f6:8b:cc:b9:c1:03:51:
                    62:88:f4:96:93:5d:81:3d:9d:49:73:99:5c:97:d9:
                    38:7a:5c:42:46:91:86:11:00:b9:66:ed:cb:cc:96:
                    0a:f6:e7:16:c8:dc:a4:4a:06:4b:e7:62:d2:ee:54:
                    68:5e:91:54:de:e0:5a:43:a9:7d:8f:fe:16:7d:4e:
                    a3:fb:53:f5:f9:88:b8:ef:ec:87:6f:dd:fe:cf:b8:
                    11:b6:77:ad:60:17:41:ad:d3:a7:1f:d9:b4:13:15:
                    9d:29:f4:81:ba:35:75:a1:e0:6b:6a:0e:94:c7:1c:
                    49:d8:6a:29:88:2b:8d:0e:ab:cf:d7:19:2e:78:ff:
                    61:de:93:82:a0:7b:ac:2c:ce:28:e3:4c:c9:62:a3:
                    a9:89:8e:59:31:4c:18:d3:df:4c:62:84:fe:af:25:
                    47:4a:ee:25:9b:09:5c:da:46:5b:15:3a:85:0c:bb:
                    c3:e5:2a:da:f6:7d:b9:3b:0d:8d:d2:5e:5e:66:fe:
                    02:ce:29:b6:82:2a:69:02:a9:ba:85:73:e2:12:15:
                    cf:61:41:4c:20:8a:cb:6e:21:c5:f8:0a:f3:e5:0d:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:2D:E1:5D:9C:5C:CC:2A:2B:04:47:BD:8A:EC:71:ED:F0:8B:0A
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4a:4b:c1:10:83:74:7d:2f:f8:09:e5:50:6f:b4:5a:26:29:
         89:7b:f2:ce:99:78:c8:a3:f3:60:75:a1:ff:25:20:e9:bb:48:
         8b:0b:43:fe:ae:34:a4:d4:33:70:5a:87:2d:2a:81:4e:e7:8a:
         94:21:2f:b4:cd:0f:22:59:a2:a2:4d:aa:b6:3e:a6:f4:ae:a8:
         ba:fe:0c:3f:6c:2b:46:f9:45:a4:b3:66:60:99:81:48:51:84:
         ad:10:f0:e1:1c:ce:3f:e5:1c:6a:51:1a:a3:1a:da:af:39:24:
         2f:2a:71:73:eb:b0:33:c4:be:c3:52:d4:3a:c5:1d:a3:c4:96:
         55:89:d5:69:f7:40:89:8d:69:44:17:4b:20:54:4b:28:38:67:
         ed:c3:fa:dd:a5:8e:2f:7e:ee:28:8d:d6:e1:5d:dc:a7:af:8c:
         96:64:1c:41:1c:05:f9:8b:e5:44:7a:2d:2d:e5:0c:f0:f3:a2:
         6d:3c:51:12:90:b8:e0:eb:85:66:9a:56:a8:8c:ce:de:00:d0:
         66:36:bc:ef:17:6e:5f:b4:18:8f:e3:03:5c:45:15:e9:02:11:
         99:32:0b:3b:34:72:38:3b:44:79:de:87:b8:f8:92:66:a1:56:
         9d:37:b8:58:50:28:8c:6f:fd:f2:62:0f:5a:3e:ca:cf:84:1c:
         df:19:fd:95
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbW1XVnfoboaXv9VN0z8b2KVesT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG
Mjg4MTg4OTAeFw0yNTEyMjAwMzE3MzdaFw0yNTEyMjMwNDQ3MzdaMDMxMTAvBgNV
BAMTKDI3NjQyREUxNUQ5QzVDQ0MyQTJCMDQ0N0JEOEFFQzcxRURGMDhCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18X5OBGYOTjqCzzadPJaxD+Xt
mQ6Nh5PPCk9SC9Cx34PkUC719ovMucEDUWKI9JaTXYE9nUlzmVyX2Th6XEJGkYYR
ALlm7cvMlgr25xbI3KRKBkvnYtLuVGhekVTe4FpDqX2P/hZ9TqP7U/X5iLjv7Idv
3f7PuBG2d61gF0Gt06cf2bQTFZ0p9IG6NXWh4GtqDpTHHEnYaimIK40Oq8/XGS54
/2Hek4Kge6wszijjTMlio6mJjlkxTBjT30xihP6vJUdK7iWbCVzaRlsVOoUMu8Pl
Ktr2fbk7DY3SXl5m/gLOKbaCKmkCqbqFc+ISFc9hQUwgistuIcX4CvPlDSmJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJ2Qt4V2cXMwqKwRHvYrsce3wiwowHwYDVR0j
BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2
NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4
MTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1
NjktYTI2NjBkZjRmMmI4LzAvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAz
RUFGMjg4MTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK9KS8EQg3R9L/gJ5VBvtFomKYl78s6ZeMij
82B1of8lIOm7SIsLQ/6uNKTUM3Bahy0qgU7nipQhL7TNDyJZoqJNqrY+pvSuqLr+
DD9sK0b5RaSzZmCZgUhRhK0Q8OEczj/lHGpRGqMa2q85JC8qcXPrsDPEvsNS1DrF
HaPEllWJ1Wn3QImNaUQXSyBUSyg4Z+3D+t2lji9+7iiN1uFd3KevjJZkHEEcBfmL
5UR6LS3lDPDzom08URKQuODrhWaaVqiMzt4A0GY2vO8Xbl+0GI/jA1xFFekCEZky
Czs0cjg7RHneh7j4kmahVp03uFhQKIxv/fJiD1o+ys+EHN8Z/ZU=
-----END CERTIFICATE-----
Generated at Mon Dec 22 08:07:46 2025 by rpki-client