This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
File:                     DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json)
Hash identifier:          X9Ob1sxp3EH3SeeoGLlS8SjlGJXOQ5hB/gSS8NsnFoc=
Subject key identifier:   57:FC:47:FE:CC:56:DB:29:F0:33:2B:40:A0:D8:E9:67:6D:BA:6A:39
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Certificate issuer:       /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial:       07516EB0BBBDCA60304CC3A06F6A3851731115DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
Manifest number:          0350
Signing time:             Sat 20 Dec 2025 21:02:35 +0000
Manifest this update:     Sat 20 Dec 2025 20:57:35 +0000
Manifest next update:     Wed 24 Dec 2025 05:07:35 +0000
Files and hashes:         1: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: XqcXXJVRLAigakZzITIJ9WqM9shB4JwPgUNXZenmspo=)
                          2: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=)
                          3: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=)
                          4: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=)
                          5: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=)
                          6: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: +h69YPXoiC31k13cSEzWyv6wTFkos1CLOZsQnIEiGv0=)
                          7: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=)
                          8: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=)
                          9: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: 47GvXgllqrS1MxJptUYHVOsa05orn3J0qbEjvOU+c+c=)
                          10: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: 1Jp8cCDyjncp4Wpa0IwwHsbMLezQ3Rf5CCYJ9Uaw69A=)
                          11: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=)
                          12: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: wWYceKo3HVUOMgRcN2/P197TAtHkoSlPkbBqfdmOb58=)
                          13: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=)
                          14: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: BkSUU+hdEFGu4/LCS/UgbyKkkHujleze5Qtj/70UskE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
                          rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 05:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:51:6e:b0:bb:bd:ca:60:30:4c:c3:a0:6f:6a:38:51:73:11:15:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
        Validity
            Not Before: Dec 20 20:57:35 2025 GMT
            Not After : Dec 24 05:07:35 2025 GMT
        Subject: CN=57FC47FECC56DB29F0332B40A0D8E9676DBA6A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:59:bb:09:63:a5:b9:28:45:c8:29:c8:41:
                    d2:c3:43:b7:c1:3d:93:91:fd:06:0e:f7:19:01:bc:
                    23:fd:07:ff:90:08:6e:a5:a3:a9:20:37:9c:6f:8c:
                    49:5b:b0:35:1e:5e:ce:59:88:92:78:a6:e6:05:53:
                    8a:98:a0:77:f3:d9:ea:d6:1c:61:2f:fd:47:ba:5a:
                    59:3f:7b:26:5e:39:20:00:24:40:61:21:97:1e:20:
                    bd:3a:90:b8:6d:aa:14:56:c4:4d:b5:00:39:04:63:
                    08:83:5c:e4:f6:f6:14:31:dd:33:95:84:a1:d1:45:
                    26:ad:cc:6d:4a:41:71:8b:60:90:3a:2e:7e:11:34:
                    bf:31:f2:93:8f:45:e7:5f:e0:fc:4d:28:f6:07:8e:
                    c0:c0:23:23:29:16:b9:37:d6:ea:d2:f0:6f:94:e1:
                    9d:ee:e6:3a:0c:3d:7d:9b:59:89:61:50:bd:81:29:
                    f1:49:54:2a:56:e5:68:d6:91:c9:7d:54:b9:28:26:
                    2a:f8:d9:8f:9a:a4:b8:bf:e5:95:ce:79:54:da:75:
                    64:0c:d3:27:05:71:83:88:70:05:da:f3:ca:94:83:
                    c6:ec:f1:01:09:27:e7:ec:2b:19:03:2c:8c:c5:3a:
                    2d:74:40:ac:2d:95:45:95:eb:76:93:b2:b9:fc:55:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:47:FE:CC:56:DB:29:F0:33:2B:40:A0:D8:E9:67:6D:BA:6A:39
            X509v3 Authority Key Identifier:
                keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:9f:e7:b1:73:2a:b3:13:38:e8:7d:5d:63:11:0a:aa:aa:
         a3:f2:89:13:a5:d8:a4:cb:26:8f:8f:7f:34:15:a4:37:dc:33:
         f2:ee:f1:b2:15:ca:bc:57:14:a6:d9:0f:81:32:8f:cc:e0:ed:
         25:c6:76:92:2c:4c:63:33:60:22:61:39:c9:84:5d:b8:7b:e8:
         0e:f4:97:2d:16:84:89:68:04:66:c4:9c:de:20:f4:89:b2:b7:
         33:d0:cc:2b:4a:84:ac:c9:72:bb:d0:ba:b8:cc:9b:bc:9b:28:
         c3:bd:7a:4a:90:56:47:9b:cd:3a:a3:79:63:f4:4d:97:1d:db:
         1f:47:3a:03:ab:68:32:84:7a:b7:be:37:7b:58:83:96:56:f1:
         35:22:d5:50:d0:c0:d0:8c:55:a7:f8:e6:e1:49:e3:4f:a7:83:
         82:84:77:70:7e:19:2d:6d:c2:87:5d:13:a2:e2:8e:0e:7e:7d:
         ec:fd:b0:25:23:75:2d:3d:2a:76:43:e4:e8:7a:ff:4e:8a:bb:
         4f:e1:72:4a:f0:d9:2c:ea:3c:a6:81:44:ef:dd:fd:dd:22:82:
         02:5b:e4:ce:16:3a:90:4c:1d:51:f0:05:a8:fc:8e:6c:ef:5b:
         9f:71:fb:88:b3:c6:fc:be:a3:1c:ea:81:b1:85:28:38:12:7a:
         ac:da:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:12:06 2025 by rpki-client