This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
File:                     473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft (raw, json)
Hash identifier:          G41gOWwsgMc3QgHTwazvgMBZLSGLMrvBr+5MUAd14Ic=
Subject key identifier:   9A:F2:B5:A5:A8:52:8C:CE:09:FC:92:D3:D8:FA:A1:CD:62:43:0F:31
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Certificate issuer:       /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial:       2820DEFD2A5E6DF0EC65C1B9A1108B4B6F9305B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
Manifest number:          0383
Signing time:             Mon 22 Dec 2025 15:40:47 +0000
Manifest this update:     Mon 22 Dec 2025 15:35:47 +0000
Manifest next update:     Fri 26 Dec 2025 02:37:47 +0000
Files and hashes:         1: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: /MLEcgRPFresPJTtTKFIBROPBjpRyOo/7m6Kr8fyqXU=)
                          2: 323430343a393763303a323234313a3a2f34382d3438203d3e20313533303837.roa (hash: O+L2NKK6XL7RRmdht/X7FCEZJs6nLEGWAPXfgqD654A=)
                          3: 323430343a393763303a323232393a3a2f34382d3438203d3e20313533303837.roa (hash: zTksbOmqht4ASG3w9kn+fk27ebr6uQPh0aGUqp5VAz0=)
                          4: 323430343a393763303a33333a3a2f34382d3438203d3e20313533303837.roa (hash: PMHOYTmMn+D/6C7InXFcTGR3429Se5vXqgpWqmRx6Jg=)
                          5: 323430343a393763303a333137363a3a2f34382d3438203d3e20313533303837.roa (hash: /raK2qdDpwYj0i6Kp22hBVDSF72DS0AJK0oGb8ZTOdY=)
                          6: 323430343a393763303a323233303a3a2f34382d3438203d3e20313533303837.roa (hash: XlVjEd/S/3h4K5hOFhdAwkIbfyxJ2Bmky7HfaDQm+F4=)
                          7: 323430343a393763303a333235333a3a2f34382d3438203d3e20313533303837.roa (hash: 0xXkjkgCpmYrxupQ310OgFO7dkQmSP4ati1POwwztq8=)
                          8: 3130332e3133362e3136322e302f32332d3234203d3e20313533303837.roa (hash: 8oG5aiPghQtjdiXfmI/b7Mhj9+Qy7KvOcmqLxLJ7ROs=)
                          9: 323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa (hash: OHsuASvmzBD1DPmsUBDtaXS67lDP+sik8wAvJIg6b6M=)
                          10: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: d1xIlC4+oMPbH5ZnyANomWLmufu1teeAjrpvqQHhDOY=)
                          11: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 7VS0s3GgK3f9yXNytEbD8DVTlbSNP6Xg/+gEgqJ4UrY=)
                          12: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: fED9SfLOtNo9Mv4euRXv52ZKTW2j2xHnzBv3Lqo4jps=)
                          13: 323430343a393763303a333133303a3a2f34382d3438203d3e20313533303837.roa (hash: fVhv8M53mX+/Xg2OBBncO7dhuspALhYrRfqRAzuy/nc=)
                          14: 323430343a393763303a313533303a3a2f34382d3438203d3e20313533303837.roa (hash: rJbHJ1TpKo5d9P8LB/4fj3DGBwHz+zDrdeS4FXSE73c=)
                          15: 3130332e3133362e3136322e302f32342d3234203d3e20313533303837.roa (hash: 7sx7l6VJIw9JOLYLALmlodoEMTutKJjhP096rgyTvSM=)
                          16: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: JCCAJ/EDgS27ycZ3628tTPH6fZQnrNGTI3WkVYF+XvQ=)
                          17: 323430343a393763303a323232353a3a2f34382d3438203d3e20313533303837.roa (hash: hK0K/ReeabWCEUV4uzz5EeRxjvVEqezAn7FNpKdSBio=)
                          18: 323430343a393763303a323136383a3a2f34382d3438203d3e20313533303837.roa (hash: ++vuEkt1o291s1BLNHuaNrPIR85iMOGPnEEHnaXmxY8=)
                          19: 323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa (hash: xsolw2PY1oa8F/8bKzGripyHuLDXXmNm6Ht0jCbIpSI=)
                          20: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: Nmp+qyCgxlPGSEMy9NEBVMpCbGYPUy7tS1mb3Hhynm4=)
                          21: 323430343a393763303a323233333a3a2f34382d3438203d3e20313533303837.roa (hash: VlY5JXD98wE4H0cHdXyksMDdtt7hVewJ5NJJOtJnXRY=)
                          22: 323430343a393763303a323134343a3a2f34382d3438203d3e20313533303837.roa (hash: ZvaCyP0hBpTAjSkrJvCl/1D5ltEJ/rIFnU1OaqnjovY=)
                          23: 323430343a393763303a333135303a3a2f34382d3438203d3e20313533303837.roa (hash: tgnEOAz4ln6k9iWDx9KpeIgmfHkJg4X1mSwrhZ0iEyY=)
                          24: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: mFGkwzIdR0mZAObni9tyvyUAOcwtdXd3lFjhbnsL0NA=)
                          25: 323430343a393763303a333134363a3a2f34382d3438203d3e20313533303837.roa (hash: J9+H0zfCZWn+xjuPGRv9Wz6RTUrilx0oA3r8oIJzJFw=)
                          26: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: fkMEnTikk0AxLd9lclRcINz/SNAXYAn4q9ByCS3D+jw=)
                          27: 323430343a393763303a323136373a3a2f34382d3438203d3e20313533303837.roa (hash: 9lZbMQy1jqbL+y5QmmPw53tmeX8I05Kc/ztEEnvz6IU=)
                          28: 323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa (hash: k3Oc7Qox61g/81QkNkpKWgvduR5WrhOGQt7cFtDOMd8=)
                          29: 323430343a393763303a323232363a3a2f34382d3438203d3e20313533303837.roa (hash: FZYhJoD5RQXVQ3rMDYQ3hfzgb5WFT+kakfKJU+gJ0+w=)
                          30: 323430343a393763303a323233313a3a2f34382d3438203d3e20313533303837.roa (hash: ihN8lJl3Azu7F6lolqu5tw5Z5mPw8NSUnRwinjOW5ao=)
                          31: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: o33weiAlctPbdV3C1kWuH2apUUi1fsw+0mPXwm0wqIo=)
                          32: 323430343a393763303a323234393a3a2f34382d3438203d3e20313533303837.roa (hash: N43lK9hmv37nrvHFfaSPukTJSDp5n3ODLI0RhFM+TW0=)
                          33: 323430343a393763303a323138323a3a2f34382d3438203d3e20313533303837.roa (hash: ZQTbq5cPEbxcE82LsUghN3qOvjbLcaoobncFa5DyW6I=)
                          34: 473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl (hash: Qv+XkwF8tr3rehDlv9VfmHqGL2gctJmB+6LR7hO8qPw=)
                          35: 3130332e3133362e3136332e302f32342d3234203d3e20313533303837.roa (hash: pHqgayQLjWF22csV0caPZ6zbekahaLO6LcYoKB4tSEE=)
                          36: 323430343a393763303a3236363a3a2f34382d3438203d3e20313533303837.roa (hash: sApDse45FiPhyvfCWElReYdPrJ0u2Q0Gyubyvqovoic=)
                          37: 323430343a393763303a323233323a3a2f34382d3438203d3e20313533303837.roa (hash: ZkLZWI0jB7dJZ6WubOlT7zrZwPS6RmK5BS65LX0KVa0=)
                          38: 323430343a393763303a323233393a3a2f34382d3438203d3e20313533303837.roa (hash: +AION4xshL8iIxtHjO2ni1RMztsHD4O/HMoUXLigSYw=)
                          39: 323430343a393763303a3333343a3a2f34382d3438203d3e20313533303837.roa (hash: LJ44LKDM9Ovqp7HIdQ+WGCgJ/9nkhxs+EQSXrS2ADcc=)
                          40: 323430343a393763303a323233353a3a2f34382d3438203d3e20313533303837.roa (hash: KHwY6Z0jHMbfBDdJGFU2rVGCmizq7lJHRW86nQaCbGc=)
                          41: 323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa (hash: 7AJdrVciogRsyJh9VJN1ZAYGcSdPhk7iG4Y4zS8Ipws=)
                          42: 323430343a393763303a333235343a3a2f34382d3438203d3e20313533303837.roa (hash: AEyx1AtkkV+lNL6jZfOdqxPTjSpoHYEiDbViZO547jQ=)
                          43: 323430343a393763303a323234383a3a2f34382d3438203d3e20313533303837.roa (hash: ja2kEjkcjC0E3aWRDERlnAgw1nnkTcoTgKAJNBKS2+Y=)
                          44: 323430343a393763303a323234353a3a2f34382d3438203d3e20313533303837.roa (hash: +FM4I+w7B6+tO/3MqEz8YhoqcUcc7yqMtsQdbHOkj70=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
                          rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:20:de:fd:2a:5e:6d:f0:ec:65:c1:b9:a1:10:8b:4b:6f:93:05:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
        Validity
            Not Before: Dec 22 15:35:47 2025 GMT
            Not After : Dec 26 02:37:47 2025 GMT
        Subject: CN=9AF2B5A5A8528CCE09FC92D3D8FAA1CD62430F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:dd:c9:4d:10:4c:b0:5d:56:cc:7a:cf:9a:
                    4b:89:97:b4:ae:8b:5c:f3:1b:00:cd:4c:a6:18:1f:
                    e4:bf:57:16:8d:ff:c9:cf:25:a5:b6:d7:7b:08:47:
                    f3:33:b7:f2:a9:ba:09:f4:e5:c1:6b:e3:38:9b:59:
                    9c:97:cf:b2:b2:0d:40:49:2d:4c:1f:53:ce:59:ea:
                    a3:1b:4f:b7:9d:0a:34:7c:fa:db:dc:45:6b:40:e7:
                    4e:15:31:c9:a1:63:80:9c:8b:d5:20:5a:91:35:46:
                    d6:9b:56:43:b0:1f:14:80:cf:5d:4b:fe:a6:16:2a:
                    84:77:05:a7:3a:2e:c1:e3:19:17:f9:02:62:fc:a4:
                    f2:28:66:1d:e1:3d:c7:c1:58:38:a8:f2:68:b7:a1:
                    4a:95:df:cb:2e:fc:bd:c9:4a:42:d8:3c:a0:3e:25:
                    5c:23:d3:4d:e7:83:7d:53:75:e2:d9:60:7a:b3:c8:
                    d0:d5:b8:3b:dc:09:9d:7d:5b:80:83:dd:5e:06:ac:
                    43:e2:c6:52:b4:4e:56:6b:b3:71:0b:60:40:64:4b:
                    78:2d:da:2c:c9:d6:6d:b0:b5:49:7b:b8:c2:0c:a9:
                    23:08:6d:b0:e8:5d:b6:98:c3:49:a8:ac:78:28:12:
                    ec:75:27:90:5f:0a:cc:53:0d:fa:c3:2b:fc:7d:81:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:B5:A5:A8:52:8C:CE:09:FC:92:D3:D8:FA:A1:CD:62:43:0F:31
            X509v3 Authority Key Identifier:
                keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:22:51:94:c7:8c:fc:4e:15:fd:8c:bb:66:75:30:d1:12:53:
         ef:26:23:fe:60:50:72:b0:a4:84:31:e7:52:20:05:ee:18:61:
         4c:0d:80:9f:2b:dc:10:6f:f9:69:b6:6c:57:62:ea:c8:7b:dc:
         5f:e0:71:5d:95:a5:1e:8a:91:82:72:0d:83:de:7b:14:04:f8:
         bf:e9:04:fd:e1:d6:a3:df:d8:24:ed:8a:2a:3c:a7:8b:6d:ba:
         14:36:5b:54:53:c8:3a:05:77:4f:96:43:07:f2:78:58:49:4a:
         df:63:10:89:7f:1a:92:de:6c:c7:62:5c:a2:db:cd:4e:b4:d8:
         d0:82:9e:1f:86:bd:34:b8:e9:e6:f7:df:51:74:f6:e2:d2:ca:
         3d:92:cb:64:36:3c:79:58:7c:e7:94:5d:af:1d:f6:26:03:38:
         a5:70:31:dd:ac:df:19:5d:d2:3d:1c:cc:e2:5c:d8:15:30:2b:
         9e:0f:c5:8c:a1:17:4f:4f:e2:84:00:4a:b7:57:8d:18:7c:3c:
         80:1c:34:f8:91:29:05:d1:74:63:77:d4:9b:5e:3d:83:4a:ef:
         87:66:64:34:58:e0:3c:95:a6:db:f1:1a:46:51:01:5a:c4:40:
         7e:a3:ad:87:71:d1:2d:55:51:81:2c:49:92:e3:b5:41:8b:86:
         27:3d:6a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:53:11 2025 by rpki-client