This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
File:                     104563E8068F3AE19631B1F43A5C9A47466100AC.mft (raw, json)
Hash identifier:          /SyehSfD63FfceFKPfVqeozLtRlUixcjzyCenS1Yq6U=
Subject key identifier:   4B:B9:81:D7:11:FD:8E:66:7B:7D:B3:F2:A5:46:2A:68:8A:ED:C2:6C
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Certificate issuer:       /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial:       05B4F4B67618096B267EF1BACE61DBDFD45D1E2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
Manifest number:          035C
Signing time:             Tue 23 Dec 2025 07:41:54 +0000
Manifest this update:     Tue 23 Dec 2025 07:36:54 +0000
Manifest next update:     Fri 26 Dec 2025 13:29:54 +0000
Files and hashes:         1: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: mLstSys1ibyLiHgcMAosimwglWRWJ2SkAeeFcz0SnqE=)
                          2: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: +SLRXlahaObHYrJgflPMiDjr0u2mDJrsOXf4SROIz+s=)
                          3: 104563E8068F3AE19631B1F43A5C9A47466100AC.crl (hash: jPZBtC1qj/iM81PsGXcuYve6nyTpJw9XHI0Z2PmB/mQ=)
                          4: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: VLkItKFaeejUHC1WgS1PSkZ19Q0bo3xj4xKJ0hQtCic=)
                          5: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: FFItnTTMKt/KdS5iV3+5t51Nd97nxTmIPrWc7N6PUvw=)
                          6: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: VcKH5MJv0PsbSw/ylAqkYnvN7oEA35OAIpUTZqe2tts=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
                          rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 13:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b4:f4:b6:76:18:09:6b:26:7e:f1:ba:ce:61:db:df:d4:5d:1e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
        Validity
            Not Before: Dec 23 07:36:54 2025 GMT
            Not After : Dec 26 13:29:54 2025 GMT
        Subject: CN=4BB981D711FD8E667B7DB3F2A5462A688AEDC26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:7b:14:a9:3c:85:7b:06:fd:4a:cf:6d:bf:
                    dc:9f:e7:52:a3:7f:90:c9:c7:a5:5c:be:f0:bc:5d:
                    66:12:36:3a:6c:7d:10:6a:7f:3f:24:22:33:77:b3:
                    d1:e1:22:02:3e:5f:b7:fc:a3:6a:9f:4b:f0:56:66:
                    75:0a:b9:6b:45:4b:f8:f9:cb:8c:c4:3b:b3:0f:40:
                    91:10:e8:de:db:36:dc:1c:a5:a5:2a:bd:3d:a4:71:
                    dd:76:61:dd:a9:8d:71:d6:25:6a:c4:97:8f:ba:1b:
                    f6:16:ad:32:5c:7f:2e:df:00:6a:ec:20:3e:6f:82:
                    d1:74:4e:0d:71:63:6a:cd:a5:54:3d:fe:04:0b:b4:
                    63:73:eb:ad:0a:fd:37:82:5e:9d:dc:f6:ea:3c:ff:
                    5c:8d:83:6a:1d:d2:76:82:e5:f6:02:1e:4c:1c:77:
                    33:a7:58:7d:11:51:69:99:4c:0f:36:1d:b2:5b:64:
                    b8:e6:fb:22:28:05:bf:b8:b7:6f:57:0a:1d:2b:27:
                    5c:fe:b8:63:8b:b7:1b:94:c9:cc:d9:a9:f1:f9:9c:
                    3f:e7:23:23:fc:ef:b0:70:47:ce:d2:d1:0d:2d:10:
                    3b:ef:69:73:2f:f8:fe:1f:3e:c9:e1:72:93:47:25:
                    83:43:03:48:a7:61:c5:4d:f3:63:c4:52:d8:17:2b:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B9:81:D7:11:FD:8E:66:7B:7D:B3:F2:A5:46:2A:68:8A:ED:C2:6C
            X509v3 Authority Key Identifier:
                keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:21:19:13:cc:90:87:0e:2c:65:27:ee:c4:d7:5f:f4:62:
         b9:4b:90:03:48:10:20:6b:79:1d:54:03:13:5c:d2:a3:d3:59:
         d0:a6:41:8b:02:33:c0:f1:21:d3:72:18:47:c3:db:93:d5:14:
         08:ea:1d:35:1a:7f:92:56:e6:69:41:d5:39:21:55:f3:01:d1:
         c6:b2:56:93:d9:8d:5d:d1:0d:4b:ae:32:7f:9d:db:24:5d:1b:
         95:5c:29:01:54:da:d2:bd:c2:60:e1:ab:67:32:f4:bb:a8:98:
         a1:fd:fe:3c:fd:37:b4:1d:38:53:9e:89:22:2f:6d:2c:2f:c5:
         a0:9a:52:3e:8f:11:2f:e0:da:d7:b6:8b:28:fd:e9:79:1c:e0:
         ee:a2:91:b2:b6:fb:1a:0a:68:57:c5:aa:a3:3b:e5:61:b1:84:
         cc:74:d8:57:55:d9:dd:81:48:52:bb:f1:e7:81:70:ee:65:e5:
         16:b2:4b:63:01:71:3f:08:a0:7e:0d:ea:c2:bc:58:cb:5a:44:
         66:98:f4:58:b9:f2:7b:00:05:f9:2e:f4:81:7a:e7:c8:09:ab:
         90:c8:c0:36:5b:29:22:4b:05:70:06:65:03:3a:81:c5:ac:a7:
         82:7b:bf:cc:18:cf:c3:d9:e9:84:7a:33:8b:b0:ab:d0:aa:59:
         8a:82:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:39:14 2025 by rpki-client