This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          +d1mekXOXovoB6jwgznROjsR3uDxYljzYIsX3Z9lq2A=
Subject key identifier:   0D:AF:88:A0:E9:94:18:F6:74:70:B8:2F:0F:6E:95:2A:3D:F2:F6:1B
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       562617BF768BE6FE5EEC3A1EEED45651B882C2F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          0553
Signing time:             Wed 17 Dec 2025 18:12:15 +0000
Manifest this update:     Wed 17 Dec 2025 18:07:15 +0000
Manifest next update:     Sun 21 Dec 2025 04:25:15 +0000
Files and hashes:         1: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: 1D1ZlBAXYS6NJNH/ZoxCjjMrhPg+zHK85QsUpRWH8Rk=)
                          2: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: YeIi/WBRjgP+fXFh6AcMEh9f121AU99tB5OClCgCK+k=)
                          3: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: x2j2pkxj/5qJxIyLhEm0SjulNd461dE11VB/8v7mZzA=)
                          4: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: HDaPuHykIJfcFE44a8jinyNofOzW9ZNE9NR+Tqqsa7M=)
                          5: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: f5hHen+W1VXCRis0jyLYMREhK7yiYlp/e1Oke9ZJemI=)
                          6: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: QK5c39FnIQ2uH2X95IXAVXSIER8l6LyPkkcgIQHnCc0=)
                          7: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: Z2sFxHHlHMJ4bRNENtVrztUIDsIoPZKVqMTMzG/+S5w=)
                          8: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=)
                          9: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: zcYJvgiaLV2GHe09dAoReTJVtccl4TPkiIrfadlJVtM=)
                          10: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: GokeNGATaaa1i6e8bMHZ+iQ8aT+X+X53HMk8EJYjG4g=)
                          11: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: Qs5YsAFrZGsUg7q3cUMLK3YDrimXUuGrA4ZkrObB+E4=)
                          12: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: iYXHlXOp13oo14EwXL1yMlKhjy+K0NQq6QBKvwru8rQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 04:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:17:bf:76:8b:e6:fe:5e:ec:3a:1e:ee:d4:56:51:b8:82:c2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Dec 17 18:07:15 2025 GMT
            Not After : Dec 21 04:25:15 2025 GMT
        Subject: CN=0DAF88A0E99418F67470B82F0F6E952A3DF2F61B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:2e:06:e3:62:3c:51:84:fe:35:75:d7:59:
                    15:47:1c:9d:4f:6f:81:4f:0c:4a:09:f9:bc:ad:0d:
                    32:10:f7:c2:0a:2c:79:c6:8c:e8:e0:38:c3:60:ba:
                    f6:b6:df:58:12:89:a3:16:83:c8:b6:34:79:99:93:
                    33:9e:77:ba:71:dc:58:4f:05:8b:38:5e:21:88:ae:
                    bb:63:4b:cd:ee:9b:ea:86:fb:b4:8f:ff:a0:87:98:
                    17:ad:8e:d2:3d:7c:1a:8c:cd:d2:a3:a7:43:a1:17:
                    54:39:e1:03:8a:1c:24:4c:bb:f2:a7:2f:1d:bc:5a:
                    51:a7:7a:69:19:d9:2d:d5:0c:0e:b8:98:1f:55:9a:
                    f9:ed:3d:07:9c:be:89:e1:0a:d6:b9:17:1f:40:10:
                    d6:ca:a0:86:a5:64:66:fe:7a:cb:86:18:db:ac:ac:
                    0e:d6:19:db:44:ca:1a:fc:27:13:15:23:d3:1f:89:
                    62:12:18:11:a6:d9:45:a5:a7:33:b6:4c:78:27:7b:
                    a8:9c:41:91:d0:b4:3b:ec:2d:f6:c1:0f:c1:69:9a:
                    03:13:66:6e:83:b2:28:92:d3:22:7a:1a:4b:bd:71:
                    7a:a4:eb:62:7e:01:44:09:c9:72:7b:b3:59:a9:c2:
                    ce:c9:3d:53:19:3c:e8:93:24:d9:58:50:5a:74:24:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AF:88:A0:E9:94:18:F6:74:70:B8:2F:0F:6E:95:2A:3D:F2:F6:1B
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:35:57:e2:87:f9:92:82:02:42:06:6c:98:d2:64:32:8c:79:
         9f:24:72:c8:60:35:4a:b6:ae:ea:e4:6f:4d:55:bb:00:88:fb:
         fe:66:58:d9:14:a6:8f:45:02:79:5a:3b:3e:ae:08:24:08:5b:
         4e:81:28:5b:57:9a:c4:8f:6c:02:16:bd:ec:f5:d9:00:0c:11:
         b6:a6:dd:da:8c:e7:2d:c2:d9:2d:76:bc:c9:fd:11:dd:b2:ea:
         e9:fe:bd:3a:d6:fd:3a:59:05:f8:28:1e:c1:8e:c2:f9:e8:3d:
         de:95:06:f8:67:23:17:a9:fe:cd:00:d7:f6:8e:20:5e:c5:ba:
         52:40:71:73:9a:78:8a:18:fc:a7:1d:0f:30:c9:a2:e0:3c:57:
         ac:45:b6:f6:45:16:87:f4:db:27:dc:91:fd:95:28:fd:ce:58:
         99:3d:05:bf:b7:3e:52:f2:3b:cb:09:91:43:55:71:58:73:13:
         8d:92:99:cd:2f:49:19:fe:63:03:05:77:f8:a5:e7:f6:36:62:
         e2:e2:66:73:01:24:98:d1:fb:e6:d8:59:4a:d2:2e:e2:76:60:
         5b:5c:9e:e4:fd:ee:53:26:f0:84:63:9f:e2:d1:d3:be:84:57:
         52:6f:35:49:b9:e3:4b:7d:e3:81:2e:56:fd:e6:20:26:6e:aa:
         7e:55:2e:19
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUViYXv3aL5v5e7Doe7tRWUbiCwvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0
ODUzMEU5RTAeFw0yNTEyMTcxODA3MTVaFw0yNTEyMjEwNDI1MTVaMDMxMTAvBgNV
BAMTKDBEQUY4OEEwRTk5NDE4RjY3NDcwQjgyRjBGNkU5NTJBM0RGMkY2MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloC4G42I8UYT+NXXXWRVHHJ1P
b4FPDEoJ+bytDTIQ98IKLHnGjOjgOMNguva231gSiaMWg8i2NHmZkzOed7px3FhP
BYs4XiGIrrtjS83um+qG+7SP/6CHmBetjtI9fBqMzdKjp0OhF1Q54QOKHCRMu/Kn
Lx28WlGnemkZ2S3VDA64mB9VmvntPQecvonhCta5Fx9AENbKoIalZGb+esuGGNus
rA7WGdtEyhr8JxMVI9MfiWISGBGm2UWlpzO2THgne6icQZHQtDvsLfbBD8FpmgMT
Zm6DsiiS0yJ6Gku9cXqk62J+AUQJyXJ7s1mpws7JPVMZPOiTJNlYUFp0JIRPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDa+IoOmUGPZ0cLgvD26VKj3y9hswHwYDVR0j
BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy
NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz
MEU5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdhMmQyNWItY2IxOC00NWJlLTlm
YTEtMTU0Y2ExNTc5MjIzLzAvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5
Qzc0ODUzMEU5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAME1V+KH+ZKCAkIGbJjSZDKMeZ8kcshgNUq2
rurkb01VuwCI+/5mWNkUpo9FAnlaOz6uCCQIW06BKFtXmsSPbAIWvez12QAMEbam
3dqM5y3C2S12vMn9Ed2y6un+vTrW/TpZBfgoHsGOwvnoPd6VBvhnIxep/s0A1/aO
IF7FulJAcXOaeIoY/KcdDzDJouA8V6xFtvZFFof02yfckf2VKP3OWJk9Bb+3PlLy
O8sJkUNVcVhzE42Smc0vSRn+YwMFd/il5/Y2YuLiZnMBJJjR++bYWUrSLuJ2YFtc
nuT97lMm8IRjn+LR076EV1JvNUm540t944EuVv3mICZuqn5VLhk=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:20:37 2025 by rpki-client