This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
File:                     012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft (raw, json)
Hash identifier:          FchAGAcBLDpEQVagh722j51+31Fohcjdgl1tYE4g0xo=
Subject key identifier:   05:4D:CB:18:15:70:F0:A6:F1:96:12:6A:28:E1:CA:97:E3:A1:17:DD
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       015BB27E3303F0A8A188E9BC2A07EE252EEEB4C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
Manifest number:          053B
Signing time:             Tue 23 Dec 2025 14:34:36 +0000
Manifest this update:     Tue 23 Dec 2025 14:29:36 +0000
Manifest next update:     Sat 27 Dec 2025 02:21:36 +0000
Files and hashes:         1: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl (hash: 4y1SQ1WnBbqjh5MQP65jemdknqnXhJtw16Uo45YKc+I=)
                          2: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: 0aNy0ETuqhbORaoBLuDRgIvkLNekuqgE5MuIzbIuHu4=)
                          3: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: ri1oMn8me80QpVGUqBtvPXHCGV+V3jM8xkbu4T3ytno=)
                          4: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=)
                          5: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: Mn12cCWWwqenSncttGnq31sIu/+Hnb5sVeUQv3iCWNw=)
                          6: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: uZGMmLO+ihx1HauuMCEhDeKUaoZ9Cej3WyjpZuP5mxw=)
                          7: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: AxG3Av6Lr1ooWeZ52jFBXjksOOp131HOnOlkyHCdSIY=)
                          8: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: iVB5CfMmFrw/1sxkrTtiTl8LrYbLbK8j8toSYOpEOdI=)
                          9: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: 2xWfiK5wGmMcUrPcXTeK+FMi4oIrH3FKfxMpAgGIdSQ=)
                          10: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: JWHfZ6w+iObuBrwQGbo/6Xd2nLZuo2KPm5ntS1O1mZA=)
                          11: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: HZhJmMH/Ke4cPS3cjwshrQlxCqO5LSReCzOgD2oJQGE=)
                          12: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: /rqrLGb+IkPW8rjy02EXXMaWAA6ibmhWcBGw6CAxGjc=)
                          13: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: HxTVM3BaA8ke4XmmAmeOxfSVVSVRh0EkdWqpyqwPT1U=)
                          14: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: bBONzBtnp5cZgKGGF/WSDLhv6iSsnxnb46nVEQMcaEk=)
                          15: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: qkkJ54NZ40Um3ciYsl/FGUnS4rYZSGlzZD4dWlUI5hM=)
                          16: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: w9IXrLEpnOTvHIWW3gOa5yz7gU/R3agEoOz9SkOzTf8=)
                          17: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: mk2uuBuKIDHj7rkFbCdRe6jSuAPJ/hDxuUfm/exdaSw=)
                          18: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: yvbmRN5GX0Kxoc+90gun4y0Zq8jLX00f2pb/Z/G8CGA=)
                          19: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: XNOVEI3YN45FFKxPdBMlhL4tIvoqWKr9UzQJy69423A=)
                          20: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: sFm39yL/wE3VY7beJqFDG9gTkKfaNeEukDIdxaa9zRE=)
                          21: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: Kcq6RiACas78b8uWIYiFOtGS3r3yMXUnaWfx7z/cdEU=)
                          22: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: 9VqDU3d2jTW23JJ05scMXpgKwNdRFXtjy3WCszDduNE=)
                          23: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: bc52vQ8UC2G4/y1ll8Fk+/X4/gPss4cwSVJImtHITIQ=)
                          24: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: vkTDe9buXDOgB6kWHFGcwJdVcp2flSZI09Z4kQqjciU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 02:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5b:b2:7e:33:03:f0:a8:a1:88:e9:bc:2a:07:ee:25:2e:ee:b4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Dec 23 14:29:36 2025 GMT
            Not After : Dec 27 02:21:36 2025 GMT
        Subject: CN=054DCB181570F0A6F196126A28E1CA97E3A117DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b5:c8:c3:d5:4f:b4:90:e8:16:fd:61:39:d5:
                    99:7f:63:fc:e2:69:e3:14:9e:b9:7f:b1:ce:7c:23:
                    b5:bf:54:11:8d:67:c2:a5:42:f5:b7:c1:04:59:61:
                    7e:da:a6:ec:33:91:93:ab:37:8c:38:b5:71:1d:41:
                    47:30:29:57:0d:fa:21:bb:e8:12:c6:7e:92:df:b7:
                    ea:89:06:a1:7b:90:92:5f:18:b4:cf:bf:a5:cd:88:
                    16:9c:11:33:3e:78:cf:0f:a5:48:2c:b3:0f:98:96:
                    c5:1f:6e:5f:a8:69:d9:e8:73:9e:f2:b4:0c:14:14:
                    2c:9c:82:0c:12:4f:ce:f3:12:25:35:be:b9:76:52:
                    0d:1f:db:e1:13:72:ff:41:07:97:e4:fb:f0:9a:2e:
                    5e:29:f5:6a:61:3a:e5:39:4c:f3:06:ac:58:1c:dc:
                    8a:bf:83:47:2a:60:8f:63:3c:98:b9:8d:10:ed:ea:
                    cc:f9:90:fa:c2:97:b9:68:26:87:b3:fc:2b:ec:60:
                    9b:68:29:6c:a8:e2:42:2e:47:b6:2f:6a:52:69:4e:
                    1c:19:af:3e:b0:0c:c0:09:ce:f8:1b:5e:29:9d:c5:
                    9b:68:96:8d:a8:b1:63:2e:5a:06:ae:61:b5:18:44:
                    34:34:b9:44:a5:7c:6e:10:87:4c:6a:88:eb:b9:91:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4D:CB:18:15:70:F0:A6:F1:96:12:6A:28:E1:CA:97:E3:A1:17:DD
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:21:6f:95:44:32:98:db:ca:b4:89:7f:34:c3:97:38:81:83:
         cd:50:25:22:fc:b1:51:2d:7f:69:fa:68:ad:4f:57:e9:b0:9f:
         8c:56:d2:3a:06:ed:6c:73:8b:48:9b:dc:58:d9:4d:83:29:b5:
         8d:b5:d0:db:9e:2c:40:79:c2:35:5e:7d:b3:40:d5:64:47:d3:
         c8:49:cf:ac:47:e1:a6:b1:db:42:95:cc:5e:7d:19:c4:a0:aa:
         83:85:8f:c5:3c:67:4a:87:99:f6:6a:d7:22:19:bf:c8:ed:5e:
         4f:8c:9a:3c:42:f4:b4:94:ab:14:a3:87:ea:6c:e7:1b:37:2a:
         54:13:1e:8a:62:e2:a7:8b:e0:2c:f1:38:ca:ab:a4:05:d6:72:
         11:cd:5c:c4:44:c6:ae:3c:85:be:98:31:4e:df:e8:c8:23:b7:
         4d:b1:3f:4c:14:0a:e3:83:df:0f:b1:b9:2f:70:61:98:91:07:
         f5:ac:6b:f4:40:f8:dc:1e:b6:e1:7b:73:da:28:65:f4:f5:f2:
         98:6a:25:e3:de:31:68:1f:99:30:29:9f:c2:a1:85:29:a3:ac:
         16:7e:34:f5:8d:6f:fa:b1:f4:2b:cc:28:61:0e:52:7e:54:bf:
         b7:ca:a9:e2:48:16:9d:dc:34:3a:fb:cf:b4:07:bc:19:0c:a5:
         36:b3:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:23:41 2025 by rpki-client