This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          syTafQO2DVkI97WS5crsQZOsuwXek6pZ0rBeCYTaZpo=
Subject key identifier:   05:46:28:28:DE:98:2D:44:28:F0:50:25:C3:9A:6F:11:4F:CA:39:3D
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       20D205F520C3452CB3EE48E928D895B4518E1B5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          0236
Signing time:             Tue 16 Dec 2025 11:51:00 +0000
Manifest this update:     Tue 16 Dec 2025 11:46:00 +0000
Manifest next update:     Fri 19 Dec 2025 20:12:00 +0000
Files and hashes:         1: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=)
                          2: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
                          3: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: lEADDciE7WBSbNP5koTkRL7uI/ZWk2oPkXCMKNkGcIk=)
                          4: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=)
                          5: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=)
                          6: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=)
                          7: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: ov8mTxysBfKB49F8VOvh3Huj6S60dY93AQe/+n5tsMc=)
                          8: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: L5FJzSA7UF0etrEzdyXzSIKfg/zWDr97YNsJ6d4+WfE=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
                          10: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
                          12: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 20:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:05:f5:20:c3:45:2c:b3:ee:48:e9:28:d8:95:b4:51:8e:1b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Dec 16 11:46:00 2025 GMT
            Not After : Dec 19 20:12:00 2025 GMT
        Subject: CN=05462828DE982D4428F05025C39A6F114FCA393D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:6a:c4:33:43:6a:e3:ea:ea:42:19:1e:b9:
                    6e:09:37:34:ce:0f:ef:ce:90:05:e8:87:d7:e2:01:
                    e0:20:12:d0:bc:69:d9:2e:a7:52:20:58:51:f4:d3:
                    5e:f8:b0:9a:08:fd:ec:8b:cd:03:0e:38:db:05:c8:
                    cf:f0:0f:7a:43:28:8e:26:4b:b3:4f:3b:1d:97:f9:
                    1a:d7:b3:77:66:ef:ef:0c:f2:3c:72:ff:f1:cb:52:
                    b7:59:a3:87:65:56:57:64:83:04:f4:33:5a:17:fa:
                    40:07:9c:38:bb:7d:3c:55:37:fe:62:29:9a:ab:e7:
                    1e:de:ff:6d:46:77:80:52:41:95:41:ad:4c:9f:57:
                    48:69:95:34:b5:0f:b3:92:a9:f3:fd:7f:c1:0b:90:
                    6b:3f:c7:2e:04:91:ce:d0:3c:1c:a1:f6:9f:76:9b:
                    34:a2:59:ba:fa:a0:cf:f4:c7:5a:41:cc:c6:dd:dc:
                    26:37:f5:c7:0e:7a:14:eb:6b:b9:25:e6:83:c9:41:
                    ff:09:0c:c1:23:b7:60:5f:50:66:e0:9e:7e:38:27:
                    b3:72:ab:d4:3d:4e:37:e6:b1:06:41:e3:6d:2a:e1:
                    41:81:45:9a:9e:ee:0c:78:3b:49:0b:79:f6:1a:d9:
                    40:d6:b7:29:b6:b4:44:79:69:6b:84:02:7f:02:d4:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:28:28:DE:98:2D:44:28:F0:50:25:C3:9A:6F:11:4F:CA:39:3D
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:b6:5a:76:47:87:5f:ec:43:81:fb:1d:16:b8:38:2a:df:
         d8:9d:e8:6c:9b:c8:e0:ab:a6:18:5b:d6:3d:b9:bc:48:97:47:
         62:b1:99:54:48:58:3d:eb:3c:74:ab:c5:60:26:08:09:3b:1e:
         37:3d:22:0c:a8:b8:d8:f5:5b:07:f5:69:b5:ac:42:a4:0f:d3:
         b3:0d:bc:65:1a:d6:ee:b3:b6:40:78:8a:cb:ad:ec:8c:c6:4a:
         c5:44:68:04:91:41:bb:75:74:2d:60:ac:5c:8d:68:c0:15:20:
         7a:b7:e8:ca:5c:1f:3f:e1:82:fe:91:b9:28:42:dd:84:57:9e:
         63:69:08:a4:f5:a7:7f:1b:c2:b3:85:4a:01:e7:f9:45:b1:39:
         8f:1b:32:93:ca:dc:7a:5f:ae:24:f9:95:66:d2:25:0c:af:27:
         b4:c0:33:e5:c1:84:ce:ad:cb:bc:9b:b2:58:d0:82:11:93:75:
         75:86:cc:1b:54:f4:30:85:26:31:8b:75:c7:16:0b:18:2c:13:
         a6:99:b3:2c:eb:0b:c7:fd:d1:5a:1f:f7:47:25:b4:bc:f3:d3:
         e0:f6:15:30:ed:58:1f:f0:3f:44:60:c5:eb:c5:3f:ab:d6:d1:
         32:2b:8b:c8:29:03:ab:e8:65:67:a0:c3:51:61:5f:9c:18:fd:
         82:46:4b:11
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUINIF9SDDRSyz7kjpKNiVtFGOG1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC
MDhFRkJGMzAeFw0yNTEyMTYxMTQ2MDBaFw0yNTEyMTkyMDEyMDBaMDMxMTAvBgNV
BAMTKDA1NDYyODI4REU5ODJENDQyOEYwNTAyNUMzOUE2RjExNEZDQTM5M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDGrEM0Nq4+rqQhkeuW4JNzTO
D+/OkAXoh9fiAeAgEtC8adkup1IgWFH00174sJoI/eyLzQMOONsFyM/wD3pDKI4m
S7NPOx2X+RrXs3dm7+8M8jxy//HLUrdZo4dlVldkgwT0M1oX+kAHnDi7fTxVN/5i
KZqr5x7e/21Gd4BSQZVBrUyfV0hplTS1D7OSqfP9f8ELkGs/xy4Ekc7QPByh9p92
mzSiWbr6oM/0x1pBzMbd3CY39ccOehTra7kl5oPJQf8JDMEjt2BfUGbgnn44J7Ny
q9Q9TjfmsQZB420q4UGBRZqe7gx4O0kLefYa2UDWtym2tER5aWuEAn8C1FUlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBUYoKN6YLUQo8FAlw5pvEU/KOT0wHwYDVR0j
BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4
OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF
RkJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWQ3Y2ItNmNmYi00ZGUwLTlk
YWEtZDIyMmI3YTg5MDcyLzAvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlD
QzZCMDhFRkJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIqWtlp2R4df7EOB+x0WuDgq39id6GybyOCr
phhb1j25vEiXR2KxmVRIWD3rPHSrxWAmCAk7Hjc9IgyouNj1Wwf1abWsQqQP07MN
vGUa1u6ztkB4isut7IzGSsVEaASRQbt1dC1grFyNaMAVIHq36MpcHz/hgv6RuShC
3YRXnmNpCKT1p38bwrOFSgHn+UWxOY8bMpPK3HpfriT5lWbSJQyvJ7TAM+XBhM6t
y7ybsljQghGTdXWGzBtU9DCFJjGLdccWCxgsE6aZsyzrC8f90Vof90cltLzz0+D2
FTDtWB/wP0RgxevFP6vW0TIri8gpA6voZWegw1FhX5wY/YJGSxE=
-----END CERTIFICATE-----
Generated at Wed Dec 17 15:14:16 2025 by rpki-client