This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File:                     1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier:          eP1tuUBObraPF/Rlp6j6GoUYad2nIOswBWYxcnB1Qs4=
Subject key identifier:   A1:23:B0:E1:FE:93:CA:51:10:9A:A4:68:61:78:F6:D9:AA:E3:0C:F1
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       62CA7CFD07C1134B8F48AFC8C7D694D5F4B12931
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number:          01A9
Signing time:             Thu 18 Dec 2025 12:11:12 +0000
Manifest this update:     Thu 18 Dec 2025 12:06:12 +0000
Manifest next update:     Sun 21 Dec 2025 12:41:12 +0000
Files and hashes:         1: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: ibJZHZEEwuIaueWUBS974XsPSfaJnljHAhKebn2nItk=)
                          2: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=)
                          3: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=)
                          4: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=)
                          5: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=)
                          6: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=)
                          7: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=)
                          8: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: OfppjjTpXFLmh5Aj/BiOiyknKtfPtzPHg2/eqJ5W1oI=)
                          9: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=)
                          10: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: n2kJmjfaGbSRfn1pQASrz7hUspqtdNSxVZot/XzEk0w=)
                          11: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: B1+mJ2NWxCErJO3eSkTT+IRh+1v8gS/UXtodN0rllAY=)
                          12: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=)
                          13: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: x8GA7f+9To0zJWTPLU22XKkbJl3cpNPeZ955m1OcAKM=)
                          14: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: hqbmI1+UoUPoz5aHKEefU2aqzgzzxdPZgTYT+n6aATQ=)
                          15: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: HrIzGNZLv+7j4arBrfu1wD1Ji4FgFutube+LtEcdHoI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 12:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ca:7c:fd:07:c1:13:4b:8f:48:af:c8:c7:d6:94:d5:f4:b1:29:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Dec 18 12:06:12 2025 GMT
            Not After : Dec 21 12:41:12 2025 GMT
        Subject: CN=A123B0E1FE93CA51109AA4686178F6D9AAE30CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:f8:54:9f:5d:6c:a4:e3:63:01:29:fc:b0:
                    77:1c:75:bd:b5:8e:32:5a:60:e5:42:f8:d4:20:ef:
                    2f:14:c6:a9:5e:53:bb:68:ca:50:78:29:e7:b1:00:
                    5f:f2:b1:d0:9b:3c:7a:63:a6:89:db:06:4f:15:c2:
                    88:4f:be:69:a5:dd:41:79:1e:30:f5:6e:78:f6:9f:
                    b8:53:e4:10:d0:34:56:ad:18:20:68:cf:44:f1:eb:
                    21:9f:c2:7f:3f:fd:83:53:9e:85:41:08:7c:89:3c:
                    bc:0a:85:44:88:c9:4a:62:b6:2a:3d:df:5e:7d:dc:
                    4b:cd:e0:4d:7c:43:6f:5d:a8:ae:a7:0e:b1:25:5b:
                    0e:70:60:de:bd:c8:67:ff:8d:da:55:2a:d2:5f:ea:
                    53:48:c0:cb:ec:71:ec:8e:68:7f:65:d5:ef:b1:05:
                    15:6b:67:53:14:47:4f:34:31:27:3f:1c:70:8a:db:
                    14:8c:04:4d:0f:4f:fa:d2:d5:cc:30:3f:06:17:52:
                    05:f1:74:a0:c2:e3:8f:a5:09:ae:bb:4e:2f:1a:fb:
                    c1:a7:d8:e6:43:80:87:a3:a6:98:d8:93:95:f2:ae:
                    be:26:55:8a:b0:ab:a5:e4:2e:93:82:4b:73:fd:b5:
                    25:43:8b:8c:4a:95:5f:66:8b:69:cc:c0:e6:b4:56:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:23:B0:E1:FE:93:CA:51:10:9A:A4:68:61:78:F6:D9:AA:E3:0C:F1
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:21:d1:62:53:9f:48:ec:f4:f1:a0:28:f4:1c:4f:ed:65:
         9e:7b:4a:1a:24:fc:e1:8b:9f:b2:4d:f6:47:b9:53:b8:8d:99:
         be:9e:e3:87:64:3c:a3:7a:95:e4:02:41:8e:d6:c8:b5:f8:42:
         28:fb:a2:d2:72:d1:e1:1c:3c:2b:51:b2:66:dc:25:f4:b6:93:
         c8:82:d0:ed:f4:6a:82:8f:bb:cb:16:84:e2:f4:fc:bd:38:51:
         77:52:85:ae:e2:ec:48:bf:83:0c:c5:a6:78:d8:70:47:fb:05:
         bd:29:aa:5a:a7:63:38:55:e1:7d:5f:d2:8e:fa:fb:fa:39:d8:
         90:44:e8:8e:11:f8:74:3b:b6:ce:84:69:46:28:30:25:9c:67:
         18:24:d4:b5:73:76:9f:ed:98:91:ce:cf:31:a4:40:29:57:69:
         e3:5d:3c:06:d7:1b:f9:63:20:10:da:6f:bd:1f:ca:d8:43:eb:
         2c:72:b2:ca:37:90:05:3c:7e:f5:1e:31:07:13:df:c3:b8:1b:
         b5:ae:8b:ae:f0:5a:be:85:c6:39:c0:75:7e:99:b1:e2:ae:e5:
         1c:e5:34:9a:f5:6f:1a:01:37:66:4c:73:24:99:15:3d:47:bc:
         2a:b3:fb:de:69:83:92:cf:39:fd:60:c6:04:d5:dc:fe:79:98:
         fb:4d:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:35:14 2025 by rpki-client