This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File:                     00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier:          UGMJf1ldevKwUf1BZEtFb8nhNmiLXREqhbKAFE6RDkI=
Subject key identifier:   FA:07:06:A6:E9:1D:BC:4F:06:53:CF:89:D6:FC:C5:D9:BB:F6:57:34
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       2C7413815B592DDCF2D1E91EAE283811595FF0D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number:          0231
Signing time:             Wed 17 Dec 2025 14:10:40 +0000
Manifest this update:     Wed 17 Dec 2025 14:05:40 +0000
Manifest next update:     Sat 20 Dec 2025 15:46:40 +0000
Files and hashes:         1: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=)
                          2: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: oOdkzUMhWiV8RYKVpP+DjzstiVGxbGTPIWzG22cdnjM=)
                          3: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=)
                          4: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=)
                          5: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: s40PNuPdNfcWQatEkq0oOjj78y3YVxe60B1MhUs2hPU=)
                          6: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=)
                          7: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: SFv+wuFNNUXZIPzGgJ8H4FmCqsXvXTtUEEjtGiij04Q=)
                          8: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=)
                          9: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=)
                          10: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: rkVkBOM1gxwGdr/crh5svI3UEvA+KgJo/zG78neJc4s=)
                          11: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=)
                          12: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: vQNNu9YJ8btksvipQ+k6LXMhfFjvs6jgzFANv/66aHA=)
                          13: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=)
                          14: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=)
                          15: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 15:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:74:13:81:5b:59:2d:dc:f2:d1:e9:1e:ae:28:38:11:59:5f:f0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Dec 17 14:05:40 2025 GMT
            Not After : Dec 20 15:46:40 2025 GMT
        Subject: CN=FA0706A6E91DBC4F0653CF89D6FCC5D9BBF65734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ed:1e:b2:f9:29:23:a7:46:27:e3:ca:78:f3:
                    7c:f5:cf:2a:55:2c:36:d0:86:e2:ce:71:73:75:49:
                    aa:eb:c3:7c:b4:0f:2e:41:e1:0f:03:8c:c5:43:02:
                    01:87:fb:a3:25:e9:b2:da:cc:70:f1:ad:f9:00:3b:
                    6b:40:2d:60:20:3b:6d:df:81:66:72:c0:e1:a1:1a:
                    27:73:5d:00:51:b7:ca:0e:de:29:01:fa:30:fe:c1:
                    9f:d0:47:fa:64:76:60:fd:35:52:95:6e:a3:ef:c5:
                    4b:d7:4f:51:49:8e:83:ed:10:d6:49:49:7d:7d:50:
                    1d:b7:83:5a:fc:36:d3:67:2b:97:a9:03:b5:e7:f8:
                    56:60:80:ce:51:da:0b:32:ee:27:37:e8:b0:46:25:
                    99:38:a6:30:66:47:0d:1e:45:c4:10:4e:2c:9a:9d:
                    92:cd:3f:51:d4:33:d1:77:63:a4:13:56:57:54:ee:
                    9b:39:51:1f:e5:78:fb:72:29:f8:46:cd:bd:bb:27:
                    0f:1d:2c:ec:7c:c9:01:8f:7d:c0:0a:1c:57:af:2d:
                    c9:1f:c1:c2:c8:3a:ee:00:36:56:5b:6a:f7:32:f7:
                    37:16:f6:21:e9:c0:15:0c:21:7b:25:42:cf:dc:74:
                    25:58:4c:81:31:bb:a0:7b:77:a2:ee:78:b6:c5:cb:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:07:06:A6:E9:1D:BC:4F:06:53:CF:89:D6:FC:C5:D9:BB:F6:57:34
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:99:e3:38:80:ca:61:2c:d6:af:0d:a5:d6:25:1f:60:1f:
         92:19:f7:ce:ca:41:9a:5a:8e:44:cc:db:bb:5b:de:71:8f:a9:
         89:19:e1:2a:7a:5d:ff:e3:f3:64:5c:79:ce:8e:96:cb:d4:8a:
         c3:b6:8a:39:e1:a3:0b:e8:3f:07:ab:dc:d1:a3:9d:b4:55:01:
         06:b9:67:45:52:97:f8:3d:e8:84:35:74:a9:2a:e9:3c:ee:d3:
         45:63:2e:be:b1:65:3d:c5:26:1c:49:a4:18:8d:1e:3a:5b:e5:
         7a:78:5a:9e:88:6f:ed:a8:3a:43:a5:de:ab:a7:2b:9d:8a:7b:
         5c:d0:1f:29:f9:76:36:62:89:f7:c7:64:84:ef:69:08:70:c0:
         30:28:19:57:a5:69:80:3f:1c:3f:5e:50:cd:59:d5:72:04:b2:
         e8:65:fd:70:94:b6:29:c6:18:7f:fb:40:c9:5c:99:0d:36:0b:
         65:d6:c4:9b:a1:89:cf:f2:9c:a3:36:0d:c6:ca:7b:fe:16:49:
         87:e9:31:b1:fa:6a:6b:80:14:2e:4c:be:7b:64:a4:a2:96:64:
         fd:89:21:a0:97:df:ed:84:14:6f:f4:da:97:31:d5:83:76:39:
         a6:e9:d4:e4:72:66:d4:79:5d:df:65:a4:f4:de:95:76:53:40:
         0c:ed:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:12:01 2025 by rpki-client