This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File:                     26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier:          cm0eLrf8mRs7RSet2I6o/jT2p75/gt2Ku0rJSL1yKIw=
Subject key identifier:   79:7D:1E:EE:5C:F5:9B:B1:AC:1D:6B:B7:79:E6:60:36:D4:D8:00:E8
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       2E994E9999BA18AE0A968DA3931C67BCC1CBF9B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number:          0534
Signing time:             Wed 24 Dec 2025 07:20:01 +0000
Manifest this update:     Wed 24 Dec 2025 07:15:01 +0000
Manifest next update:     Sat 27 Dec 2025 08:53:01 +0000
Files and hashes:         1: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=)
                          2: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=)
                          3: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=)
                          4: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=)
                          5: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=)
                          6: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=)
                          7: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=)
                          8: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: Q4X7wZ3eAL2EgLNRe6s5rRfV4wN/W1YPnI71fuH+D4I=)
                          9: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=)
                          10: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 08:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:99:4e:99:99:ba:18:ae:0a:96:8d:a3:93:1c:67:bc:c1:cb:f9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Dec 24 07:15:01 2025 GMT
            Not After : Dec 27 08:53:01 2025 GMT
        Subject: CN=797D1EEE5CF59BB1AC1D6BB779E66036D4D800E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:73:ae:f7:39:f6:d7:b3:4e:a5:d9:0a:a2:
                    76:79:41:38:a5:bd:cd:02:9a:3c:cb:c4:0c:ee:50:
                    3b:6b:b7:21:ee:29:41:75:e6:04:f7:4f:75:50:bc:
                    bf:5d:f6:e4:6f:17:db:ef:64:97:59:f2:83:34:a7:
                    73:46:a8:ff:df:ed:28:78:b8:09:f2:b0:ee:58:db:
                    91:c8:54:d4:71:3c:5d:57:8d:f0:0d:d7:97:4e:9d:
                    45:4d:a9:9a:98:b9:6f:9e:18:e9:34:47:e7:c0:80:
                    e4:77:ea:af:6d:a1:da:32:c7:6d:ab:b6:ff:dd:66:
                    8e:ef:7b:f0:fe:bc:2d:83:ee:49:0c:24:bd:75:23:
                    69:41:16:58:9f:af:9a:7b:09:9e:91:a0:47:92:8d:
                    83:91:d5:27:7c:ab:10:52:c7:27:d4:33:23:08:3e:
                    32:8a:4e:85:fb:56:6b:46:c3:c6:fc:9e:56:cb:8a:
                    b7:be:9a:6a:1c:d8:7d:bf:21:33:96:78:d3:dd:6a:
                    1b:3a:3e:6c:4b:e9:84:b2:6e:18:e5:24:53:a0:c9:
                    12:58:2d:81:c7:e7:62:32:48:eb:c0:e6:cf:60:e4:
                    dc:28:d2:14:e7:f6:00:45:78:45:33:87:ac:27:7d:
                    e8:f1:ec:d9:ae:af:50:1d:09:1d:a2:d6:9a:54:35:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7D:1E:EE:5C:F5:9B:B1:AC:1D:6B:B7:79:E6:60:36:D4:D8:00:E8
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:37:40:af:29:11:4f:70:43:c9:df:11:74:e1:19:09:f6:ee:
         4c:f9:8f:67:b9:57:6e:4f:13:d1:8d:ac:04:7a:44:0c:8f:d6:
         72:83:ab:87:13:fe:88:34:61:36:ff:1e:f8:95:27:b9:b8:c2:
         63:ca:1a:b5:17:e2:74:b8:fd:c9:5b:25:ee:35:e2:31:51:8a:
         94:52:01:e8:24:08:b8:a3:91:fd:83:7c:9c:19:9e:a8:f0:46:
         d9:d3:da:c1:47:82:dd:09:be:a0:90:bc:0a:a5:c1:b6:06:bd:
         35:58:c7:c3:b2:81:49:cf:01:fd:99:59:73:4c:aa:85:6a:a2:
         9d:1d:73:07:cf:d8:5e:f9:14:79:78:ed:6a:00:80:4a:a1:f2:
         52:ba:03:03:a8:96:40:d1:5b:2f:a8:0b:f1:a9:64:0a:09:d9:
         5b:2a:c1:32:49:f2:55:37:a0:66:a5:02:4a:20:ed:0c:37:7d:
         eb:94:0b:6f:47:0b:e4:c5:e7:06:ad:15:7e:d0:02:9f:b4:df:
         1f:10:41:ea:77:7a:38:f5:23:cf:c5:a9:d1:da:7c:a2:e6:e0:
         c5:a8:76:83:fd:e9:7b:65:b5:2e:cd:19:99:e2:68:1b:65:f5:
         63:0f:9f:52:04:da:85:be:dc:d4:a7:d4:f9:b3:ff:3b:4b:37:
         ac:94:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:07:22 2025 by rpki-client