This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
File:                     818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json)
Hash identifier:          zDhaiy2Pp5zIIWMMW+swSVExAWIRd0YS60j72uuGQNA=
Subject key identifier:   3F:C6:8F:77:4B:3C:6D:3F:DA:9E:4F:94:D5:67:E1:D7:D0:D3:BE:14
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       2EBB87D25F2164F34761509291006914066898B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
Manifest number:          0532
Signing time:             Tue 23 Dec 2025 01:12:49 +0000
Manifest this update:     Tue 23 Dec 2025 01:07:49 +0000
Manifest next update:     Fri 26 Dec 2025 12:38:49 +0000
Files and hashes:         1: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: klLZJtnV+xWW7YQzH2mIJ1a0TeqcgHLxJAezwqgVxkg=)
                          2: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: SLH6hiLVAcjKJgYGlgSHzMZrDl0w7mu4FSwj+uEfhtQ=)
                          3: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: oFvKKDxpW/0C/Q3mkSaRj7w7VX6MBfKr//38ErGs2CE=)
                          4: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: mwfCoMcmQK5kNDG65L58kE32bTPPpmEJisIZJKSqB98=)
                          5: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: hpPXUQ5gypmdo+ZfR0ZPUxHpoc6PClgxO5mrZ0mqIsY=)
                          6: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3f3jJh3+oWJeudvuDrAqcUf8ITcTw5/zz4360Ggudd4=)
                          7: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: qNqEjSuCjuvM2nb2P9YufyugF7e/EHHhJHg78hVDerc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 12:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bb:87:d2:5f:21:64:f3:47:61:50:92:91:00:69:14:06:68:98:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Dec 23 01:07:49 2025 GMT
            Not After : Dec 26 12:38:49 2025 GMT
        Subject: CN=3FC68F774B3C6D3FDA9E4F94D567E1D7D0D3BE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:42:91:52:43:ee:0f:d7:2a:34:49:9b:aa:
                    5f:82:4a:82:47:c2:c5:d7:e3:85:bc:94:48:a2:1d:
                    74:63:b1:b4:d1:ad:cb:69:ea:59:62:a7:d5:a0:e3:
                    71:24:76:74:37:8a:19:7e:6e:86:16:2c:d6:fc:6b:
                    ca:5a:c2:25:e9:86:79:c9:67:b2:b1:9a:cf:c0:a4:
                    f8:7c:bf:54:df:10:29:3b:75:26:a0:44:10:e9:45:
                    22:a9:9a:bc:f1:22:1d:97:05:6c:ec:e7:9b:9f:70:
                    3c:97:1c:70:94:5b:5e:47:d6:5b:57:68:b9:c7:6f:
                    d7:38:b6:99:93:c6:a0:77:3d:9e:b9:73:42:21:b4:
                    57:f9:48:a6:48:7b:4c:e4:31:7e:39:eb:24:91:24:
                    16:ca:dc:1a:50:16:9f:a5:59:d2:ed:0e:f3:da:9a:
                    99:77:e6:45:6d:59:40:de:14:0d:0a:52:8e:a0:4c:
                    88:e7:de:7d:e8:3f:a1:e3:7d:8f:5e:da:b6:54:f0:
                    9a:de:07:9c:90:69:f2:44:15:ba:25:33:5b:c3:43:
                    6b:d9:0b:0a:5b:df:95:1a:fc:83:f1:46:cb:f6:71:
                    00:69:6d:04:59:b2:75:1a:93:12:f4:33:80:3f:0d:
                    b9:42:ee:c1:7c:29:d4:82:ff:df:52:67:e6:6f:a3:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C6:8F:77:4B:3C:6D:3F:DA:9E:4F:94:D5:67:E1:D7:D0:D3:BE:14
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:03:2e:f2:6c:76:90:d6:a1:50:90:2c:5f:92:10:3b:c7:
         bb:87:0f:5f:cb:20:4a:3e:36:12:9a:9b:6a:b1:b3:b8:c7:5e:
         04:71:62:66:eb:c4:cd:e9:0c:07:6b:d7:c8:ee:43:8f:37:eb:
         60:9a:5f:94:81:3b:e6:ad:bf:5f:aa:88:06:71:a7:c7:7b:02:
         86:bd:b4:e4:78:25:48:88:0c:3c:4f:1c:bb:e4:de:8f:32:16:
         73:80:48:0b:e2:df:dd:c2:1f:d0:09:1a:c5:25:aa:e0:b8:9d:
         ac:29:d6:e8:d3:c1:bb:b3:c7:f6:56:cc:5b:89:8d:fa:a4:14:
         db:d4:b1:b0:dd:30:00:26:25:a6:71:92:56:c5:2c:e9:51:ff:
         64:ba:9e:12:e6:5e:01:76:a1:eb:c6:56:3f:e5:e1:6e:d3:b4:
         02:b4:13:19:6e:82:c6:07:e2:76:1b:42:e5:e6:2d:47:b5:74:
         b2:1c:68:59:fe:5d:ff:f1:17:cb:76:b1:7f:b0:cb:bd:6e:3c:
         63:4d:db:19:b6:8c:35:52:65:09:62:75:64:ef:ec:bf:02:43:
         d0:56:f7:80:cc:af:45:ea:aa:d1:3b:c2:4e:f6:b1:4f:dc:1a:
         34:83:1c:5d:ad:61:a4:78:2e:ac:c3:52:e4:27:ab:53:a3:14:
         c0:4b:e3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:56 2025 by rpki-client