This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
File:                     F075D91933F7B3147C303794D6C498142A2D33C6.mft (raw, json)
Hash identifier:          enKWFVpZeo3zlgR4J5oYlO7Z/j8rVe/11grK3qiIPDM=
Subject key identifier:   61:00:EA:17:E6:47:5E:38:46:95:B5:61:97:DF:AE:24:72:59:26:8B
Authority key identifier: F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6
Certificate issuer:       /CN=F075D91933F7B3147C303794D6C498142A2D33C6
Certificate serial:       3579F96CC6EE6924FB042579923D47A257D647D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
Manifest number:          01A8
Signing time:             Fri 19 Dec 2025 01:01:43 +0000
Manifest this update:     Fri 19 Dec 2025 00:56:43 +0000
Manifest next update:     Mon 22 Dec 2025 05:09:43 +0000
Files and hashes:         1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: XUjYjomn+FDHeFP35eIIQvW7MGG7ocItLx8+BF1P+J0=)
                          2: F075D91933F7B3147C303794D6C498142A2D33C6.crl (hash: B/LIry/wk99GTEJPnwlzWNLNqv6XOLz8YcqMhxe2W7s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl
                          rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:79:f9:6c:c6:ee:69:24:fb:04:25:79:92:3d:47:a2:57:d6:47:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F075D91933F7B3147C303794D6C498142A2D33C6
        Validity
            Not Before: Dec 19 00:56:43 2025 GMT
            Not After : Dec 22 05:09:43 2025 GMT
        Subject: CN=6100EA17E6475E384695B56197DFAE247259268B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:24:64:42:3f:a6:f1:34:bd:f4:52:7b:f7:
                    30:97:33:c5:69:de:13:b9:32:68:82:ca:f8:5c:07:
                    78:0d:bc:c4:ef:ba:46:54:61:39:18:65:ff:f4:47:
                    a1:1c:a0:b5:41:fb:f1:45:08:7d:0e:c5:60:9c:e3:
                    65:fd:e6:c8:b9:62:e0:a2:a6:4f:ee:89:c2:64:25:
                    0f:93:be:72:1e:d7:cc:3a:21:83:17:16:31:5c:3d:
                    54:88:43:fc:af:d6:47:e9:a9:cb:88:1a:e6:a8:ea:
                    0e:33:2b:3e:d4:5e:2a:ca:72:37:48:81:ca:31:d7:
                    1a:0b:a1:73:40:09:d9:39:7f:4f:de:90:9d:d7:ca:
                    f8:6b:14:5c:0e:0c:c2:21:0d:49:8a:56:7b:91:9f:
                    46:0e:8b:de:94:d2:a6:10:b9:15:d4:92:a1:da:69:
                    0f:16:38:a0:af:fb:97:71:0e:d1:26:f9:1a:8c:f8:
                    26:c2:30:3d:c1:e3:4d:af:fa:36:66:94:53:85:46:
                    57:df:c5:76:00:54:66:cc:49:37:c3:82:16:1c:44:
                    fa:2c:cc:ff:56:fe:27:79:9f:9d:3c:1f:e9:7e:da:
                    87:b4:dc:75:6b:bf:15:1a:cb:06:67:0b:3a:cf:93:
                    ec:91:54:e2:d7:22:9f:a0:7f:ff:81:c2:7c:98:66:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:00:EA:17:E6:47:5E:38:46:95:B5:61:97:DF:AE:24:72:59:26:8B
            X509v3 Authority Key Identifier:
                keyid:F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:88:48:72:8d:bf:d9:32:a2:1c:21:49:0f:83:66:76:c9:
         0f:81:44:7c:a1:0b:b4:be:ec:15:a0:53:b3:8b:bd:b4:22:cd:
         26:d0:e8:6e:55:bd:8e:42:79:a1:4a:e3:5e:20:c4:7f:2c:cd:
         4d:05:29:b8:5c:24:7d:f2:49:6f:49:2a:e3:eb:c9:3b:62:70:
         07:b7:95:cd:55:1f:a0:13:dd:e1:69:8f:82:a3:38:e1:28:25:
         e3:9b:27:a5:30:62:a7:75:86:00:27:03:66:fc:b9:c3:ec:07:
         3b:dc:f3:ec:20:61:1d:42:12:2c:69:15:ff:5e:04:c4:76:df:
         ac:3e:1f:df:f1:1f:6d:08:89:44:39:a9:cb:10:f1:f8:bd:c6:
         ac:76:75:f7:ba:f7:26:d8:a9:d8:34:34:85:c6:42:2b:f2:e0:
         66:4e:0f:f1:b9:af:35:a5:6b:ed:64:f3:0d:46:ed:31:14:fb:
         e6:c4:23:98:44:6b:a7:65:37:ed:6f:3d:be:e0:0f:ec:84:e0:
         5a:5b:ce:31:82:43:2c:a4:13:46:a8:b6:b1:63:5c:06:be:87:
         5d:5a:12:fa:2b:01:5f:3e:ac:2a:54:f3:2d:73:30:5c:dc:97:
         b1:b6:28:f6:0b:ad:22:1c:a5:39:47:ae:11:45:43:7d:bf:b4:
         4e:32:a0:42
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNXn5bMbuaST7BCV5kj1HolfWR9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQy
QTJEMzNDNjAeFw0yNTEyMTkwMDU2NDNaFw0yNTEyMjIwNTA5NDNaMDMxMTAvBgNV
BAMTKDYxMDBFQTE3RTY0NzVFMzg0Njk1QjU2MTk3REZBRTI0NzI1OTI2OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MiRkQj+m8TS99FJ79zCXM8Vp
3hO5MmiCyvhcB3gNvMTvukZUYTkYZf/0R6EcoLVB+/FFCH0OxWCc42X95si5YuCi
pk/uicJkJQ+TvnIe18w6IYMXFjFcPVSIQ/yv1kfpqcuIGuao6g4zKz7UXirKcjdI
gcox1xoLoXNACdk5f0/ekJ3XyvhrFFwODMIhDUmKVnuRn0YOi96U0qYQuRXUkqHa
aQ8WOKCv+5dxDtEm+RqM+CbCMD3B402v+jZmlFOFRlffxXYAVGbMSTfDghYcRPos
zP9W/id5n508H+l+2oe03HVrvxUaywZnCzrPk+yRVOLXIp+gf/+BwnyYZm7BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYQDqF+ZHXjhGlbVhl9+uJHJZJoswHwYDVR0j
BBgwFoAU8HXZGTP3sxR8MDeU1sSYFCotM8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MzJjNTEyMS1mNzQ5LTRhNTQtYTllYy1mNmMzNDlmMzQzMTAvMC9GMDc1RDkxOTMz
RjdCMzE0N0MzMDM3OTRENkM0OTgxNDJBMkQzM0M2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQyQTJE
MzNDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyYzUxMjEtZjc0OS00YTU0LWE5
ZWMtZjZjMzQ5ZjM0MzEwLzAvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4
MTQyQTJEMzNDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAq1iEhyjb/ZMqIcIUkPg2Z2yQ+BRHyhC7S+
7BWgU7OLvbQizSbQ6G5VvY5CeaFK414gxH8szU0FKbhcJH3ySW9JKuPryTticAe3
lc1VH6AT3eFpj4KjOOEoJeObJ6UwYqd1hgAnA2b8ucPsBzvc8+wgYR1CEixpFf9e
BMR236w+H9/xH20IiUQ5qcsQ8fi9xqx2dfe69ybYqdg0NIXGQivy4GZOD/G5rzWl
a+1k8w1G7TEU++bEI5hEa6dlN+1vPb7gD+yE4FpbzjGCQyykE0aotrFjXAa+h11a
EvorAV8+rCpU8y1zMFzcl7G2KPYLrSIcpTlHrhFFQ32/tE4yoEI=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:18:41 2025 by rpki-client