This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          cizd4l4kqsgWfdnqcNvMQmebo8jjynQBkPYRWDbSxCY=
Subject key identifier:   AD:00:60:85:47:29:D1:BD:10:2A:6D:86:7C:0F:38:B6:0C:36:E5:80
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       49C89C86C5248A97C41CD40F257E70D971CD1D77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          054E
Signing time:             Fri 19 Dec 2025 05:33:15 +0000
Manifest this update:     Fri 19 Dec 2025 05:28:15 +0000
Manifest next update:     Mon 22 Dec 2025 09:42:15 +0000
Files and hashes:         1: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=)
                          2: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: PE8TrRaW4vcKNAJ983twfVSijpuNJ3TLSSc+Qt8t8hU=)
                          3: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: U/6aanmiS3G1NNN9piNHjwZVd8g8y5TJEUDFQPXUGlk=)
                          4: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: UcZisdRV6VpbDwvpN9+PovvAC3nXLEWnKVwQNbh4YQE=)
                          5: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=)
                          6: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=)
                          7: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=)
                          8: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: /OV3FSofLLyK+iTcfbSjhU/+4048JDTJiHAH9TtEyl4=)
                          9: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=)
                          10: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=)
                          11: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=)
                          12: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: gXLN3MXkJce/eFsTQ9PNYvadHko8wdBPO3cRtiaDQ0I=)
                          13: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=)
                          14: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 09:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c8:9c:86:c5:24:8a:97:c4:1c:d4:0f:25:7e:70:d9:71:cd:1d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Dec 19 05:28:15 2025 GMT
            Not After : Dec 22 09:42:15 2025 GMT
        Subject: CN=AD0060854729D1BD102A6D867C0F38B60C36E580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:af:fb:47:a2:6f:d8:fc:b6:1c:35:40:96:
                    0f:a0:0f:64:23:77:40:05:ee:cc:32:da:01:02:54:
                    c1:93:61:9d:48:4b:05:9d:a4:09:5d:15:01:51:2b:
                    06:03:94:35:90:97:6a:15:68:c9:3c:9a:04:e9:d5:
                    02:50:bc:26:90:f5:90:50:a4:d4:9f:a8:fb:0d:bb:
                    1c:c6:1a:f9:34:12:0f:19:09:20:d8:8c:e7:99:49:
                    b0:f0:20:d5:d3:ea:13:37:c9:82:1b:c7:9c:f5:66:
                    e6:38:51:a8:ac:94:f2:2b:95:3a:ce:c6:2b:ed:34:
                    53:81:86:a8:2a:ef:3d:41:29:20:43:c2:e5:dd:91:
                    f9:bf:79:59:2b:cf:16:82:52:4d:a0:97:ff:f3:e9:
                    bb:3f:c4:5a:92:ca:e1:d1:c9:32:81:f4:6b:ee:cb:
                    fd:dc:99:e0:d2:5d:37:c9:74:09:06:71:37:55:06:
                    a6:99:8d:d4:1b:ab:c4:85:73:3c:f7:3f:8a:41:33:
                    f4:d3:c6:71:df:f7:36:a9:b1:44:da:48:6f:bb:f3:
                    56:34:14:49:ad:c5:3e:db:38:fe:ce:40:d4:aa:7c:
                    e4:52:cb:32:83:87:ac:cf:57:10:0c:61:50:53:d9:
                    9b:e0:2d:e7:b7:fd:0d:47:6c:25:a9:bb:72:cf:c9:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:00:60:85:47:29:D1:BD:10:2A:6D:86:7C:0F:38:B6:0C:36:E5:80
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:60:5b:c2:53:96:8a:b1:9a:08:03:ad:7e:5e:7b:15:5c:fa:
         1b:22:6e:7f:98:5b:94:2c:4a:cd:a4:1d:dc:56:af:c7:1a:62:
         c2:d5:3d:aa:60:8e:aa:d1:30:e6:ea:d9:2e:e5:67:93:86:4b:
         16:51:93:85:46:70:d6:8f:1f:61:4b:ee:33:8c:33:07:b4:fc:
         a5:09:aa:1f:df:74:e4:66:5b:1c:7c:26:d6:64:bc:19:ca:aa:
         f3:5e:69:ad:ac:07:aa:5b:65:b2:d6:70:25:99:24:2e:8b:27:
         14:59:a5:1d:01:85:3d:a9:fc:59:00:37:9f:ec:7f:e1:71:23:
         e6:be:c6:b8:44:03:93:4e:55:08:6f:27:c0:71:8e:d3:e1:03:
         ec:40:98:e3:18:a0:89:37:65:24:76:bf:fa:b0:90:4b:c0:97:
         32:9a:f0:c7:97:86:30:19:3e:43:78:40:6f:66:19:ad:85:e0:
         4c:51:28:c7:d2:da:ec:1d:c0:df:e1:b3:e0:5e:95:61:35:dc:
         2c:3a:11:08:fc:a4:33:c0:23:18:94:76:6b:b7:95:99:03:6b:
         db:d8:48:c9:96:77:a6:0c:37:dd:16:1f:3f:6f:f0:aa:c1:25:
         b3:cc:40:d9:07:d6:80:7c:0a:58:19:e9:e2:ac:b0:2e:dd:bc:
         a1:ae:af:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:40:19 2025 by rpki-client