This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File:                     29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier:          WldsgDyw9l9v+YQE9j8+CQnb4vhuNQTffxH61X4rLc4=
Subject key identifier:   E1:5A:86:E5:A0:A5:69:5F:F4:24:98:F7:2A:0C:96:F7:AC:8A:3A:D6
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer:       /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial:       4B18497D294A43886C4238E42D4F7CEECB4FFCFE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number:          01FD
Signing time:             Wed 17 Dec 2025 23:01:01 +0000
Manifest this update:     Wed 17 Dec 2025 22:56:01 +0000
Manifest next update:     Sun 21 Dec 2025 07:35:01 +0000
Files and hashes:         1: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=)
                          2: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=)
                          3: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=)
                          4: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=)
                          5: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=)
                          6: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=)
                          7: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=)
                          8: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=)
                          9: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: fFOaZEgWPzng1ZU6KvXQ6mb+ZRwdxcxWBjuvnHrk+aQ=)
                          10: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=)
                          11: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=)
                          12: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=)
                          13: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=)
                          14: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=)
                          15: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=)
                          16: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=)
                          17: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=)
                          18: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
                          rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 07:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:18:49:7d:29:4a:43:88:6c:42:38:e4:2d:4f:7c:ee:cb:4f:fc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
        Validity
            Not Before: Dec 17 22:56:01 2025 GMT
            Not After : Dec 21 07:35:01 2025 GMT
        Subject: CN=E15A86E5A0A5695FF42498F72A0C96F7AC8A3AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:99:5a:65:c8:04:6e:0e:c1:5d:ee:f4:43:
                    67:3f:a9:f6:07:38:ae:fb:32:6f:ac:88:d5:df:25:
                    0e:62:82:5d:23:bd:11:bb:ae:3e:6f:12:02:db:b6:
                    54:62:4f:85:4f:b1:04:d8:bf:1f:5b:3b:97:07:70:
                    30:35:9e:cb:11:67:51:dd:bc:5c:7b:26:8d:1b:51:
                    99:cd:d4:dd:61:9f:fc:ef:bc:93:96:d0:68:04:89:
                    81:b7:32:35:a1:a2:b4:dc:96:e4:6a:74:7c:d7:ad:
                    c2:f4:61:be:f0:78:0c:4d:ff:51:e7:33:d8:1a:c7:
                    df:4d:fd:ef:6f:a5:a7:88:3b:e8:6a:ca:b3:7e:56:
                    67:d5:62:2c:a9:77:95:c7:70:33:34:f6:4b:5d:a4:
                    d3:54:c3:a6:ec:28:fb:8b:4d:c7:93:db:f3:32:c2:
                    2f:72:be:66:60:48:d6:1a:93:b8:44:b8:de:2f:c5:
                    34:6a:06:c5:d7:a4:b5:50:c1:91:30:49:1b:63:54:
                    4a:37:4c:68:95:a3:54:aa:c2:b7:40:86:68:43:dc:
                    90:cf:c0:30:d6:16:64:e0:cd:cd:7d:cc:9f:54:9e:
                    c5:e4:ae:59:96:b4:e6:72:62:60:6f:0e:73:6e:6e:
                    2d:49:1a:e2:3f:9f:78:3b:e0:70:f0:48:01:f2:11:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:86:E5:A0:A5:69:5F:F4:24:98:F7:2A:0C:96:F7:AC:8A:3A:D6
            X509v3 Authority Key Identifier:
                keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f9:61:bb:78:90:93:97:6b:ae:16:9a:20:ad:2c:02:60:8a:
         ac:a0:33:38:34:f8:23:a7:49:c4:4e:6a:d3:c5:f1:ad:2c:35:
         ae:cd:af:47:23:33:1a:51:b1:e2:b5:cd:ef:1d:b7:a9:4e:a0:
         87:3b:72:d0:b9:c9:0a:fd:b9:45:00:f7:58:ba:ac:32:14:4d:
         6b:f6:93:f3:27:6f:24:7e:b1:b9:0a:c5:d0:3c:9e:85:2b:9d:
         5b:03:9f:c7:de:3e:0b:0c:e5:c3:6e:e5:dd:bc:cd:21:eb:c2:
         9e:f7:0a:23:cd:7a:7a:58:bc:1d:96:6d:8e:2d:b9:f1:57:55:
         30:81:a7:b7:57:d6:20:2e:1b:b3:f6:6f:2b:18:cf:07:99:dd:
         3f:71:bd:a8:a3:da:8f:c3:cc:b0:55:d4:cf:a4:4e:b5:c0:8f:
         dd:4c:b6:73:d9:3a:ae:5d:84:6a:83:23:8b:62:28:b2:0c:7a:
         4d:62:3e:07:b3:a7:fc:3d:be:ed:2e:db:c5:17:e4:98:f2:a5:
         b6:d4:50:98:f1:19:7f:18:74:32:36:a3:0e:68:87:47:92:b0:
         91:94:79:7c:1b:b0:96:be:26:5f:7b:bc:1d:ca:cb:08:aa:86:
         55:99:09:15:e7:8d:a0:8a:32:c0:23:11:69:55:9c:a8:8b:44:
         86:b0:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:40 2025 by rpki-client