This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
File:                     ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft (raw, json)
Hash identifier:          kmig9NVTcqFcIKET06jR/W4gaYV6LACGyrdVclMBB5Q=
Subject key identifier:   8C:38:A0:37:A6:D1:7D:E8:25:DC:09:DE:90:76:D1:3F:F1:6A:B8:C4
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Certificate issuer:       /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial:       55E09F072EEBD51B837F3416378012B6BBEB85FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
Manifest number:          0218
Signing time:             Thu 25 Dec 2025 01:20:05 +0000
Manifest this update:     Thu 25 Dec 2025 01:15:05 +0000
Manifest next update:     Sun 28 Dec 2025 09:34:05 +0000
Files and hashes:         1: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: OjZssXYKrVMWzUnHRz7s+7gvCsjaEtAJXH0INXsIRL8=)
                          2: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 0MTgOgopjubbvpZEDfvpwMMJjT0ePI0/y4zgrFp+eQo=)
                          3: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl (hash: HBiwBxK9zOtoyinvEJPxJhlQYIOWbv6HEnWL0jDL0Cs=)
                          4: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: 874x7Ob+P1gnAjnP1blHxACfVuuuGxnGAVUEWJIVT2g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
                          rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 09:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e0:9f:07:2e:eb:d5:1b:83:7f:34:16:37:80:12:b6:bb:eb:85:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
        Validity
            Not Before: Dec 25 01:15:05 2025 GMT
            Not After : Dec 28 09:34:05 2025 GMT
        Subject: CN=8C38A037A6D17DE825DC09DE9076D13FF16AB8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:ea:58:6e:39:35:ba:c4:59:3c:89:e8:4c:
                    37:92:91:c0:47:4e:87:0b:09:40:ff:13:be:c0:57:
                    56:9d:9b:51:81:86:66:86:fb:88:29:4d:c4:8a:2f:
                    26:3a:3a:7c:a0:2a:a2:50:c3:83:97:ba:2e:9c:a4:
                    ea:fc:11:e9:0d:d1:43:41:a1:2b:f3:d5:83:3e:34:
                    5e:a4:26:42:dd:73:9d:3b:95:59:66:9b:dd:1d:83:
                    61:0a:4a:08:15:f3:f0:fa:42:74:ae:1f:e9:05:9f:
                    2d:7e:02:00:75:7b:31:68:20:9d:99:c9:d8:c5:5c:
                    0c:7a:71:5f:e9:47:3d:14:d2:79:3b:e6:58:8c:55:
                    31:74:c3:38:8c:69:99:10:74:e2:14:4a:12:fb:ad:
                    cf:1b:21:ac:2b:d4:b1:d4:e8:01:07:35:4e:27:12:
                    b6:f7:8b:1e:ea:b3:cc:60:34:a2:da:4b:ea:8d:04:
                    6e:87:9b:7c:4a:4d:5b:80:cc:e5:de:ab:94:5b:c0:
                    34:83:79:19:be:11:34:ed:37:8a:3c:17:29:60:a1:
                    fa:f6:ff:6c:ae:ab:f8:10:ae:74:8a:92:4b:cd:3f:
                    2f:db:1d:b6:33:92:b5:db:da:0f:21:2a:7e:a3:af:
                    4e:4e:a8:f0:8e:2c:e7:00:8f:81:9b:58:32:29:3d:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:38:A0:37:A6:D1:7D:E8:25:DC:09:DE:90:76:D1:3F:F1:6A:B8:C4
            X509v3 Authority Key Identifier:
                keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:00:37:08:00:d3:f8:d3:f7:3c:6b:62:6a:04:ef:cc:4b:
         c7:e4:f6:a1:de:70:57:6a:1c:2b:84:12:20:07:28:e3:f4:71:
         d0:85:9b:15:bc:06:98:28:f5:6f:76:f8:4f:10:30:80:44:07:
         b4:3f:c1:92:1d:3b:0f:bd:70:d5:01:dd:28:0d:61:d3:e8:45:
         4a:f2:db:ba:33:5b:da:e2:32:5a:c2:61:44:9f:1e:84:87:95:
         b0:e6:f7:bf:00:5a:b5:a0:fd:00:1f:f8:f6:ea:16:51:b4:f9:
         de:9e:17:21:ea:70:8c:40:cf:43:43:db:90:be:38:ec:37:3a:
         cf:8a:49:c1:6e:ee:8a:f1:1b:58:48:70:8e:da:a4:1b:51:9c:
         0f:69:fa:68:76:03:35:16:ba:28:72:a9:27:3d:d3:35:46:42:
         e4:26:5e:ae:b3:fa:55:41:67:94:61:1d:61:22:03:85:2d:5b:
         82:88:4f:6b:3e:0c:b6:39:f5:1e:26:d0:64:cd:35:21:7a:d7:
         8d:d3:47:93:0c:6d:c0:e1:2f:e4:31:89:a7:3f:0c:f5:75:aa:
         92:16:c4:8f:ed:01:ba:96:d3:f9:90:31:fb:1f:af:0c:84:03:
         29:0e:5e:da:31:e3:ea:f8:c0:d8:b1:9d:54:21:ca:39:43:ac:
         5a:b9:3a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:17:10 2025 by rpki-client