This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
File:                     1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft (raw, json)
Hash identifier:          S65kCtQ9+sWeaq6wojNoDZLRg+8WeAbLmDRvxtgG6os=
Subject key identifier:   6A:21:9B:1F:12:7E:30:89:34:68:AE:99:8C:BC:5C:50:38:A6:1C:E3
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       66E0C7572B27D74E1061C8CB844D523DA3DC9F70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
Manifest number:          0213
Signing time:             Sat 20 Dec 2025 18:11:44 +0000
Manifest this update:     Sat 20 Dec 2025 18:06:44 +0000
Manifest next update:     Wed 24 Dec 2025 05:45:44 +0000
Files and hashes:         1: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (hash: P8D28JKFM06MNi05ib5wcU9FclilcMp00khEQOaFKnw=)
                          2: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (hash: 3Kl0ykpc+rRNPwjYjMx54Tqd+CRH2FVLtk851hbh3Rs=)
                          3: 3138322e31362e3235332e302f32342d3234203d3e203435323938.roa (hash: 7tSE7KkWcsihzvchBrW5YTBm20JcWETuKHlir2V2b+Y=)
                          4: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (hash: ZBvkqi4wu7ycsgvkdgZN2UrIQ3x4XvFGJe42h/LvuEk=)
                          5: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl (hash: DFT9lx9NcVQlqL65/Npd7dCZOytnmLnIy4TZb6h+RbA=)
                          6: 3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (hash: ayee7O41lSuhdkX8kgFCAyEZoZeltyZMUPLzbervZDg=)
                          7: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (hash: an5W/cXaXaYModPf+N6XOmKZ/Cp6c1fvWdj3PKqPfww=)
                          8: 3138322e31362e3235352e302f32342d3234203d3e203435323938.roa (hash: Ih6LaUurzUOWghMvWPDG/3giShb9DXnYrcHVYKod+qY=)
                          9: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (hash: 76H0qrG4Uy5/8aWW6KHmL8OdUAxhoKIYB8VrEwRt7hA=)
                          10: 3138322e31362e3235322e302f32342d3234203d3e203435323938.roa (hash: /v0Cr6fAOvdJvYC4l4q8Wzedl9V95Oxul6gOFuLUT4s=)
                          11: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (hash: dInQPRjkGOWRH1BIDOtz9jdXpBLceJN8qrYrHJtpPKc=)
                          12: 34392e35302e342e302f32342d3234203d3e203436303234.roa (hash: ZHh4TwmNkfiSfrilBWgPwnleDnUmWbiEe9KNZbEdlK8=)
                          13: 3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (hash: yNFLxX05WMZzMi6ZeEGl6RBki5EIiqpoaz15mWF+Us4=)
                          14: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (hash: bHqpsq84uIhoWcWxe7oYJq3JF/6gomerkmgGc5KSkIk=)
                          15: 34392e35302e342e302f32332d3233203d3e203436303234.roa (hash: UYaCog++0gqvsXDea9mZnkKimC89Lnd8uWKZu9Blm80=)
                          16: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (hash: zyocrG2hpeP9qlrJD0AmGWe005OQobfbPO7J468S0C0=)
                          17: 34332e3234392e3231302e302f32342d3234203d3e203435323938.roa (hash: k7dWhdkZK9UJDfOHlX9DtKI4ltVhma3w/Rs97O9liQA=)
                          18: 3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (hash: uiNs4PF5jn59nxQSw5oyyEUEF1jh8DIcSo1Ma1LzQ/Y=)
                          19: 3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (hash: Br2zhO2mtWf4byMN5oW5IF0fqGbzZ4jKe7O7XXXytF4=)
                          20: 3138322e31362e3235312e302f32342d3234203d3e203435323938.roa (hash: Mt1DXYTW3OSb5Bm3PeVFWr97+FI1i3tLsNyzndoYvcM=)
                          21: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (hash: 1w/9LRyUE06eBEdRnx71e6cTE3cd85bkpMBBImnruAE=)
                          22: 3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (hash: ofYpfyIwrFc3EyGc5HbuOjiaT8PI5lzgpR6J06rc1og=)
                          23: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (hash: mn89fCBpa1L+r4Zi4IcWuFHARAg3/d1uhObCHoGGpiQ=)
                          24: 3138322e31362e3234372e302f32342d3234203d3e203435323938.roa (hash: 4amRYbhJJSDWXkkRhhbgFlFkWrr2hCXvNhf2mcpgA/s=)
                          25: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (hash: ICLKoH8LfO9RPqo2cawJT61bywbgOJprlh0DKtnFRUE=)
                          26: 3138322e31362e3235302e302f32342d3234203d3e203435323938.roa (hash: x0aTPjrDPj2tG+isyUHS4PYr+Z/d0GFTwX/xZzQ4/Ng=)
                          27: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (hash: uqHQK1i4at+YRbQKPp9nCOZWuomqh/0ErADJ9NJSjx0=)
                          28: 34332e3234392e3230392e302f32342d3234203d3e203435323938.roa (hash: HKEFlGd3fuMjLaak9jaJVW3JC6xTjvu6XpG5EhM3CNI=)
                          29: 3230322e34332e37322e302f32332d3233203d3e203435323938.roa (hash: CmCK8ZpA/FudP6hIFHJcphPOJ9k3R40wP9Auosw941k=)
                          30: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (hash: hBeqiHGxmy6NCMgmNV6p5ha99Si74kGBcjRNx7S7+Rw=)
                          31: 34392e35302e352e302f32342d3234203d3e203436303234.roa (hash: +bXCaBbua6T2KBv/snNdo+ibMSi47YiRL7LuzmtTWcA=)
                          32: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (hash: 9GPvbzS14nrsGqBa86Psp3VYtnnpTdNwmEPZ8WpOVfk=)
                          33: 3138322e31362e3234322e302f32342d3234203d3e203435323938.roa (hash: uhBFE26V8tIU7PQEDrMRdIxjx5J3XkgvP9oT8QwvDXE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 05:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e0:c7:57:2b:27:d7:4e:10:61:c8:cb:84:4d:52:3d:a3:dc:9f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Dec 20 18:06:44 2025 GMT
            Not After : Dec 24 05:45:44 2025 GMT
        Subject: CN=6A219B1F127E30893468AE998CBC5C5038A61CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:3c:cf:f5:a2:1a:22:07:1c:36:71:a2:0a:
                    88:ad:e5:7a:1f:ed:20:d6:7e:50:96:bf:e1:63:7e:
                    5b:b1:4c:29:5d:4d:d1:86:4f:37:b2:3a:c8:6c:96:
                    cf:9e:ee:eb:c5:6e:ce:28:c2:8c:0d:2d:05:18:31:
                    4b:0a:b2:3c:ba:70:52:0f:0b:c6:e1:6d:24:ac:8b:
                    d2:f1:81:27:a9:5e:d0:27:d2:5e:1a:84:f0:bf:57:
                    5b:5c:29:e5:99:07:ca:e9:1c:3e:c0:67:5f:32:e2:
                    98:78:91:a5:9f:fb:8d:7f:f1:9f:dd:f3:78:c3:ad:
                    71:94:0f:91:c3:7c:c0:55:eb:ce:b4:c2:30:fb:34:
                    86:ea:08:d4:5f:57:be:1a:4b:a4:d8:a4:b0:2d:dd:
                    1b:de:49:82:b9:bd:c0:15:9f:e0:27:23:2e:c1:4b:
                    19:e8:be:5b:a8:e3:2e:de:44:91:b5:a7:80:4b:39:
                    16:fa:0e:1a:dd:40:50:2a:91:42:48:0b:6b:f6:50:
                    27:8f:88:88:73:b6:f3:79:6e:15:2e:16:d0:d0:2a:
                    b9:ac:e1:91:68:54:da:56:41:c7:f6:b1:11:75:f4:
                    65:b0:3b:1d:93:d2:e8:55:1d:c1:e3:15:b1:1d:22:
                    fb:c8:fd:8d:e5:c2:d3:56:04:3b:04:81:30:60:8c:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:21:9B:1F:12:7E:30:89:34:68:AE:99:8C:BC:5C:50:38:A6:1C:E3
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:9b:d5:e1:5e:ba:25:01:c8:55:00:f9:fd:80:f2:7a:84:
         e3:32:3c:b4:01:98:f6:9f:cb:c3:b7:81:64:67:f0:4d:84:5d:
         78:1f:97:1b:5f:1b:21:cb:83:c4:dc:60:cd:1c:ca:e6:ed:e1:
         7b:51:e8:97:6c:2e:b4:1c:1d:96:d9:c4:dd:6d:d7:5d:63:85:
         c5:86:64:12:96:e6:2f:d0:c6:c5:41:7d:31:d5:f3:32:68:06:
         64:69:94:87:4b:08:f2:67:c1:8e:e9:31:6e:87:d7:c5:9a:34:
         35:3e:bd:f3:45:c7:6c:fe:cc:19:77:34:1d:a4:af:92:9d:2a:
         a8:ea:d2:55:72:3e:be:c4:b9:d8:51:5a:88:a1:13:f7:06:93:
         d7:b6:4f:53:7b:1e:5e:1d:9b:dd:15:b7:5a:24:01:99:74:15:
         a2:cc:33:56:2e:a8:59:29:c8:e5:f7:c5:4a:0c:4a:3f:f9:a8:
         58:68:e3:38:18:88:02:33:2c:0d:db:99:12:01:10:41:8d:0e:
         d6:26:98:f2:d3:c4:3c:dd:5d:02:71:aa:87:8a:81:3a:6b:18:
         ec:da:e4:0d:87:cf:8f:5b:53:e2:46:27:11:26:06:85:74:91:
         fd:61:28:99:78:be:63:a5:f3:4a:40:5b:c8:03:b5:db:4a:a5:
         1e:c0:49:9e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZuDHVysn104QYcjLhE1SPaPcn3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD
ODg2RjFERTAeFw0yNTEyMjAxODA2NDRaFw0yNTEyMjQwNTQ1NDRaMDMxMTAvBgNV
BAMTKDZBMjE5QjFGMTI3RTMwODkzNDY4QUU5OThDQkM1QzUwMzhBNjFDRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VzzP9aIaIgccNnGiCoit5Xof
7SDWflCWv+FjfluxTCldTdGGTzeyOshsls+e7uvFbs4owowNLQUYMUsKsjy6cFIP
C8bhbSSsi9LxgSepXtAn0l4ahPC/V1tcKeWZB8rpHD7AZ18y4ph4kaWf+41/8Z/d
83jDrXGUD5HDfMBV6860wjD7NIbqCNRfV74aS6TYpLAt3RveSYK5vcAVn+AnIy7B
Sxnovluo4y7eRJG1p4BLORb6DhrdQFAqkUJIC2v2UCePiIhztvN5bhUuFtDQKrms
4ZFoVNpWQcf2sRF19GWwOx2T0uhVHcHjFbEdIvvI/Y3lwtNWBDsEgTBgjFNpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaiGbHxJ+MIk0aK6ZjLxcUDimHOMwHwYDVR0j
BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw
M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2
RjFERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVlYzI1ZTQtOWFhOC00YmVmLTkw
OTctYzBiZWMwYjI2NmE3LzAvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4
N0JDODg2RjFERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGxHm9XhXrolAchVAPn9gPJ6hOMyPLQBmPaf
y8O3gWRn8E2EXXgflxtfGyHLg8TcYM0cyubt4XtR6JdsLrQcHZbZxN1t111jhcWG
ZBKW5i/QxsVBfTHV8zJoBmRplIdLCPJnwY7pMW6H18WaNDU+vfNFx2z+zBl3NB2k
r5KdKqjq0lVyPr7EudhRWoihE/cGk9e2T1N7Hl4dm90Vt1okAZl0FaLMM1YuqFkp
yOX3xUoMSj/5qFho4zgYiAIzLA3bmRIBEEGNDtYmmPLTxDzdXQJxqoeKgTprGOza
5A2Hz49bU+JGJxEmBoV0kf1hKJl4vmOl80pAW8gDtdtKpR7ASZ4=
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:27:49 2025 by rpki-client