This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File:                     CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier:          T+jA/UnIGSHnxu8EeeMugTqeq+qkLN23clFVxStNLhs=
Subject key identifier:   F3:76:1B:C8:53:D6:63:E3:9C:06:16:91:3C:F1:0D:FE:E8:01:8D:68
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       31D6DDF9228648603D03E92A73D6C9CC97CE4C32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number:          0540
Signing time:             Fri 19 Dec 2025 18:24:06 +0000
Manifest this update:     Fri 19 Dec 2025 18:19:06 +0000
Manifest next update:     Mon 22 Dec 2025 22:44:06 +0000
Files and hashes:         1: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
                          2: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
                          3: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
                          4: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
                          5: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
                          6: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
                          7: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
                          8: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
                          9: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: PH8EGhGKU3NIk6lGWkx2uqt4ai5rITMMdnKz7iqciNc=)
                          10: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=)
                          11: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
                          12: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
                          13: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
                          14: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
                          15: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
                          16: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 22:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d6:dd:f9:22:86:48:60:3d:03:e9:2a:73:d6:c9:cc:97:ce:4c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Dec 19 18:19:06 2025 GMT
            Not After : Dec 22 22:44:06 2025 GMT
        Subject: CN=F3761BC853D663E39C0616913CF10DFEE8018D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2e:08:d3:ae:19:7a:d6:7f:0b:5c:69:56:91:
                    7a:c0:2d:32:79:94:bc:8d:00:66:b6:d6:9d:e9:6f:
                    0e:73:18:08:81:5d:b7:0f:d2:73:fa:1d:df:7a:3d:
                    87:1a:3d:f4:33:f5:bf:77:75:59:58:93:00:c4:8c:
                    2c:eb:5c:76:a7:81:a5:54:75:49:d6:55:9e:39:43:
                    7e:e4:42:ce:24:d7:1b:9f:88:08:6b:3f:0e:01:46:
                    27:a6:1a:a8:9e:92:33:ab:f1:44:7e:0d:61:76:51:
                    86:32:4f:ef:e5:be:51:3b:09:76:a5:67:79:95:c2:
                    7c:6b:9a:6b:03:87:e2:4d:67:8c:9d:e2:0c:9e:f9:
                    a6:47:75:09:2f:ab:95:aa:77:75:fb:b8:4e:1a:a3:
                    f7:bf:8b:91:e7:ff:26:d6:30:a4:dc:a6:ad:b8:69:
                    35:88:9a:88:24:3f:2f:2e:d8:63:8e:e7:76:a3:99:
                    aa:3f:28:41:e8:93:6b:fa:4f:d2:ca:ea:04:8f:c7:
                    ad:75:5b:66:63:a6:bb:c4:5c:6e:77:b9:97:6c:98:
                    02:2a:c2:69:51:15:4e:1f:02:1e:fa:5f:ea:e8:83:
                    a3:17:b5:d2:d8:3e:89:7e:35:1d:3f:3d:6e:99:29:
                    b1:df:11:81:8a:9b:16:7d:ee:6c:49:53:96:40:35:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:76:1B:C8:53:D6:63:E3:9C:06:16:91:3C:F1:0D:FE:E8:01:8D:68
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:92:34:4f:45:34:06:69:58:a7:34:00:a7:e2:43:80:7d:03:
         9f:67:1a:25:ba:dc:c0:2c:31:14:dc:25:00:61:2f:77:11:58:
         98:ba:9c:90:38:c3:78:14:ce:13:b4:94:dc:0c:32:1d:15:14:
         41:18:f6:73:48:8c:52:e4:09:f9:f8:a5:88:80:e8:a8:ef:65:
         71:87:cc:a3:aa:af:49:e5:09:36:4b:ee:16:f4:48:f1:89:13:
         45:24:d2:fa:52:b2:30:47:57:d6:30:8a:ad:c4:22:14:7e:65:
         a2:b5:23:63:c2:bf:7c:62:fb:9b:be:3f:51:2f:02:66:0e:e6:
         da:36:1e:bf:2f:c5:58:f8:97:39:7d:ee:a7:50:30:13:d7:b1:
         d9:98:95:8a:e4:0e:c0:d1:ae:cc:32:a9:6c:01:f4:07:96:7a:
         c1:d5:5c:4e:00:bf:72:e9:ac:e4:96:ba:a5:cb:79:50:c3:e1:
         b5:37:59:0a:6a:77:75:0f:7c:fd:f7:4e:1c:4a:65:ad:c0:c9:
         35:b5:6b:2a:9e:05:dd:a8:78:c6:9d:5e:15:55:7a:d2:f4:48:
         a1:41:cf:3e:23:54:a7:20:26:f2:56:f0:df:95:bf:38:cb:9f:
         b1:ca:b4:2f:09:c8:84:32:71:91:c6:dc:68:75:ba:7b:a6:6d:
         0a:e3:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:06:39 2025 by rpki-client