This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
File:                     935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft (raw, json)
Hash identifier:          Aub6wdXTY+C0ffyfu48WpqjzVzC6h1wthE/5tcmenak=
Subject key identifier:   B3:84:25:F9:AD:2F:B2:9C:4A:1D:BB:19:40:13:12:59:BA:30:64:14
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       39ECFF2136CDEAE248442496B8D3C249CE255C0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
Manifest number:          0544
Signing time:             Thu 18 Dec 2025 11:51:09 +0000
Manifest this update:     Thu 18 Dec 2025 11:46:09 +0000
Manifest next update:     Sun 21 Dec 2025 16:40:09 +0000
Files and hashes:         1: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: Pzi7GR8j0R6wiVbVAxvFIEhEVNaHRMjCobhRay+uqBw=)
                          2: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (hash: lmN8CKwnpjABLBKuKVDCz9e5H4GmlgOLsUei3+Y0saA=)
                          3: 323430323a3630303a313a3a2f34382d3438203d3e203338353135.roa (hash: uXjjFF8r0bZTRb9FAMyxiQMT6f66pjylh6TLVp8RaRI=)
                          4: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl (hash: q4T0terA5UXS3Odd2sb2SEu1j+mfYSI9IOiOS+UklhA=)
                          5: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: 6BrOpQSKuPFPKi6z67zX+xJmpWv9+MYDX1HsymznhbY=)
                          6: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (hash: jfQj9Xe+FFUAvRMk0Cart8oc9Moe7xONTWgrujdxqvw=)
                          7: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: xgt5xEDp+XFwH8hLX8aUiO3xy0s9+XFKXBjJZ88c3KE=)
                          8: 323430323a3630303a62313a3a2f34382d3438203d3e203338353135.roa (hash: YPCHB9+pVaURl8+dAGmuKHWAAYIp9zXHQ5RNjAvQlWA=)
                          9: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: Cz55zbo2bg8BQ/A4k8o5Tsse3KPVQaX+P2Zyl0kj47o=)
                          10: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: x/FofJeZNxkVPOa1E9HkT3zXzpIkigVr7Dyocx4wMZs=)
                          11: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: SXRbQUacdI0gdlDCMDP1QFPdIAK9kHRg+ZOPQumVqeM=)
                          12: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: UiXaStQAKJGueqgS6CXK/3jB9NOQ2r7CCSqgVa6KSp8=)
                          13: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: We1k3RElK9GB1JUpvlgdlEhaIFsMFI9pBQlBnBG9xm0=)
                          14: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: HLVBD979pS8wg1hMg/z3bLcZUZBMG19OyH8qnmPOiEQ=)
                          15: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (hash: vdW3QTcBsIPY6dF/jSl1kcP+cWlLsmSjo55p09Ujwos=)
                          16: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: CdtTtCGcqTSKprBM/SSCJUpSOUzh3lZ3WFYK1XycLjs=)
                          17: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: 3SF0bAW+7rz1kqWvQ04ZAo3EXSDUW7WAvx83Y52xCYs=)
                          18: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: MZkAsgI1LK8w1LPPO7mrWaTwnV05X/ESMWLzLbTQIP0=)
                          19: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: 5lJDAspWdkYKRvft5YJv1y1oL5whXpt3WUE0fOXTEtQ=)
                          20: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: nL5h7t1uvPTY7j/fOmJJBHbseWsW8Xn8jUveWxlnXWs=)
                          21: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (hash: MHLvNBBDeKLXnh9zpHXyspbjmbbkMSXMU/LUFMRRAKk=)
                          22: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: 89A2hU4ZNeLlTQWFk//hToBFYmlDJWFVlljqu9huGYU=)
                          23: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: AnoAXlk+ZznXZQFLclniCilxBvQYCPfhm7aj/ofKMUY=)
                          24: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (hash: hBCdf6MQ44EMODLH0goT5EgLIomwJ27fDjdA8l3goK8=)
                          25: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (hash: lR+WSBiL7cOFUb1JcRW+5/d+PDThjLOWPJrqzwsQquY=)
                          26: 3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (hash: OqpoVOVJpUhsB4C42PcVh81+Ms4dKWfSDdEhcsKwE60=)
                          27: 323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (hash: 7dk3+UbgX607IlNTst1WKsK+D+Kfaq5vP3vfslx3Dv8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 16:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ec:ff:21:36:cd:ea:e2:48:44:24:96:b8:d3:c2:49:ce:25:5c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Dec 18 11:46:09 2025 GMT
            Not After : Dec 21 16:40:09 2025 GMT
        Subject: CN=B38425F9AD2FB29C4A1DBB1940131259BA306414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:be:ba:94:cf:15:2b:c3:f1:db:60:f6:1c:
                    ed:ff:97:bd:39:cc:16:0b:a5:28:28:45:07:cb:14:
                    a3:ad:c5:48:35:88:d5:b3:0c:5a:71:9f:cc:7c:27:
                    69:37:8f:4d:52:fd:6f:9c:8b:84:8a:7d:17:c8:71:
                    b8:5f:18:da:11:52:62:04:17:12:c1:30:e5:b6:3e:
                    69:0e:7d:df:0b:66:e1:e9:54:f2:b7:3a:ff:08:21:
                    35:47:b0:35:f9:ee:2e:e3:97:9b:53:22:d4:e0:39:
                    2b:ac:18:91:8c:c1:df:1b:70:0f:58:42:22:1c:62:
                    3d:98:30:39:da:2b:38:f5:55:55:63:71:c3:e4:ff:
                    ff:68:05:73:9f:46:06:db:9d:75:16:ef:9a:07:67:
                    22:24:74:3b:58:ca:c9:5c:b2:ca:7d:db:74:64:76:
                    94:66:10:b1:a8:d8:88:ec:92:96:c7:02:bd:be:ca:
                    e4:49:59:ea:9b:08:25:3f:76:35:4f:f4:7c:88:1a:
                    93:30:b9:03:1e:08:3e:2f:3a:d7:e2:55:bc:d8:97:
                    b3:e3:10:7d:d0:64:57:aa:87:30:ce:d5:3f:bd:44:
                    df:d9:47:26:f4:14:31:69:e4:e5:c5:35:23:cc:1c:
                    95:a5:2d:a3:ab:08:a3:0c:1b:41:36:4c:3a:9d:e9:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:84:25:F9:AD:2F:B2:9C:4A:1D:BB:19:40:13:12:59:BA:30:64:14
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:7a:3e:ea:ec:2b:50:b0:93:5c:e7:f6:b3:5c:80:92:6f:
         d8:ac:dd:dd:3d:a7:6c:d2:5d:f1:f1:8b:d3:dc:38:15:e6:69:
         c6:e8:50:5e:46:95:6b:e6:92:f9:c9:ae:1c:b7:4e:f7:d0:be:
         f2:3d:aa:64:eb:52:5d:f7:1d:8e:a8:6c:7e:43:9c:90:e6:2b:
         72:e3:5d:6c:4c:c7:d2:d0:e3:be:2c:33:b4:ec:df:58:66:1e:
         22:c2:17:10:d3:f6:d7:12:a2:7d:ee:dd:c9:bf:49:ed:56:2c:
         d2:c7:34:f5:85:09:5b:7a:f1:a2:4c:bd:76:d3:07:40:09:4b:
         42:49:2e:f1:9a:5f:c3:3d:09:cd:49:4e:15:83:70:3f:50:b9:
         60:0c:44:ea:5b:9c:ad:09:85:3c:0b:02:ec:5e:a2:2b:0c:26:
         a4:ea:df:e8:b2:e3:c7:fb:a1:09:ed:4c:a0:2d:c6:0d:18:cf:
         3b:d9:60:7b:28:f6:f5:16:9e:51:aa:aa:f7:97:2f:0b:57:51:
         4e:09:e0:cf:e0:e8:c9:11:bb:d1:97:44:2c:14:02:bd:f0:c5:
         05:f3:2f:21:44:fb:89:06:d0:0b:6e:c3:49:e3:cf:fa:58:14:
         c3:3d:d9:0f:a9:28:48:e1:09:5b:df:00:cb:95:f7:a5:55:3a:
         6f:94:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:29:18 2025 by rpki-client