This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
File:                     2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json)
Hash identifier:          QywdzYcLDPyq9/i3QhulIlSLUU2amxZm7GirO0sCRzU=
Subject key identifier:   9C:5C:17:17:BE:84:6B:E0:AC:A8:AC:16:47:17:46:A7:32:01:D9:0E
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       556544FE36ED333011260859D3695A6B9955D232
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
Manifest number:          01D9
Signing time:             Fri 19 Dec 2025 00:01:39 +0000
Manifest this update:     Thu 18 Dec 2025 23:56:39 +0000
Manifest next update:     Mon 22 Dec 2025 04:22:39 +0000
Files and hashes:         1: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=)
                          2: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=)
                          3: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=)
                          4: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=)
                          5: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=)
                          6: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=)
                          7: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: SEJtrFMzCIxaL5HsTowHqKeGBeSHdUF6h109MbSr1hY=)
                          8: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: Ey0pY+Tu+B2nO5U0dZJKeX9nTt5ymBam/3Jq63C3PR4=)
                          9: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: UTxUdswuTF+ox6a5oV05W2D3Jcdyj/c1haTTHi/3q+U=)
                          10: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=)
                          11: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=)
                          12: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=)
                          13: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=)
                          14: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=)
                          15: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=)
                          16: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: b6WR2/tkj/TJmHf4T96jHhe4cr6ziz5DRZJiP/dYI8w=)
                          17: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=)
                          18: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=)
                          19: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=)
                          20: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: CV4aj5c0qTtoAuk2gjVJIigxTtOqOHVk941GV0y4c2o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:65:44:fe:36:ed:33:30:11:26:08:59:d3:69:5a:6b:99:55:d2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Dec 18 23:56:39 2025 GMT
            Not After : Dec 22 04:22:39 2025 GMT
        Subject: CN=9C5C1717BE846BE0ACA8AC16471746A73201D90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:f5:dc:c5:ee:66:2e:d1:c1:b0:b8:ac:2c:
                    de:81:f4:f0:9d:48:86:98:46:1e:d9:b1:a9:db:8e:
                    2a:9d:cf:8b:87:d8:c0:bb:e2:80:55:85:cc:90:03:
                    e7:c7:26:86:50:d1:28:da:f4:6c:c5:22:ed:22:6b:
                    93:e2:37:6b:6c:48:97:d3:06:19:02:5b:08:88:e1:
                    7a:85:4d:8e:09:4b:12:ef:3f:8e:bf:c4:32:d8:17:
                    de:d4:1c:fa:db:10:47:1a:66:50:fd:64:82:bd:ce:
                    77:cf:da:cf:d6:c5:ec:75:41:9f:66:b3:12:4b:89:
                    c0:cd:ea:bb:e4:ea:84:02:e1:4d:51:70:4c:f9:14:
                    7f:f8:af:5a:79:56:66:20:f0:86:ba:29:82:53:b6:
                    d1:d0:61:e4:0b:5b:d5:a5:2e:47:65:1b:55:4e:53:
                    de:09:ff:20:f9:e9:98:d6:e2:5f:d1:34:96:b0:51:
                    11:cb:e1:d9:e6:b8:8f:28:ed:7a:56:d1:f9:ef:42:
                    97:86:9b:5f:6f:42:fc:cf:a4:e0:f5:43:d3:90:aa:
                    94:d3:e2:5d:f7:be:28:78:68:ee:98:3f:ac:43:e0:
                    b6:c7:3d:4c:74:50:f4:12:ce:ad:96:51:35:be:aa:
                    6c:5c:ac:35:67:9c:fe:17:84:97:4f:11:8a:dc:f1:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5C:17:17:BE:84:6B:E0:AC:A8:AC:16:47:17:46:A7:32:01:D9:0E
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2b:8f:b2:5f:bb:f8:ab:c8:32:50:55:27:ff:c4:75:81:79:
         a1:bb:d8:78:d3:9c:76:d5:0b:26:61:72:49:c2:df:be:8a:10:
         76:4a:86:de:da:ac:31:af:ca:ce:04:d6:2a:2b:36:cb:2c:9b:
         9f:69:50:5e:6d:df:ba:e0:e1:d5:7d:b1:a3:51:5e:df:94:76:
         39:6f:79:08:3d:35:6f:be:9d:57:a2:5a:46:b5:53:f4:ad:a4:
         41:27:e0:ee:95:38:71:f5:89:ac:e3:29:f6:ec:96:8d:05:72:
         a1:ae:2c:30:ff:e9:81:99:c0:56:35:f3:e8:d9:0c:c2:dd:5f:
         38:b4:3e:fe:56:e9:09:17:fd:ae:11:06:03:e4:32:0f:10:d6:
         ac:14:1c:72:03:a0:7c:21:f9:3f:d3:aa:a9:c5:3b:27:28:65:
         52:3d:f9:d0:f3:6f:0f:6f:8b:00:da:f5:aa:7c:db:38:55:21:
         5c:03:04:86:5c:9f:b8:58:e0:89:01:4f:19:b7:b6:bf:f3:c6:
         28:45:be:92:d4:71:dd:64:b8:9e:b4:15:7f:c0:91:ad:82:a6:
         a8:0d:ab:49:1a:72:73:b9:94:12:6d:65:b4:cd:7d:a8:31:05:
         2a:3f:91:ae:54:37:f8:3f:0c:83:05:39:65:bd:03:bc:a1:c8:
         44:7b:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:33:00 2025 by rpki-client