This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
File:                     08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json)
Hash identifier:          e5DwlNIzrKf/kHicLXKHbx9rhzaK5dvNUbHhb+vHGrg=
Subject key identifier:   1A:8C:F3:D5:F8:C2:5F:AF:20:9B:84:B9:83:26:9E:FC:7F:85:B2:38
Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
Certificate issuer:       /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Certificate serial:       6C5B1882DB8FB40FFBC7D64F71CC6717634EFF17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
Manifest number:          053C
Signing time:             Sun 21 Dec 2025 01:42:07 +0000
Manifest this update:     Sun 21 Dec 2025 01:37:07 +0000
Manifest next update:     Wed 24 Dec 2025 11:48:07 +0000
Files and hashes:         1: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=)
                          2: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=)
                          3: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=)
                          4: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=)
                          5: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: QvUeewrctq/Hji7hoSUzOoaQPNQ6IUDUT47Bs4Ezx4o=)
                          6: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=)
                          7: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=)
                          8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=)
                          9: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
                          rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5b:18:82:db:8f:b4:0f:fb:c7:d6:4f:71:cc:67:17:63:4e:ff:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
        Validity
            Not Before: Dec 21 01:37:07 2025 GMT
            Not After : Dec 24 11:48:07 2025 GMT
        Subject: CN=1A8CF3D5F8C25FAF209B84B983269EFC7F85B238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:67:e4:2e:d0:1b:e9:40:d0:1a:f5:97:48:
                    88:13:a2:8f:36:6e:32:0b:a1:3b:fe:43:06:02:b2:
                    64:04:8c:8a:84:9d:c9:d0:be:ec:fd:88:23:0d:ea:
                    ff:0c:3e:4a:c0:78:cc:e7:57:11:4d:68:a5:c0:d1:
                    5a:e5:03:7e:7a:2d:51:78:80:17:73:4e:cb:33:03:
                    e5:d1:63:42:1d:e2:29:cb:13:82:7f:fe:26:6b:a6:
                    05:bf:ab:bb:c0:a7:87:01:0e:07:6c:3f:d7:e3:9f:
                    70:95:db:75:0b:ea:29:e9:32:5e:9b:47:61:bb:8b:
                    fc:33:fc:83:94:dd:38:16:6d:63:7b:79:0a:9e:9f:
                    44:b0:3f:c9:af:7a:f5:61:77:af:71:32:9d:3e:b4:
                    1b:60:97:32:c9:26:03:b3:53:f3:e9:36:1f:26:ba:
                    26:4b:a5:31:54:de:10:de:41:2d:7c:48:d7:72:84:
                    6a:c5:5d:1a:7d:ca:9d:60:5f:15:e6:40:13:fa:d8:
                    b3:73:11:54:f2:89:2f:ed:e7:35:68:8e:51:84:81:
                    0a:9b:9a:d2:20:2c:ab:54:33:51:87:f8:a4:46:e9:
                    69:fd:3b:e5:92:58:b0:f6:46:72:2f:58:e1:d3:2d:
                    5a:8e:80:1c:1d:2b:bb:1b:20:66:3f:4c:f5:46:ce:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8C:F3:D5:F8:C2:5F:AF:20:9B:84:B9:83:26:9E:FC:7F:85:B2:38
            X509v3 Authority Key Identifier:
                keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:80:fe:89:ab:31:45:23:ea:0f:ef:da:e7:3a:fe:f4:96:2c:
         6a:cc:0a:c9:36:bb:fb:6f:d8:a5:bc:17:02:5e:68:6a:94:28:
         09:9a:fc:53:8e:bd:af:91:38:cd:49:76:f6:fe:25:ff:9c:1e:
         6c:c9:17:9e:9c:b2:6b:e6:20:97:61:1e:4d:87:a1:9d:42:b4:
         f4:20:46:5e:6c:b2:c8:d3:ba:69:c0:d2:92:11:cb:c4:ad:20:
         d2:bf:cf:ce:19:5a:03:c2:3f:a1:f0:8a:d6:6d:f0:7f:04:de:
         71:49:78:63:73:6f:b2:9f:6a:19:7c:04:ab:e4:28:2f:05:76:
         05:93:22:14:9b:a5:72:d0:ab:fa:a1:de:9d:7e:7e:7c:0f:74:
         b3:7e:9c:c9:99:fe:a8:c0:e9:27:03:1e:eb:f4:2b:a4:ea:52:
         aa:ee:ad:68:cc:15:45:5e:6b:72:07:5c:9b:4d:7a:dd:03:55:
         25:1b:cd:30:c8:0b:17:47:fb:2a:3c:dd:f1:78:99:6e:f8:0a:
         37:1b:2c:2c:5e:bf:7d:fc:de:55:02:77:ab:28:04:f2:76:58:
         7c:74:84:7d:62:8f:49:cb:5d:6d:7e:ab:9a:eb:98:a3:2e:b0:
         89:ab:13:9d:67:e9:ee:ca:42:0f:1c:db:ff:8e:8c:aa:f2:42:
         a1:1d:0f:81
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbFsYgtuPtA/7x9ZPccxnF2NO/xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3
RjFBQkY0MzAeFw0yNTEyMjEwMTM3MDdaFw0yNTEyMjQxMTQ4MDdaMDMxMTAvBgNV
BAMTKDFBOENGM0Q1RjhDMjVGQUYyMDlCODRCOTgzMjY5RUZDN0Y4NUIyMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0WfkLtAb6UDQGvWXSIgToo82
bjILoTv+QwYCsmQEjIqEncnQvuz9iCMN6v8MPkrAeMznVxFNaKXA0VrlA356LVF4
gBdzTsszA+XRY0Id4inLE4J//iZrpgW/q7vAp4cBDgdsP9fjn3CV23UL6inpMl6b
R2G7i/wz/IOU3TgWbWN7eQqen0SwP8mvevVhd69xMp0+tBtglzLJJgOzU/PpNh8m
uiZLpTFU3hDeQS18SNdyhGrFXRp9yp1gXxXmQBP62LNzEVTyiS/t5zVojlGEgQqb
mtIgLKtUM1GH+KRG6Wn9O+WSWLD2RnIvWOHTLVqOgBwdK7sbIGY/TPVGzpbTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGozz1fjCX68gm4S5gyae/H+FsjgwHwYDVR0j
BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE
QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB
QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj
MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4
REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAM6A/omrMUUj6g/v2uc6/vSWLGrMCsk2u/tv
2KW8FwJeaGqUKAma/FOOva+ROM1Jdvb+Jf+cHmzJF56csmvmIJdhHk2HoZ1CtPQg
Rl5sssjTumnA0pIRy8StINK/z84ZWgPCP6HwitZt8H8E3nFJeGNzb7Kfahl8BKvk
KC8FdgWTIhSbpXLQq/qh3p1+fnwPdLN+nMmZ/qjA6ScDHuv0K6TqUqrurWjMFUVe
a3IHXJtNet0DVSUbzTDICxdH+yo83fF4mW74CjcbLCxev3383lUCd6soBPJ2WHx0
hH1ij0nLXW1+q5rrmKMusImrE51n6e7KQg8c2/+OjKryQqEdD4E=
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:03:51 2025 by rpki-client