This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
File:                     D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json)
Hash identifier:          cy2wyh6GhIw0EKlZByYl91f+RTcP+kQqtUB2Wh8XMqc=
Subject key identifier:   01:0D:E1:0A:C7:0D:81:D7:98:49:8F:6F:04:89:1E:95:41:CC:8A:03
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       7150E4B717271552AF7CA93306E4909306A32E67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
Manifest number:          01C6
Signing time:             Thu 18 Dec 2025 12:11:57 +0000
Manifest this update:     Thu 18 Dec 2025 12:06:57 +0000
Manifest next update:     Sun 21 Dec 2025 12:14:57 +0000
Files and hashes:         1: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: cN4silcvuPV22OI3IsNy5UveikGt8GvqnC8R2u5vZmI=)
                          2: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: bk766NBayeqzl2TpClpr9IhYx+ApKL2x4uzDJCxWkIk=)
                          3: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: Y4Wi8qAYZ81rv46ZtcXhKaHsjEBVaOJAYBhmKDi8JTE=)
                          4: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: WKBxmJwVLzCYBVgxt4LMTfwAcTtnh7yu4VGARK2zxgY=)
                          5: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: XubVHR1uW/U3u8JfLGlOr8aeDpjn5EspQIPSeyKbXv4=)
                          6: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: 9Eop7Wi9KDAgTJcnqm4m9VblRXdXAgnSYGkJE3U1uCo=)
                          7: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: L4h2Wp4fQdhUrMD0z3Ssoa6P+p1dDNjkEiybK+QQebs=)
                          8: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: zofQAGzRLVSbQfa8x1HxlEvAC2rTzuC4QEGkc7xHMvw=)
                          9: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: DZYxEEoedEoh7hUvK00A3sjPaarHyHkFwFSubpvLa90=)
                          10: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: SoOGl5Osoc8VWSG7O39b9RTTOqsnSAtmHysEN1dIDaM=)
                          11: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: B48tlPMvOf7K7HzDvvhN+csuCxhTxi2XsZzldYqsXqU=)
                          12: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: s4bQxfKSzhThJnV2s35QtgCBE4otyhr6xeMzoqnFm8Y=)
                          13: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: IlfpZnqN0u5jMQ+MMy/Uh2Q/ScrlgNhJWft3oBH8Ovo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 12:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:50:e4:b7:17:27:15:52:af:7c:a9:33:06:e4:90:93:06:a3:2e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: Dec 18 12:06:57 2025 GMT
            Not After : Dec 21 12:14:57 2025 GMT
        Subject: CN=010DE10AC70D81D798498F6F04891E9541CC8A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:ef:ef:e7:b5:50:2a:de:fb:5f:7c:af:2f:
                    00:41:73:0b:4b:35:fe:67:bd:70:e8:2c:36:e2:88:
                    43:a6:0f:8c:ca:a1:be:03:68:e7:b9:99:04:eb:d0:
                    68:da:a5:e0:ae:28:53:41:df:7c:70:24:5d:73:42:
                    60:f3:31:1c:95:04:f7:ae:57:31:e9:25:56:70:7c:
                    f2:44:0c:dd:f0:25:36:4e:10:d5:c2:8b:7b:ea:92:
                    0c:92:65:ed:52:9d:fb:61:2a:57:5b:2f:41:a2:a8:
                    8a:dd:96:3b:17:0b:a7:12:91:51:0b:61:c4:b6:1b:
                    ba:78:97:38:77:73:23:5f:dc:8a:2f:f7:e9:47:40:
                    3d:9c:5e:69:1d:9c:2a:e6:55:81:b5:ed:20:51:2b:
                    da:fb:0a:65:76:7e:c5:b2:0e:5a:68:f4:6e:6c:b9:
                    90:ce:4e:3e:a0:11:f6:a7:71:c6:c5:34:81:f6:5f:
                    f4:f0:fb:1e:40:44:56:f2:2a:d5:6d:e6:89:1e:09:
                    16:40:12:ae:03:4e:61:c5:3a:97:58:e0:e6:ea:9e:
                    ba:8e:7d:5c:18:d4:03:6a:e9:9b:37:41:08:1c:2e:
                    83:51:f4:27:ba:de:3e:b4:95:10:6b:94:86:6a:ff:
                    a4:65:cf:55:c4:c7:fb:93:61:57:64:ac:de:5e:20:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0D:E1:0A:C7:0D:81:D7:98:49:8F:6F:04:89:1E:95:41:CC:8A:03
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:27:02:54:69:6f:42:8f:d7:78:d7:f6:ae:a2:49:4c:c9:c9:
         9f:2a:64:50:f5:09:37:27:62:fe:76:9e:02:4a:c9:7a:f1:b3:
         f8:26:98:33:73:cf:9d:a5:ba:66:37:54:bf:ca:b7:41:d6:26:
         25:8d:85:f0:10:75:3e:32:72:cf:20:34:bd:d3:76:07:b4:39:
         d3:e1:7d:9c:d2:85:cb:9b:e0:c7:b8:0b:fb:35:ea:f4:b0:35:
         ab:00:b3:1e:cd:19:67:63:65:0d:b0:5e:88:8f:44:b9:1f:7c:
         9d:0b:c5:51:e6:ce:4d:d9:e3:b3:5f:82:cb:7c:cb:04:34:c2:
         e8:c1:84:84:38:9d:43:96:57:1c:17:4b:75:bd:14:0b:5c:62:
         52:a5:ba:8d:6f:c5:f2:a5:99:c5:b5:ca:72:4d:bd:e6:44:6c:
         b6:ba:85:10:1b:9f:1f:bb:f7:d3:41:50:b3:b2:a6:6d:d7:0b:
         bd:a8:07:94:6d:b2:c4:d9:07:aa:95:5a:db:19:5c:58:18:f9:
         dd:2b:18:76:09:38:12:13:11:b8:1b:02:50:63:4d:b4:d1:a4:
         82:cd:f0:69:c4:84:18:64:62:54:cf:ff:20:98:f1:29:66:9e:
         74:0a:11:be:66:9c:c7:c9:3e:49:49:8d:5c:51:bf:f1:30:30:
         eb:ae:52:a6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcVDktxcnFVKvfKkzBuSQkwajLmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5
REUzMjAxQjAeFw0yNTEyMTgxMjA2NTdaFw0yNTEyMjExMjE0NTdaMDMxMTAvBgNV
BAMTKDAxMERFMTBBQzcwRDgxRDc5ODQ5OEY2RjA0ODkxRTk1NDFDQzhBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlO/v57VQKt77X3yvLwBBcwtL
Nf5nvXDoLDbiiEOmD4zKob4DaOe5mQTr0GjapeCuKFNB33xwJF1zQmDzMRyVBPeu
VzHpJVZwfPJEDN3wJTZOENXCi3vqkgySZe1SnfthKldbL0GiqIrdljsXC6cSkVEL
YcS2G7p4lzh3cyNf3Iov9+lHQD2cXmkdnCrmVYG17SBRK9r7CmV2fsWyDlpo9G5s
uZDOTj6gEfanccbFNIH2X/Tw+x5ARFbyKtVt5okeCRZAEq4DTmHFOpdY4ObqnrqO
fVwY1ANq6Zs3QQgcLoNR9Ce63j60lRBrlIZq/6Rlz1XEx/uTYVdkrN5eIIcZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAQ3hCscNgdeYSY9vBIkelUHMigMwHwYDVR0j
BBgwFoAU1VvoIXoiIS+Xe9lbQffJ7p3jIBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MGY1Y2ZkYi03OTg3LTQzNTEtYmMyZS02NmMyNGY0OWY0NDAvMC9ENTVCRTgyMTdB
MjIyMTJGOTc3QkQ5NUI0MUY3QzlFRTlERTMyMDFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5REUz
MjAxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBmNWNmZGItNzk4Ny00MzUxLWJj
MmUtNjZjMjRmNDlmNDQwLzAvRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5
RUU5REUzMjAxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACAnAlRpb0KP13jX9q6iSUzJyZ8qZFD1CTcn
Yv52ngJKyXrxs/gmmDNzz52lumY3VL/Kt0HWJiWNhfAQdT4ycs8gNL3Tdge0OdPh
fZzShcub4Me4C/s16vSwNasAsx7NGWdjZQ2wXoiPRLkffJ0LxVHmzk3Z47Nfgst8
ywQ0wujBhIQ4nUOWVxwXS3W9FAtcYlKluo1vxfKlmcW1ynJNveZEbLa6hRAbnx+7
99NBULOypm3XC72oB5RtssTZB6qVWtsZXFgY+d0rGHYJOBITEbgbAlBjTbTRpILN
8GnEhBhkYlTP/yCY8SlmnnQKEb5mnMfJPklJjVxRv/EwMOuuUqY=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:22:36 2025 by rpki-client