This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
File:                     115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json)
Hash identifier:          KsDUi5DUBtn+ywY8Qu9fey+021vU+duVRD5AUTWJmNo=
Subject key identifier:   57:35:5D:04:59:9F:87:8F:54:8E:9D:9A:B5:9B:E3:BD:CA:D4:E2:BB
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       5072E98ACE67DA895AD142F04B32FB7B8FB7F207
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
Manifest number:          01E9
Signing time:             Sun 21 Dec 2025 22:02:56 +0000
Manifest this update:     Sun 21 Dec 2025 21:57:56 +0000
Manifest next update:     Thu 25 Dec 2025 06:51:56 +0000
Files and hashes:         1: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=)
                          2: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=)
                          3: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=)
                          4: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=)
                          5: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=)
                          6: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=)
                          7: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: OKp20sIH4FrGKfUKBiAlKzy8VcxdkYwa5adLlSCdQnU=)
                          8: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=)
                          9: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:72:e9:8a:ce:67:da:89:5a:d1:42:f0:4b:32:fb:7b:8f:b7:f2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Dec 21 21:57:56 2025 GMT
            Not After : Dec 25 06:51:56 2025 GMT
        Subject: CN=57355D04599F878F548E9D9AB59BE3BDCAD4E2BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:9c:75:7c:e1:1e:a4:f8:4b:93:22:71:d1:
                    81:35:96:5b:7b:80:d6:f0:21:43:44:2c:9f:53:78:
                    ce:2d:33:c7:dd:7a:29:c7:49:16:f9:6b:81:68:c2:
                    36:71:d9:24:54:de:ab:3e:bd:8e:48:fd:f7:0b:30:
                    2a:84:ed:4b:2a:49:3b:4d:39:6f:fb:8e:84:e7:5d:
                    e9:f9:90:e1:38:bd:1a:55:70:94:83:80:b1:d4:85:
                    4c:d6:26:b6:be:28:38:eb:bd:e8:b4:40:e5:a1:71:
                    bc:3a:26:c1:b5:54:e8:00:f3:6b:cb:d7:9e:42:ea:
                    14:38:e3:eb:11:8f:12:fb:59:d2:86:ef:64:e7:80:
                    10:2b:16:5c:ce:11:5d:52:aa:52:61:f3:64:03:60:
                    93:e5:5a:f9:6d:5f:93:95:5a:a0:bc:64:01:e1:92:
                    94:56:42:00:b0:b4:58:47:5b:f3:58:70:7b:02:dd:
                    2d:b7:f9:02:11:b8:42:3e:0d:3a:ec:c8:e8:04:1d:
                    be:16:6a:14:51:ff:37:80:e6:d4:dd:27:dc:f8:89:
                    a7:6a:8d:6d:92:54:9f:73:c6:fe:8d:c2:13:61:73:
                    6a:fb:ad:96:5f:a7:bb:a6:87:88:bc:10:43:de:86:
                    b1:1f:6f:47:d8:2f:68:43:63:ba:31:d1:e9:f3:6b:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:35:5D:04:59:9F:87:8F:54:8E:9D:9A:B5:9B:E3:BD:CA:D4:E2:BB
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:09:d4:ac:7d:04:38:97:df:09:50:61:91:48:14:0e:0a:88:
         12:cb:4b:85:02:2f:dd:77:3c:11:97:a0:53:41:a3:8c:f1:8d:
         40:87:52:24:62:44:8a:5a:a1:35:51:92:7c:11:3e:45:fd:c6:
         0d:16:94:25:42:f1:c5:14:bb:b5:9d:80:f1:35:2e:92:ba:df:
         18:dc:fc:d0:12:9e:82:9f:69:56:fb:ca:7a:0e:a7:6f:cb:9e:
         e8:6f:ed:4e:71:83:cb:3f:40:26:8f:30:1c:a9:91:ef:69:e3:
         4d:0c:36:e5:d8:82:41:fc:82:ad:e6:89:c8:5f:89:9a:3b:ce:
         b9:47:91:1a:10:e5:f5:b6:83:54:4b:03:14:ef:d2:b4:58:62:
         22:fc:f8:4a:eb:08:c2:28:88:26:57:3e:85:47:de:99:d4:c0:
         75:c6:79:8b:d8:66:23:20:e2:49:75:59:2f:f0:48:52:fd:dd:
         a8:0a:9b:f6:29:d5:0d:87:1e:3b:20:a1:80:b1:b8:13:3b:93:
         ff:3e:93:02:1c:32:c0:7a:19:10:8b:d6:51:32:d3:f6:0e:ac:
         58:47:aa:34:f9:44:ae:30:63:b1:dd:46:17:36:ce:e8:b3:63:
         ba:d2:0f:25:ca:a1:f5:14:f5:8d:56:db:a2:7b:39:1d:e1:5c:
         1f:18:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:21:19 2025 by rpki-client