This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
File:                     115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json)
Hash identifier:          HKPn3uHpg8lXlGW8HiWC8VP82dBpq1hLfey/UGbVHho=
Subject key identifier:   8F:74:8C:67:6E:64:09:C9:64:28:9B:52:42:9C:C9:94:E3:D7:A2:97
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       5C873890EC112294764BE19D5256125A89A2099C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
Manifest number:          01E7
Signing time:             Wed 17 Dec 2025 16:32:22 +0000
Manifest this update:     Wed 17 Dec 2025 16:27:22 +0000
Manifest next update:     Sat 20 Dec 2025 21:20:22 +0000
Files and hashes:         1: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=)
                          2: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=)
                          3: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=)
                          4: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=)
                          5: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=)
                          6: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=)
                          7: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: h7i2JBIjb4TAGXgpp0R1WCSrHMnj7O2ZEkiAvVKPllw=)
                          8: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=)
                          9: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 21:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:38:90:ec:11:22:94:76:4b:e1:9d:52:56:12:5a:89:a2:09:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Dec 17 16:27:22 2025 GMT
            Not After : Dec 20 21:20:22 2025 GMT
        Subject: CN=8F748C676E6409C964289B52429CC994E3D7A297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:77:e6:79:e5:fd:86:06:5f:f7:94:f2:f9:
                    19:da:00:15:54:03:e7:a1:03:8d:dd:da:d2:e2:26:
                    fe:84:cd:96:2f:e2:1e:bf:43:c0:57:fa:22:12:26:
                    58:38:9f:a9:54:04:68:f7:e2:76:51:5a:76:91:02:
                    57:b1:fe:27:10:29:a8:ea:b0:85:1d:ce:ae:af:c7:
                    bf:c0:b4:76:f2:a6:f4:1e:a4:5f:a1:38:20:c8:ea:
                    0e:60:10:b6:e3:ff:b8:3e:fc:50:cf:ab:39:ce:ad:
                    ca:ec:af:a9:79:7b:e0:7a:e6:33:7d:0b:12:6e:8d:
                    a6:1e:f4:93:05:85:f5:c7:db:e1:ab:5b:a8:fb:86:
                    0d:22:ac:44:f6:86:d4:15:1c:9c:38:6d:da:8b:be:
                    78:d2:ba:9b:b7:bf:b1:34:99:7e:e6:73:86:c2:77:
                    75:66:c1:01:2c:5c:a8:db:f3:ce:5d:06:da:0b:bf:
                    2c:0e:0e:65:d3:0c:89:19:1d:5c:cc:97:0a:1c:2a:
                    1f:c9:67:1e:f3:be:36:27:17:4b:30:95:4f:3e:4c:
                    13:ca:a7:73:9b:28:71:77:21:d4:51:5b:5b:4d:bc:
                    d3:36:d2:d4:7b:56:b5:99:77:18:9f:30:65:ba:4a:
                    d9:0d:81:38:58:ed:84:1f:76:aa:52:45:f7:ae:d4:
                    f3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:74:8C:67:6E:64:09:C9:64:28:9B:52:42:9C:C9:94:E3:D7:A2:97
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:b0:73:72:2f:ee:3d:9e:cb:b8:db:41:be:95:3f:bf:22:
         91:b4:e1:77:35:95:5f:ce:cb:b0:50:c4:09:7d:75:c9:ca:04:
         4a:d3:4c:de:d9:cb:06:17:79:db:07:a9:f0:d2:5f:17:e6:02:
         36:39:03:03:c8:72:2c:ce:f7:f6:3d:40:9b:45:90:aa:00:8b:
         63:0a:7f:15:20:02:dc:41:e0:9e:f1:3f:b6:6a:71:ef:7b:cd:
         d5:3d:e2:39:0e:fb:d3:8f:d9:06:19:21:cd:2f:22:d9:5c:e9:
         ee:da:33:c2:00:04:f8:95:39:c1:02:ba:c7:95:16:84:4f:e6:
         8c:6f:02:ca:35:4e:c3:41:56:cf:3b:7e:3b:16:3b:55:a2:f4:
         fd:f0:3c:12:d0:da:47:4d:c2:ac:52:ae:f3:d3:e5:4d:e2:e5:
         c7:1c:bc:6e:a7:8e:b8:df:1b:a5:a7:45:99:3a:7a:e6:e3:e4:
         26:bd:1d:6b:f1:01:ef:d8:2f:c7:e4:b2:1a:5e:6f:d0:4c:7e:
         e8:f3:f0:02:1d:58:e2:15:ea:d3:5f:be:08:e7:68:10:a1:1a:
         b2:dd:3b:7f:3e:aa:15:73:44:97:9c:9f:9c:1c:5c:10:8a:94:
         60:f1:11:19:29:17:bc:8a:6a:14:5b:6d:e9:7c:0c:18:01:94:
         f0:aa:a0:5b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXIc4kOwRIpR2S+GdUlYSWomiCZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB
RkRCMTI0ODAeFw0yNTEyMTcxNjI3MjJaFw0yNTEyMjAyMTIwMjJaMDMxMTAvBgNV
BAMTKDhGNzQ4QzY3NkU2NDA5Qzk2NDI4OUI1MjQyOUNDOTk0RTNEN0EyOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pnfmeeX9hgZf95Ty+RnaABVU
A+ehA43d2tLiJv6EzZYv4h6/Q8BX+iISJlg4n6lUBGj34nZRWnaRAlex/icQKajq
sIUdzq6vx7/AtHbypvQepF+hOCDI6g5gELbj/7g+/FDPqznOrcrsr6l5e+B65jN9
CxJujaYe9JMFhfXH2+GrW6j7hg0irET2htQVHJw4bdqLvnjSupu3v7E0mX7mc4bC
d3VmwQEsXKjb885dBtoLvywODmXTDIkZHVzMlwocKh/JZx7zvjYnF0swlU8+TBPK
p3ObKHF3IdRRW1tNvNM20tR7VrWZdxifMGW6StkNgThY7YQfdqpSRfeu1PNLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUj3SMZ25kCclkKJtSQpzJlOPXopcwHwYDVR0j
BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz
MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC
MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm
NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx
NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI5osHNyL+49nsu420G+lT+/IpG04Xc1lV/O
y7BQxAl9dcnKBErTTN7ZywYXedsHqfDSXxfmAjY5AwPIcizO9/Y9QJtFkKoAi2MK
fxUgAtxB4J7xP7Zqce97zdU94jkO+9OP2QYZIc0vItlc6e7aM8IABPiVOcECuseV
FoRP5oxvAso1TsNBVs87fjsWO1Wi9P3wPBLQ2kdNwqxSrvPT5U3i5cccvG6njrjf
G6WnRZk6eubj5Ca9HWvxAe/YL8fkshpeb9BMfujz8AIdWOIV6tNfvgjnaBChGrLd
O38+qhVzRJecn5wcXBCKlGDxERkpF7yKahRbbel8DBgBlPCqoFs=
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:38:51 2025 by rpki-client