This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
File:                     116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json)
Hash identifier:          +5/28hquKQTmS520WXOe6kfrX3K7ekHpk5qDJnyA4pE=
Subject key identifier:   C7:A4:64:1A:D9:F9:6B:CF:A8:01:B9:F5:41:60:AE:D4:18:40:51:86
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       4BDE6967FA7805FDC9EF3D587DBC517267EC6372
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
Manifest number:          0544
Signing time:             Wed 17 Dec 2025 22:20:05 +0000
Manifest this update:     Wed 17 Dec 2025 22:15:05 +0000
Manifest next update:     Sun 21 Dec 2025 07:43:05 +0000
Files and hashes:         1: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=)
                          2: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=)
                          3: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: rkvfltc1XeXNlZR/3yH5i2rDhAOYYmSdXeT/IyFdjyk=)
                          4: 34332e3234372e32312e302f32342d3234203d3e20313331373830.roa (hash: 75jsZ2/RYGs14ieUtfuhtsNjuwyC8On82jjkJYD2UMY=)
                          5: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=)
                          6: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=)
                          7: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=)
                          8: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=)
                          9: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: ESRwVfu4FEC9D7cu00bZxVg3cnn289WDJDC6O6+8Bcc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 07:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:de:69:67:fa:78:05:fd:c9:ef:3d:58:7d:bc:51:72:67:ec:63:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Dec 17 22:15:05 2025 GMT
            Not After : Dec 21 07:43:05 2025 GMT
        Subject: CN=C7A4641AD9F96BCFA801B9F54160AED418405186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:5c:1c:31:6c:22:08:c1:e1:f2:19:8b:b5:
                    4c:05:c8:07:4c:da:cb:eb:9a:72:a4:52:47:ba:99:
                    31:f7:d5:ad:1b:7d:94:55:f1:de:57:c6:10:67:af:
                    90:4c:3d:71:f0:25:b4:b5:71:6b:3c:87:5e:1d:f2:
                    22:8d:8b:a2:6c:1c:4b:10:53:86:3c:33:de:8e:0d:
                    3e:52:fa:7e:83:df:4f:34:54:54:a6:d7:b3:5a:c4:
                    06:4c:cc:af:a0:d0:be:34:f3:77:6a:66:07:3e:19:
                    69:47:d5:95:0b:2b:16:25:97:66:27:3d:35:6d:4f:
                    51:25:48:58:17:b9:49:23:b1:60:69:cc:bf:e1:09:
                    0a:af:cb:22:72:51:43:79:94:fb:5c:e3:27:fe:b6:
                    6e:ef:af:d8:87:78:51:f7:78:27:4f:85:3f:81:a5:
                    2e:70:df:44:d3:8a:c4:6b:9c:2d:b5:4c:ca:73:77:
                    d7:0d:41:28:b8:f5:32:fa:a0:c5:1c:fe:43:b4:d8:
                    9f:2d:8b:59:87:cd:e1:6c:cb:e9:74:8a:8e:4f:88:
                    20:07:09:1c:b3:7c:52:6f:8c:c8:82:1e:34:a8:bf:
                    f0:99:55:a0:89:b0:d1:ed:5d:85:4d:9c:fc:21:4a:
                    10:1c:c3:9a:b1:53:44:98:c6:78:5c:c9:0e:68:75:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A4:64:1A:D9:F9:6B:CF:A8:01:B9:F5:41:60:AE:D4:18:40:51:86
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:a0:1a:c1:a0:cc:c4:0c:c2:ed:b1:0c:88:4e:0c:1e:a8:
         0b:fa:f1:af:af:42:22:03:16:63:17:72:4e:b6:25:40:7c:1d:
         fe:a9:e2:41:fb:42:13:30:28:af:63:f7:ba:24:91:e3:7b:f4:
         e3:ae:8a:10:47:3d:fb:82:2f:1e:7d:1a:e3:40:53:a3:b0:82:
         51:26:8b:8b:e1:e5:e9:47:5b:c1:23:99:e4:99:f5:2e:ee:f2:
         1a:4c:0c:61:9d:13:f0:ae:78:20:f0:44:83:63:50:a8:4c:43:
         26:56:bc:40:e7:48:38:65:6c:53:f2:f5:1d:dc:6d:69:ea:f6:
         e1:9d:b8:e0:31:2c:7e:f3:98:e0:24:e1:f4:ed:d1:0b:ea:1d:
         3a:c5:c6:3c:3b:8e:ce:c2:2e:cd:4c:f7:77:d5:46:de:a2:5b:
         63:17:f0:c4:d7:3a:4c:9e:89:1a:85:a2:04:3d:21:1e:0b:5c:
         52:72:11:7c:6e:83:68:b5:3d:98:c9:58:9c:68:54:8d:05:53:
         21:bf:5d:99:bf:51:00:7d:c0:86:e8:f4:9f:b0:9b:a9:26:5f:
         23:4d:09:b1:45:f7:ac:d8:3e:2d:72:12:7c:00:bf:75:11:e0:
         59:5d:ef:4c:fd:52:09:68:06:bf:f0:63:4c:98:9b:cf:9d:52:
         f6:ed:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:39:44 2025 by rpki-client