This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          0wseF1CXeHm2iwUEx88U1SauKjFzZ7/2ttCS4sHre4s=
Subject key identifier:   9F:5E:AF:14:6F:C3:8D:B0:48:87:15:A4:08:9E:BB:40:86:8E:78:39
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       0459E5E62E69332F824C7A1CFD2A734D49A392CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          0543
Signing time:             Thu 18 Dec 2025 02:51:00 +0000
Manifest this update:     Thu 18 Dec 2025 02:46:00 +0000
Manifest next update:     Sun 21 Dec 2025 03:33:00 +0000
Files and hashes:         1: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=)
                          2: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=)
                          3: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=)
                          4: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=)
                          5: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=)
                          6: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=)
                          7: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=)
                          8: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=)
                          9: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=)
                          10: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: whzY13q8XhkN804bseZfy1vxxF9F+YFnoqTvNg5R9V0=)
                          11: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 03:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:59:e5:e6:2e:69:33:2f:82:4c:7a:1c:fd:2a:73:4d:49:a3:92:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: Dec 18 02:46:00 2025 GMT
            Not After : Dec 21 03:33:00 2025 GMT
        Subject: CN=9F5EAF146FC38DB0488715A4089EBB40868E7839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:d5:c0:2d:4b:4d:77:bf:5a:4b:f5:a6:c5:
                    f3:61:a9:5f:f0:39:71:f8:fb:ca:62:28:1b:62:61:
                    de:bf:81:5d:7e:5e:c0:02:aa:63:7a:74:22:72:d0:
                    32:52:b2:81:2f:36:89:d9:61:24:8a:96:c5:e3:e5:
                    a2:10:98:46:6c:fc:3c:f3:1f:53:ea:ca:2b:bc:65:
                    a9:62:40:0b:8c:ae:a7:67:45:f5:f7:28:0e:e1:90:
                    10:bc:ea:86:e0:77:0b:c6:c4:7e:84:c6:e9:7d:42:
                    73:c8:a3:ba:66:fe:24:6e:5a:28:95:0c:b8:cd:17:
                    eb:e1:11:cc:b7:b7:71:8b:00:96:30:43:1f:4e:c3:
                    21:26:f6:5e:8a:f0:97:25:02:a5:35:7a:03:20:1e:
                    8f:1c:e0:09:6f:0a:19:7f:42:16:8f:ee:ad:e4:a5:
                    ab:0b:22:ac:71:51:04:2b:b1:f3:c3:f8:3e:de:ec:
                    e9:4a:73:1e:85:37:c3:8f:ed:34:08:6c:e7:17:00:
                    df:ad:5d:f8:0c:8c:a0:db:0f:9d:f4:33:b7:2e:f4:
                    01:97:88:29:f0:84:a4:74:36:c4:e1:59:6a:03:6c:
                    a5:76:54:f8:88:b9:13:c7:0c:d2:6f:34:f7:4d:83:
                    93:9d:0d:e7:d6:2c:ee:d6:0a:71:37:32:7e:18:6a:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5E:AF:14:6F:C3:8D:B0:48:87:15:A4:08:9E:BB:40:86:8E:78:39
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:2f:97:d7:c5:5d:86:2a:70:e7:ca:43:bd:62:35:99:9a:
         8a:d3:6b:86:6e:4f:0b:c9:9a:0c:c0:21:44:14:6e:ff:96:15:
         65:e2:a9:1e:33:0f:42:12:de:47:39:41:37:48:62:d9:d3:10:
         6c:34:de:25:d9:59:81:a7:76:32:cb:fe:ba:ce:c5:7e:14:66:
         b4:d9:e8:d5:32:82:c3:94:d3:9c:5d:16:4a:51:f0:e5:a6:7f:
         8e:2d:f2:97:c2:8e:44:32:60:7f:c8:7e:05:9f:ec:cf:51:74:
         82:29:55:29:b1:8a:29:e4:fa:be:c5:18:fe:15:7a:c4:d8:85:
         f7:1f:82:31:b9:42:6d:33:12:93:fb:1c:dc:c8:db:26:11:ef:
         64:e9:58:61:c6:95:38:0e:5c:9d:74:13:a2:63:e2:df:ff:1f:
         35:56:4f:a7:ae:a9:7d:36:33:8b:a8:4e:04:f3:9d:d7:24:52:
         5c:cb:91:8e:75:9c:27:e4:e1:d6:09:05:20:05:8f:a5:78:d6:
         33:bb:cb:76:94:11:e8:b6:12:5c:0d:50:07:95:c4:d0:8b:6a:
         23:34:f8:43:42:f0:64:9c:cd:5b:75:97:62:2d:79:d4:73:06:
         1c:d3:1f:95:b0:8b:44:35:7b:74:0c:42:97:a2:81:71:02:d0:
         ee:75:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:12:19 2025 by rpki-client