This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          7io6TRAy9xSAQ9bh5BIHExOa8vKvJdK28XUkVrJoOJ0=
Subject key identifier:   08:31:35:AE:2D:C3:CF:D4:D6:95:04:57:F2:3A:D2:18:AA:1A:7F:6F
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       120D1B0B0210FA7923BCAB8DE096A58D5E27C057
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          0545
Signing time:             Mon 22 Dec 2025 09:11:00 +0000
Manifest this update:     Mon 22 Dec 2025 09:06:00 +0000
Manifest next update:     Thu 25 Dec 2025 15:57:00 +0000
Files and hashes:         1: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=)
                          2: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=)
                          3: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=)
                          4: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=)
                          5: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=)
                          6: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=)
                          7: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=)
                          8: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=)
                          9: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: zLpeV7+nW4ioBjO21j3VR0wEZbMKm3NAYNAdqouw81o=)
                          10: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=)
                          11: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0d:1b:0b:02:10:fa:79:23:bc:ab:8d:e0:96:a5:8d:5e:27:c0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: Dec 22 09:06:00 2025 GMT
            Not After : Dec 25 15:57:00 2025 GMT
        Subject: CN=083135AE2DC3CFD4D6950457F23AD218AA1A7F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:38:c2:58:b3:a5:13:6a:ce:7b:e6:1a:5b:
                    f0:7a:4c:47:76:57:58:c5:1e:d3:d4:f3:5e:47:01:
                    96:8e:4d:c3:64:b4:33:5e:5d:0d:3c:73:c5:0b:24:
                    06:38:de:72:0a:1e:35:d6:b1:fd:0d:c6:a6:45:60:
                    e7:63:dd:c1:0d:b4:d3:36:d7:00:e3:39:41:a8:61:
                    1f:c9:49:91:2a:6d:6b:2e:35:24:17:8c:70:c3:1e:
                    bd:13:6b:18:48:3e:8c:2c:f8:cf:40:06:b9:f8:02:
                    e0:fb:73:46:8b:53:60:26:9a:1c:27:ad:fc:2f:0c:
                    2f:79:ea:6f:a0:35:50:50:dd:3d:fa:50:42:31:94:
                    53:e2:5a:81:c9:5f:48:be:e2:39:45:03:14:be:dd:
                    79:e5:f3:0a:7f:01:bd:21:76:63:c4:7b:59:72:d9:
                    3e:a3:4e:33:cf:dd:4c:ba:ce:f9:7d:3c:6a:88:f4:
                    7a:0d:57:0d:8e:09:e2:e3:b3:3f:95:73:f2:d8:20:
                    ed:af:35:61:e6:53:54:3e:8e:75:bb:f8:86:e9:48:
                    87:8f:71:19:1b:2e:ba:39:56:fe:51:4a:fe:f8:ba:
                    d3:93:11:38:e7:da:b9:88:ae:04:c7:cf:61:9c:27:
                    1b:42:33:d6:be:24:d0:c8:0a:1b:ec:38:96:5c:01:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:31:35:AE:2D:C3:CF:D4:D6:95:04:57:F2:3A:D2:18:AA:1A:7F:6F
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:87:5f:fb:16:c3:f1:4f:85:cc:6d:0b:d3:25:e1:60:5a:48:
         1e:31:79:84:6f:5b:f1:91:a0:89:53:b0:20:95:2b:db:52:e5:
         cf:cb:c7:23:48:8b:73:10:93:99:4f:20:b9:e8:9f:1c:6c:e1:
         09:d8:d5:9b:f0:ab:ce:b0:07:2c:d5:fe:5e:6e:8e:e6:6c:4b:
         3b:4d:32:40:d6:54:63:05:9c:6b:66:86:4d:ff:eb:92:7f:42:
         f0:8b:cb:2c:0f:ff:37:06:88:74:11:59:1b:e4:ab:f5:51:ee:
         c3:c1:e9:eb:dc:6b:cc:aa:ad:11:47:a1:2a:c0:57:b9:35:69:
         17:a6:bb:db:6d:36:e1:a8:32:c7:03:b4:4f:f7:85:b0:b3:db:
         7a:1f:29:1c:8d:6a:12:31:79:63:27:0a:e7:32:df:b7:b8:0a:
         76:e1:88:e6:59:42:b1:ee:cc:47:7b:56:54:78:8b:13:14:dd:
         80:bf:e2:73:27:4d:ce:58:99:79:8c:9d:24:48:c6:dd:4c:cd:
         e3:d6:0f:89:33:34:cf:ed:07:6c:d2:36:c3:4c:25:37:47:e7:
         c4:f8:c7:ad:a7:1b:f5:91:fd:14:41:47:f1:7c:51:86:23:64:
         46:b4:d8:82:7b:13:6b:af:28:59:76:19:32:59:db:95:16:84:
         33:4f:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:39:48 2025 by rpki-client