This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
File:                     F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json)
Hash identifier:          XlSsNyBiMegd6eij9mD8om7WQEGE8Zv6UPr95y25GA8=
Subject key identifier:   39:1D:A0:34:21:9C:CD:13:B6:56:12:2E:8E:B3:83:5F:7B:A6:6F:1B
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       161EEF60DA50A055B7D98D6E1B42D937AC0DB7EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
Manifest number:          054A
Signing time:             Sat 20 Dec 2025 21:31:34 +0000
Manifest this update:     Sat 20 Dec 2025 21:26:34 +0000
Manifest next update:     Wed 24 Dec 2025 08:13:34 +0000
Files and hashes:         1: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: RTJdm4ux75KqUxTLd+HL3T2/W81Q6eNxAPEmBwe4d2I=)
                          2: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: l2XgTKrEaZzJg/s+9XNrUPqB/jS99nk9vRMWjSJi3Ck=)
                          3: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: /ri40FDmSZx726w/lEZ1lnE+M3llFsHw0OIkUDVqH2Y=)
                          4: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: u07NQFdDkw9uQJyKvseE8BXy1l4340TGYboFy4isKRg=)
                          5: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: QqkYw4dvuAxz/Z71BLxdsCFvca35TsWBzdDiFc7djzY=)
                          6: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: M4ssaOvjHsdJP6LoJpiLBv94HULBEuZfCL5oS3yxuR0=)
                          7: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: sWi0+Z6LzcW55vyJrnsH16njxHngSsLCi1xKCLdsz1g=)
                          8: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: InIenu/YRdZ+r+sG5SCyx4cnFek5Q1mbpz29x6bWyk8=)
                          9: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: UQwmx7kfaHxkn2EDWo9d59K9BpIkWV4oYs+G0r7Y0tg=)
                          10: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: IGEWY2eHTKaYMtxRXqYJpKskrVH7Tr78Gf7J+C6rKG8=)
                          11: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 1A57a+WSkaUEe/nNKsaDACTzujL/BWvYX5TZ+R8VoL8=)
                          12: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: Ju/vO7vCQQsoKWqaI5uCjlvfJIZ0F/Vpc0p/QWILZD4=)
                          13: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: U25XxYHsdDHg45kmjqy0PPmW/5GPYURDN/+SgVMDWdQ=)
                          14: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: zzz4sdR5gzKzpAbEJCRzN6BkviHvm/Eab9wuvzBGW3s=)
                          15: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: zlUSo08cC5dU1tahN2pFRIpVflwenezMlRGB/W6FAVg=)
                          16: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: zNkUcfseAFGChQlk9FTTSxxP9VLqeS6Xzt5hWG8FeNY=)
                          17: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: KpZING4byOb+kw62UnCHT9VpB7H105YwJJjgZg9mICg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1e:ef:60:da:50:a0:55:b7:d9:8d:6e:1b:42:d9:37:ac:0d:b7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Dec 20 21:26:34 2025 GMT
            Not After : Dec 24 08:13:34 2025 GMT
        Subject: CN=391DA034219CCD13B656122E8EB3835F7BA66F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0a:b1:4d:01:93:40:53:ed:ea:da:88:4b:6f:
                    a3:55:0e:c4:13:d0:f0:93:12:b3:6b:23:de:a5:05:
                    76:b7:49:5b:b7:44:46:e4:8e:5e:74:85:5b:32:f1:
                    6b:ba:01:e1:56:cc:34:78:95:99:ce:9e:0e:9b:cb:
                    24:b4:52:4f:dd:14:d0:5c:db:ed:0f:60:a4:aa:12:
                    32:05:2f:f5:15:6b:d8:14:e7:de:5d:17:d3:06:50:
                    9c:37:50:2f:f7:b5:ac:d2:09:02:72:a8:fa:08:e1:
                    2d:9b:17:25:15:86:0b:40:f7:8a:c7:ca:06:d2:ea:
                    c4:b5:57:40:91:f2:95:ca:a3:04:2c:7b:78:1a:fa:
                    ab:57:42:f2:d8:ca:f9:ae:b7:4f:19:b2:b9:50:7c:
                    4e:cd:92:48:39:43:01:9a:16:e3:99:27:13:8e:02:
                    dd:ce:4d:c6:7c:4a:58:a5:7b:34:ea:8d:c1:d0:c4:
                    99:be:f9:77:44:0c:7f:c6:9e:ad:38:35:e3:67:81:
                    13:c7:53:6a:76:55:f8:6c:4d:59:21:b9:4c:c4:21:
                    3c:82:65:7b:67:20:05:ed:0b:f4:d8:a6:98:51:c6:
                    3c:1f:45:06:6a:a7:60:46:1a:ac:5b:fc:1d:8c:84:
                    73:e0:be:fd:90:48:21:17:1e:2c:b6:ac:42:ab:1b:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:A0:34:21:9C:CD:13:B6:56:12:2E:8E:B3:83:5F:7B:A6:6F:1B
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:a0:99:2e:52:84:78:8b:8f:55:ca:7a:f1:1c:a3:d5:ab:
         35:ca:ee:72:e6:42:f2:6c:59:b7:0a:6c:d6:28:44:3b:79:d4:
         d5:90:de:fd:f0:90:12:23:2a:b9:47:1f:4d:10:45:1b:62:50:
         47:0c:72:18:bd:8f:a5:fa:da:eb:03:c1:39:10:a4:21:d2:73:
         30:02:63:89:43:2d:bd:23:13:ba:2f:ec:09:e7:dd:9d:0d:d9:
         ac:7e:ab:16:8f:8b:57:b7:58:32:4d:81:05:56:a0:d9:70:54:
         79:6b:67:f1:10:ef:20:51:3f:6e:df:d4:ab:4b:73:a2:ab:7d:
         14:8f:51:ad:b6:6e:c9:51:fe:a3:e6:30:96:a7:34:e4:5c:29:
         a4:ea:32:88:86:c2:ae:68:e5:bd:2e:58:71:88:92:55:ae:54:
         36:f6:39:c4:1d:8d:5f:49:bc:73:32:c6:2f:5a:b2:54:f2:b9:
         49:5f:55:50:a3:2d:7a:3b:13:61:46:b6:f7:f0:52:4d:92:3d:
         04:3d:1c:7c:a3:64:97:46:1a:59:04:9e:64:5a:cb:16:a6:62:
         46:8d:da:af:c9:fc:58:8c:69:62:39:04:7f:2a:10:85:cc:0e:
         ed:5b:fe:c7:f8:73:60:a9:7f:da:a8:2b:80:a4:68:ad:e1:e8:
         c3:3e:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:58:17 2025 by rpki-client