This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
File:                     084550E9619FF5ABD20864D9A6383053B59BF91E.mft (raw, json)
Hash identifier:          wBkGajzTsNSglSnrgca9NJizm4dCsjsglITkhjpnM2M=
Subject key identifier:   2D:B8:D0:79:C8:A1:A8:1A:84:AC:B0:8B:9E:27:FB:2D:F9:D0:B7:7A
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       0B560B829D84FFE91A5413C04BE3171920AFFBFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
Manifest number:          01B3
Signing time:             Tue 30 Dec 2025 18:21:27 +0000
Manifest this update:     Tue 30 Dec 2025 18:16:27 +0000
Manifest next update:     Fri 02 Jan 2026 20:52:27 +0000
Files and hashes:         1: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: +ZHf279OS2MHjAeCxjl0QBmwTayFhrDzO/892nI5F/c=)
                          2: 3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa (hash: JSKYuA8fJ4y0Rjc8zV/6efFq5nxlIBAvEr6kwWaUKJw=)
                          3: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: WAaSNwShiSZ85pEV29yBzPi/4z8AK1cN4rEfINPVYW8=)
                          4: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: 5IMht0xKCCP0U9uwz1XPxOK7yxTeYdiQoJjjSz9Mxco=)
                          5: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: 2v9wN44Uo9Cs+bu4eyE/wLGCms0fGUP+hH0Oe6hkTeI=)
                          6: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: cjrcytx7Zuxa9AtgQ+afjEzYS+0m/7FLcfwrrJooW6c=)
                          7: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: bEZOujHilL/rXvF4OnLLVFp4nRZlUgFYRFmndeCTA1Y=)
                          8: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: GzXYpE71o4tlTZAt4Hyg0opydgJ4djQwIaGFzaYbjpM=)
                          9: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: VgDUrmnqScAuLKPWIBCNW2XKtjbn0edxx7HC7UhTNi4=)
                          10: 084550E9619FF5ABD20864D9A6383053B59BF91E.crl (hash: 9MHKRi7eoKSdBA4pWYtlsV4mcj3eIkXvREsu2iKG5AY=)
                          11: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: YVfqjrZZKlyKKNROGIdcGYIh7CG+YxaGHiuctjc25lk=)
                          12: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: QUmO+r1ZetkePDm99tDeZ2rTyu62swLem0hgSgkn7ss=)
                          13: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: RdnZzcveMI6OTZ2tqV917YFqNgnyHc224NISl6oJbLU=)
                          14: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: uo+i0GPa6EP/s8c5Ny4WiphUzVRwvU6LzzbkX7/CEoU=)
                          15: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: 30/vZduG4RMn/faR6AR/rSQuPldnzAfrSZBQwzPgYYM=)
                          16: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: OQ224IMvAsB57i2ZLy8k+3izRu39/RIC634GB2DVf5Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 20:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:56:0b:82:9d:84:ff:e9:1a:54:13:c0:4b:e3:17:19:20:af:fb:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Dec 30 18:16:27 2025 GMT
            Not After : Jan  2 20:52:27 2026 GMT
        Subject: CN=2DB8D079C8A1A81A84ACB08B9E27FB2DF9D0B77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:b1:47:ab:2a:32:96:36:f7:8b:ff:e9:c3:
                    5c:1c:5c:99:d3:1b:09:df:4c:af:47:c2:f1:fc:b8:
                    33:33:bc:de:f6:54:c0:67:d3:f7:49:8b:be:6a:f5:
                    a3:aa:98:4e:bb:9b:3a:8d:41:8e:3f:36:63:70:6e:
                    f4:5e:74:38:13:3f:4a:b2:1e:8c:a2:b5:cd:10:70:
                    1f:01:0d:b5:38:ac:6c:94:38:e7:fe:34:a5:d0:ac:
                    1e:22:9b:9b:94:b9:e0:4c:40:29:50:f2:02:69:69:
                    f4:84:33:d5:73:24:1f:c4:e9:b1:18:9a:d1:a0:1b:
                    c7:f2:b7:4a:66:73:22:ee:84:8b:8d:e4:f7:c1:d2:
                    d4:6c:92:78:07:2b:ae:6f:ff:c9:71:a4:a2:42:2c:
                    ca:33:72:0f:c6:1d:55:d1:44:5b:94:6d:fe:2e:65:
                    3a:7c:ee:4c:53:ac:1c:7e:30:a8:71:56:66:e6:1c:
                    07:03:9c:aa:19:38:66:b7:d6:cb:d1:d6:88:28:3d:
                    1d:1f:ed:37:d8:fe:d3:31:e4:38:34:ef:f0:fd:8b:
                    a4:e3:97:44:b9:28:97:5c:d4:b6:ba:7d:eb:3b:39:
                    fd:a2:da:cb:21:e9:9b:cf:ee:ac:f7:bd:51:48:6a:
                    0b:4c:32:9e:ab:2c:d6:67:f5:9c:2d:91:d0:70:30:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B8:D0:79:C8:A1:A8:1A:84:AC:B0:8B:9E:27:FB:2D:F9:D0:B7:7A
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:08:bc:70:50:5d:46:5f:3a:a7:92:c7:8d:02:69:34:69:4d:
         b1:58:d6:c2:39:6f:21:a0:0b:8c:a4:59:02:53:0a:47:48:9b:
         f5:ac:54:89:3a:d2:15:9e:f0:2f:5b:11:5b:e9:69:49:48:b4:
         88:5c:5b:64:7a:f8:1d:87:04:b5:ee:4c:db:a9:b4:d2:a3:3e:
         e4:a1:53:eb:6a:93:3e:c7:54:f1:13:12:66:bf:84:e6:f2:de:
         c3:a6:7f:f3:d7:96:e2:96:40:d0:44:1c:58:48:8a:10:90:23:
         a6:1e:84:19:7c:59:67:d8:3f:22:dd:3c:cd:a7:5f:49:b0:41:
         10:12:af:16:ea:35:c1:42:af:c4:da:60:e2:f6:c3:b5:c7:6e:
         4d:24:39:e9:fb:f8:10:70:ed:84:54:3a:9c:c5:bf:59:5a:92:
         1a:26:73:89:4c:5c:42:31:50:f3:b9:12:e6:45:4f:26:3c:61:
         2b:26:f4:74:43:e7:5e:c5:f3:58:2b:98:20:1a:90:dc:c2:2a:
         8e:8e:d2:ba:81:2c:34:10:9d:2a:64:30:d6:df:ee:77:5b:b2:
         a2:8b:43:4c:18:33:08:ce:ac:46:e6:64:5c:18:ff:8b:d6:b6:
         ad:a0:7e:19:66:01:8c:53:e1:66:df:e1:ab:0f:f4:68:27:b7:
         cb:8d:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 02:03:52 2025 by rpki-client