This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft
File:                     A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json)
Hash identifier:          KXgymuLCAxwoNjYuQezwb4XRPkN7JaDbpV8VUVbs6r0=
Subject key identifier:   DB:34:A5:6D:C5:6A:2E:49:8F:3E:6B:3A:33:C0:FE:A7:E6:56:83:32
Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19
Certificate issuer:       /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819
Certificate serial:       60E4C2F2056AC395797736EA68367F3DE144BF18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft
Manifest number:          0104
Signing time:             Sun 21 Dec 2025 07:12:30 +0000
Manifest this update:     Sun 21 Dec 2025 07:07:30 +0000
Manifest next update:     Wed 24 Dec 2025 12:21:30 +0000
Files and hashes:         1: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: Fn6u3T+omori2q5WH/3ysfjn7dqY/66miV10OnYitHU=)
                          2: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=)
                          3: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=)
                          4: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e4:c2:f2:05:6a:c3:95:79:77:36:ea:68:36:7f:3d:e1:44:bf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819
        Validity
            Not Before: Dec 21 07:07:30 2025 GMT
            Not After : Dec 24 12:21:30 2025 GMT
        Subject: CN=DB34A56DC56A2E498F3E6B3A33C0FEA7E6568332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:f2:f9:e9:aa:6a:87:a0:1d:41:fb:23:52:
                    1e:eb:98:f8:49:b8:91:af:e9:29:5d:91:b3:03:40:
                    12:5d:86:a1:26:f2:8a:1c:d7:5b:5a:bf:1d:c8:a2:
                    9e:12:ed:f3:4e:49:24:fc:d8:e9:63:d2:0f:28:6d:
                    f3:30:a9:aa:11:a4:ef:a0:88:f9:ee:48:15:97:4e:
                    2c:18:51:bb:d4:36:af:78:16:be:bc:6c:ad:1d:e5:
                    28:0b:bf:34:b1:f9:d2:fc:cd:52:72:44:0c:08:6c:
                    96:a7:0e:b0:3a:71:05:41:23:7b:df:09:9d:40:74:
                    cd:ac:c6:e3:e6:37:8a:40:88:e0:b7:44:8e:09:91:
                    67:72:62:19:ad:7a:f3:d6:a4:07:29:3a:a8:0d:59:
                    d0:36:d0:db:67:38:24:79:fe:65:11:e3:8d:5b:3a:
                    ed:53:85:c1:a0:38:52:8c:f6:d7:19:f1:bc:f4:69:
                    50:0b:ff:ea:88:f2:3a:a7:f8:a4:25:96:58:5b:5f:
                    f0:84:3a:05:bf:12:8d:9b:a3:83:ed:c2:9e:cf:de:
                    a1:42:3c:fe:e1:21:98:0f:28:66:bb:df:51:fa:d7:
                    97:50:6b:88:45:ab:53:72:bd:4d:25:03:b2:c2:b0:
                    b5:8f:5e:04:6c:67:e1:37:b0:41:c0:93:e4:8e:9e:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:34:A5:6D:C5:6A:2E:49:8F:3E:6B:3A:33:C0:FE:A7:E6:56:83:32
            X509v3 Authority Key Identifier:
                keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:b6:47:1d:fc:2d:18:0e:b0:a3:75:00:3a:30:58:f7:02:
         d9:21:be:0e:dc:5c:c8:13:a4:0e:1f:09:46:f1:d6:8e:53:c4:
         a8:93:86:72:e2:8b:f5:f1:29:1a:03:1d:c9:0a:37:de:8d:f5:
         dd:24:b7:fa:92:3f:3d:f9:c6:96:bc:d2:b5:79:97:ae:8c:4c:
         6e:c4:76:1d:87:32:7d:71:4f:08:bd:3f:e8:b3:80:d9:60:db:
         db:f3:d9:ff:09:88:5c:8d:15:24:e8:da:d1:a7:39:1e:37:b5:
         07:29:2b:66:cc:c5:ac:1f:c2:67:0b:13:66:4d:60:fe:d1:12:
         c7:e6:36:7e:36:11:b9:4a:43:3b:c9:03:4a:f4:1c:ea:80:3b:
         70:ba:78:89:5f:23:90:e0:bb:0c:4c:fa:c0:d1:cc:24:d4:50:
         ec:75:12:38:e0:96:5f:f7:cb:b0:1b:bf:13:dd:fe:04:e7:a6:
         f6:e1:07:05:0d:fc:c1:51:7c:5a:f6:54:3c:64:6c:1a:86:bf:
         18:93:4e:3b:42:8f:45:7b:be:2a:74:e6:ec:33:a4:8e:e6:36:
         78:2b:6f:47:8f:74:26:79:1e:ec:e8:ad:0d:b5:b1:70:e0:3f:
         b7:68:99:b2:cb:9c:30:fe:8b:20:ae:f5:37:bc:98:94:aa:28:
         3c:25:44:eb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYOTC8gVqw5V5dzbqaDZ/PeFEvxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC
MDgyRDgxOTAeFw0yNTEyMjEwNzA3MzBaFw0yNTEyMjQxMjIxMzBaMDMxMTAvBgNV
BAMTKERCMzRBNTZEQzU2QTJFNDk4RjNFNkIzQTMzQzBGRUE3RTY1NjgzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzfL56apqh6AdQfsjUh7rmPhJ
uJGv6SldkbMDQBJdhqEm8ooc11tavx3Iop4S7fNOSST82Olj0g8obfMwqaoRpO+g
iPnuSBWXTiwYUbvUNq94Fr68bK0d5SgLvzSx+dL8zVJyRAwIbJanDrA6cQVBI3vf
CZ1AdM2sxuPmN4pAiOC3RI4JkWdyYhmtevPWpAcpOqgNWdA20NtnOCR5/mUR441b
Ou1ThcGgOFKM9tcZ8bz0aVAL/+qI8jqn+KQlllhbX/CEOgW/Eo2bo4Ptwp7P3qFC
PP7hIZgPKGa731H615dQa4hFq1NyvU0lA7LCsLWPXgRsZ+E3sEHAk+SOns83AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2zSlbcVqLkmPPms6M8D+p+ZWgzIwHwYDVR0j
BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx
RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy
RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi
NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3
RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC/ttkcd/C0YDrCjdQA6MFj3Atkhvg7cXMgT
pA4fCUbx1o5TxKiThnLii/XxKRoDHckKN96N9d0kt/qSPz35xpa80rV5l66MTG7E
dh2HMn1xTwi9P+izgNlg29vz2f8JiFyNFSTo2tGnOR43tQcpK2bMxawfwmcLE2ZN
YP7REsfmNn42EblKQzvJA0r0HOqAO3C6eIlfI5DguwxM+sDRzCTUUOx1Ejjgll/3
y7AbvxPd/gTnpvbhBwUN/MFRfFr2VDxkbBqGvxiTTjtCj0V7vip05uwzpI7mNngr
b0ePdCZ5HuzorQ21sXDgP7dombLLnDD+iyCu9Te8mJSqKDwlROs=
-----END CERTIFICATE-----