This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
File:                     62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json)
Hash identifier:          R2S/Hqfqn5Uq8Lvtb6L5pdyhVNQyYA7rma4gandokeE=
Subject key identifier:   2C:CF:47:B2:34:14:D6:63:1A:43:07:D9:75:45:DE:C6:3C:61:68:A0
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Certificate issuer:       /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial:       36B0148C293AA25B22DDD58B02064C615C5AE501
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
Manifest number:          053D
Signing time:             Wed 17 Dec 2025 00:00:48 +0000
Manifest this update:     Tue 16 Dec 2025 23:55:48 +0000
Manifest next update:     Sat 20 Dec 2025 06:17:48 +0000
Files and hashes:         1: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: etc0yctvoqYoGn/V4HvmkHxMIj8UwbwA1TIZF8H1uC4=)
                          2: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: wobYB2UDyE5m9RXKDVr6FzGYXD8z+Fe6lGonvagavtI=)
                          3: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=)
                          4: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: oWA2QFYz4vYF2E7W/J4zDdYB9xBPhSOKzYOOJDzlgls=)
                          5: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=)
                          6: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=)
                          7: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: dVq64zxWLa78rB2/MzuNY9mMV1I4wE6waqwsVjBuNag=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
                          rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 06:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b0:14:8c:29:3a:a2:5b:22:dd:d5:8b:02:06:4c:61:5c:5a:e5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
        Validity
            Not Before: Dec 16 23:55:48 2025 GMT
            Not After : Dec 20 06:17:48 2025 GMT
        Subject: CN=2CCF47B23414D6631A4307D97545DEC63C6168A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:40:f5:b4:4f:1f:3a:ce:9f:d6:f3:82:48:
                    b8:c0:15:ae:d6:68:be:86:b8:c1:fd:cc:77:da:58:
                    4b:df:26:30:87:44:61:3d:e4:36:a8:c5:00:90:da:
                    03:89:57:0c:85:0f:e6:2a:9b:cd:32:5c:0f:e3:70:
                    0b:d9:66:28:3c:03:4c:4b:3e:2d:8a:97:08:32:df:
                    ef:7a:85:5d:4c:12:a8:fd:0c:a7:13:1a:c6:2f:71:
                    eb:1b:97:59:0a:70:ab:4f:f6:b1:b9:2e:0d:e3:a3:
                    c8:71:a6:f7:52:4a:0e:3b:7c:c0:92:e6:b4:7c:c5:
                    18:4c:d6:58:20:6d:44:b3:82:a8:77:dd:40:d4:4c:
                    c5:aa:09:5d:db:99:9a:75:52:af:ca:54:45:62:b1:
                    99:08:0e:23:a7:60:b1:c1:fa:f6:47:71:0e:e5:ea:
                    37:78:82:4d:a5:90:50:10:1e:80:77:69:44:c1:57:
                    63:8f:31:09:16:48:f0:9a:58:a2:68:c8:3a:a1:aa:
                    27:c9:e1:56:69:3e:37:8c:7d:2b:87:30:e9:6b:7f:
                    8c:97:38:75:b8:ff:a2:4b:e4:a9:5a:84:06:f2:03:
                    31:96:4e:37:e2:bd:e6:f9:8d:59:91:04:5d:08:40:
                    96:42:dc:1f:57:0a:ab:36:dc:5b:dc:27:f3:b2:9c:
                    7f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CF:47:B2:34:14:D6:63:1A:43:07:D9:75:45:DE:C6:3C:61:68:A0
            X509v3 Authority Key Identifier:
                keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5b:4e:29:18:0f:26:e4:c0:ca:ce:b6:5f:a4:41:26:ee:5c:
         4c:ac:47:01:f5:ce:ad:d9:7d:94:4c:86:13:c3:85:da:1d:53:
         4d:89:cc:0d:6a:b8:44:05:c5:d0:26:67:97:82:38:e3:22:22:
         b7:60:24:1f:10:63:44:5f:6f:db:b1:f2:a9:9d:35:28:d0:12:
         65:cf:2c:93:2f:3a:13:03:9b:9a:37:f8:92:1f:20:9d:ae:d6:
         5b:bd:8b:22:5e:e1:27:74:95:da:9c:db:47:73:fc:de:a1:c4:
         25:3d:77:c4:9d:a4:aa:4e:35:80:f6:4b:18:e5:20:eb:87:07:
         6b:0f:65:9b:57:18:14:0b:f7:7b:06:dc:ea:95:ef:ba:68:55:
         f8:4e:95:c3:d4:cd:e8:c1:6b:23:06:b0:69:bd:f3:b8:b8:03:
         2b:16:7e:af:30:25:c5:3c:43:3f:e6:99:3a:78:76:ab:db:2a:
         68:32:e9:31:40:bd:19:e1:86:9b:6d:d2:e7:6f:7b:15:02:31:
         26:dd:13:1e:5b:99:27:be:fa:5f:db:c0:80:56:05:b8:d4:b8:
         2d:20:1e:f4:00:a8:01:0f:a7:2e:8e:27:ce:60:e0:4e:cd:e4:
         29:63:54:e8:ac:26:a4:21:99:6e:92:6c:9e:e5:9e:d5:76:6a:
         d6:d0:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:36:34 2025 by rpki-client