This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
File:                     A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json)
Hash identifier:          HlmgxPyRutigsn2SkMCXZkE569pW6fX+eL4dHcyTM/w=
Subject key identifier:   07:79:03:EC:4B:BC:D0:68:68:34:11:38:8F:37:AE:97:7B:5C:14:C1
Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
Certificate issuer:       /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Certificate serial:       1629B3CF63CF85061BE8992D8134DE741C2192E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
Manifest number:          053A
Signing time:             Wed 17 Dec 2025 12:11:19 +0000
Manifest this update:     Wed 17 Dec 2025 12:06:19 +0000
Manifest next update:     Sat 20 Dec 2025 15:05:19 +0000
Files and hashes:         1: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=)
                          2: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=)
                          3: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=)
                          4: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=)
                          5: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=)
                          6: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=)
                          7: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: eVfIEEHSKuqjMnqidEulcgQ/yuI3s4B/NhAy+GbFTmA=)
                          8: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl
                          rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 15:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:29:b3:cf:63:cf:85:06:1b:e8:99:2d:81:34:de:74:1c:21:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
        Validity
            Not Before: Dec 17 12:06:19 2025 GMT
            Not After : Dec 20 15:05:19 2025 GMT
        Subject: CN=077903EC4BBCD068683411388F37AE977B5C14C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:45:4d:42:8e:ac:c3:93:18:75:cb:1a:ad:b4:
                    f6:5d:a2:ba:23:cc:d4:da:c1:a1:ea:75:27:19:23:
                    8d:0a:95:0e:7f:bb:83:93:f3:84:dc:12:fe:d9:1a:
                    b1:e4:0e:a4:65:d0:89:f1:d0:05:b2:de:67:f8:ab:
                    5d:d4:97:12:12:a8:e6:c0:41:03:0e:f8:02:32:98:
                    ca:cb:e2:18:ec:51:44:d6:65:9b:5c:fb:43:d6:72:
                    81:26:66:7a:ba:4f:43:39:af:fb:93:f5:48:e3:4d:
                    98:41:ad:1b:bb:d0:ae:8d:1d:92:2b:91:41:66:83:
                    70:d1:ae:75:8f:f2:09:dd:b8:99:3a:db:9d:0e:8c:
                    06:88:7e:9c:87:0a:8b:3b:df:64:b2:15:2f:b7:b3:
                    91:46:2c:39:a1:f1:ac:ad:8c:a6:65:91:bf:52:78:
                    2f:16:55:1d:eb:81:14:0a:53:99:b3:1a:70:a0:39:
                    56:c3:30:6f:7d:1d:93:41:10:57:b6:26:df:81:3f:
                    90:1d:bd:7d:04:6f:03:22:1e:73:8e:88:e3:e6:6b:
                    0b:91:c1:c4:43:c9:4d:44:09:87:a9:84:5d:68:3e:
                    fe:6d:2d:b6:ca:d6:44:ed:e3:e6:57:f5:c5:75:1a:
                    53:77:d7:a0:f7:d5:80:bb:7c:5d:15:d0:be:b7:7e:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:79:03:EC:4B:BC:D0:68:68:34:11:38:8F:37:AE:97:7B:5C:14:C1
            X509v3 Authority Key Identifier:
                keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:41:a1:3e:31:51:a0:59:c2:9e:0b:72:75:a9:63:6e:81:f9:
         68:8d:ce:4c:85:43:fa:b4:a0:8e:c0:bb:d2:a2:bd:c7:6b:82:
         de:41:9a:36:88:ec:d4:0d:26:ce:3a:43:c2:c5:b1:d8:47:fb:
         cd:86:20:f8:9f:42:43:60:71:4b:07:76:3a:f6:48:23:78:c1:
         be:a8:5d:61:f1:5a:3d:5d:20:1c:6f:eb:7e:88:e7:96:1b:cd:
         21:a1:ae:19:de:64:07:ad:22:28:80:e4:86:36:d6:58:b5:a8:
         6c:84:66:5c:b0:5d:62:d0:c2:68:12:94:61:a2:9a:e1:f8:d2:
         02:f2:65:bf:85:a3:47:10:1d:49:f8:4b:13:9c:58:5b:1c:09:
         bd:7e:d3:33:71:e8:6a:0a:67:2a:30:a7:ac:f8:f6:e4:21:b9:
         a3:29:13:bf:80:ee:40:d9:17:89:5f:35:9b:7d:02:a4:bf:84:
         66:23:7d:2b:b2:85:c7:ea:3a:ec:4c:5d:2d:48:72:5f:3f:9f:
         e1:e8:bb:3d:de:cb:c6:13:c5:9f:63:f4:72:80:5e:85:6b:97:
         06:7e:6f:c5:91:0a:66:f9:34:41:ea:bb:0b:1f:89:98:59:2a:
         ce:f3:7e:25:af:a0:89:82:b7:7e:fc:e5:e0:d6:10:82:17:95:
         6e:30:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:47:46 2025 by rpki-client