This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
File:                     0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json)
Hash identifier:          xX8/qVlGwNeQ5JdMKxT/i6lv+af6tLKCMTvn3D8dkBY=
Subject key identifier:   34:D6:94:A9:BE:4D:A2:30:8C:CE:56:90:4C:DB:44:54:48:A2:F7:2B
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       7772BB816ABF5F2AE7A8B5F77BF3B6F3F18A7BA9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
Manifest number:          03A4
Signing time:             Sat 20 Dec 2025 18:04:01 +0000
Manifest this update:     Sat 20 Dec 2025 17:59:01 +0000
Manifest next update:     Wed 24 Dec 2025 00:00:01 +0000
Files and hashes:         1: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: neHLBe/fEcPkBE3oSjIGkPPuzPFnKvLrnK1gADqMmBU=)
                          2: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: fYJfmsjf+SULVX6dy88bE8cQRoUB/HUNHP8Mc9BU5Es=)
                          3: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: F5F4og+0ANkMp2eyG+y4uSqqLHGppY2rxvIFdOjz0YY=)
                          4: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: L9UqHBOT0KM8Y3HKq7TuZiV7NwWM18YFSbtkcApuAS0=)
                          5: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: AljrwxcXPRJV2CeaxgkjeFz1mPYn0NpdJRkpDNeohWs=)
                          6: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: PwS8ZteZSgPMYr/+U7TBWB1NbbKeXLIctaDRv9tMXAw=)
                          7: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: keDZ5dqo7QpwKbY9EEgBghaBvUKpvyvuxTWbyrg58Eo=)
                          8: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: DB0kLBWhboLByaTKyjbNngo2yz4DtBT0v3VbrslHr/s=)
                          9: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: 3F5ryh384+w3GpvdHsyBJS1AxEbRZUnJ/gwprNobPkU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 00:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:72:bb:81:6a:bf:5f:2a:e7:a8:b5:f7:7b:f3:b6:f3:f1:8a:7b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Dec 20 17:59:01 2025 GMT
            Not After : Dec 24 00:00:01 2025 GMT
        Subject: CN=34D694A9BE4DA2308CCE56904CDB445448A2F72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:d1:40:08:9a:5b:f0:c7:04:fe:d7:8e:53:
                    71:86:c0:7f:69:45:a8:f1:38:8f:34:47:9b:07:d5:
                    f0:4d:bb:0b:5e:82:62:fa:cc:65:c6:cb:06:e4:44:
                    85:bd:8e:19:c2:13:65:93:d8:07:ca:fd:99:4f:d9:
                    80:3d:9c:38:22:68:b5:da:ef:db:f8:6d:2a:45:60:
                    18:0a:10:8d:fe:5d:14:d8:98:b8:cc:f1:ea:0f:25:
                    bf:e6:dd:7a:53:1c:eb:f1:3f:ab:2a:ea:d4:b6:72:
                    13:b6:0e:ad:9e:58:4f:04:32:24:73:b3:e0:48:93:
                    b9:7a:64:84:ee:bf:71:30:7d:46:18:4f:6f:4b:1e:
                    ff:90:52:20:c9:98:4b:91:95:b8:27:d2:9a:d4:03:
                    6e:5b:7b:5d:61:14:7a:0a:6b:6d:61:51:97:92:65:
                    60:1e:75:3a:da:be:c7:1d:4c:8c:1d:e0:7a:f0:ba:
                    76:69:45:3b:45:de:b0:77:a2:04:44:28:09:62:3e:
                    cf:84:c6:98:be:16:3a:c8:b3:f0:46:ce:8b:1f:3f:
                    92:37:a3:86:75:bd:c5:20:79:55:75:ca:1d:55:c4:
                    3c:36:6d:df:a7:52:9c:1b:aa:93:7d:24:b7:50:18:
                    b3:ae:b0:46:5d:25:bf:b8:28:66:1a:5f:af:38:dd:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:94:A9:BE:4D:A2:30:8C:CE:56:90:4C:DB:44:54:48:A2:F7:2B
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:f6:07:bc:d4:d4:55:e9:fb:78:fb:7b:61:69:e1:79:07:
         bd:dd:47:68:40:9c:9f:bf:16:09:c8:1d:3b:fe:ba:49:54:cc:
         17:06:47:e9:ef:b9:c7:58:37:6c:ef:92:e4:11:43:3d:0b:48:
         85:99:e0:8f:fe:31:54:60:8a:2c:89:88:22:44:39:7f:67:fd:
         4e:01:95:94:88:6c:48:c2:be:e7:2d:67:3f:f8:14:0f:9e:8b:
         19:5e:26:2d:4d:d3:ae:b0:96:db:0a:3f:c0:93:e4:13:51:5c:
         92:50:6a:3e:d1:c2:e9:0c:ec:9d:0c:0a:22:cb:2b:09:4c:c3:
         7a:64:9a:62:d5:96:e1:b9:7d:e8:d7:05:d7:d8:47:02:b5:86:
         12:70:c4:35:ab:72:fd:b0:9d:ba:02:d1:39:84:8b:52:ed:ce:
         f2:60:ac:0f:2d:17:23:2c:1c:3c:83:5f:ab:48:23:77:df:c7:
         d5:14:ff:14:8f:a0:f9:89:8b:fc:fd:9b:4a:f6:a4:e5:26:5b:
         ef:55:4c:50:f0:37:f1:ff:f6:82:28:02:a3:e6:00:07:9a:6d:
         49:47:87:0d:3b:4b:99:e5:7a:df:d3:51:f8:c7:63:96:34:5c:
         97:10:bc:39:a2:9a:16:55:f5:b1:19:dd:fa:3e:90:b0:84:de:
         df:75:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:31:32 2025 by rpki-client