This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File:                     F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier:          IXKA0icd4/18RP9Ip0+KZQEvJmfghFcEuwaZ8Nzp1ZY=
Subject key identifier:   E8:B9:FD:F7:64:84:45:DF:2D:FA:45:99:77:C1:1E:89:A4:7D:A8:F5
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       20B24BC84B553C6877C31D1CF1A769CC27B612EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number:          0552
Signing time:             Wed 17 Dec 2025 05:51:15 +0000
Manifest this update:     Wed 17 Dec 2025 05:46:15 +0000
Manifest next update:     Sat 20 Dec 2025 09:44:15 +0000
Files and hashes:         1: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=)
                          2: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=)
                          3: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=)
                          4: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=)
                          5: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=)
                          6: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=)
                          7: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: EGqVS0O7ai3wUA6QzSmogJsiK3B/Fql0kKsJGZXYrNg=)
                          8: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=)
                          9: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=)
                          10: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=)
                          11: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=)
                          12: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=)
                          13: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 09:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b2:4b:c8:4b:55:3c:68:77:c3:1d:1c:f1:a7:69:cc:27:b6:12:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Dec 17 05:46:15 2025 GMT
            Not After : Dec 20 09:44:15 2025 GMT
        Subject: CN=E8B9FDF7648445DF2DFA459977C11E89A47DA8F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:c0:d7:34:c1:17:63:da:c4:31:5e:cf:ca:
                    35:dd:22:46:3d:87:d9:ce:4b:5a:34:53:d2:93:97:
                    cc:02:dd:d1:cd:4d:14:48:ad:34:4c:56:b5:6b:f3:
                    85:cc:8d:e9:b7:7b:be:92:7e:4a:08:1f:56:78:06:
                    23:8d:6c:49:2c:a2:1b:aa:68:cc:72:96:b5:9e:e4:
                    1c:ed:dc:cc:18:e7:f2:98:eb:5d:a8:9a:c5:3f:2f:
                    75:cd:df:29:61:c8:64:18:44:7a:39:a6:82:f5:36:
                    96:1b:80:6a:84:55:05:43:2f:c1:78:de:34:d7:ed:
                    04:7a:9a:0e:08:5c:d0:cb:0e:89:bb:c9:c9:2f:7f:
                    ad:6e:ef:a6:ba:41:67:ce:73:fd:2a:bf:a1:31:75:
                    28:a8:d2:96:52:18:56:8a:f4:84:4b:17:75:b7:5f:
                    dc:b2:56:9f:ea:9b:31:94:e0:99:a1:cc:e8:0f:0c:
                    fa:1c:04:f1:f5:c0:f8:82:eb:54:7a:01:40:41:14:
                    06:72:06:2b:30:01:26:45:a1:99:b0:84:9a:e6:45:
                    27:2c:32:04:d7:c6:8b:f2:05:5b:92:7b:35:93:a5:
                    0f:12:19:dd:e4:38:90:a6:54:3f:05:61:9e:a2:cf:
                    13:22:3d:79:e6:4a:0d:f7:f0:a6:43:00:28:96:91:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B9:FD:F7:64:84:45:DF:2D:FA:45:99:77:C1:1E:89:A4:7D:A8:F5
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ad:f7:6e:69:41:60:e9:3c:e9:8a:bd:0d:a3:ff:a9:31:9a:
         27:23:2b:f5:1a:61:f3:2f:99:c3:c5:ef:58:29:d7:5d:bf:e1:
         ab:cb:0a:93:fe:39:db:e0:33:ae:8a:8d:14:a9:50:b3:f7:f7:
         87:b5:41:f7:db:a2:2c:5d:89:ac:fe:cf:97:0c:78:da:f7:f8:
         b4:62:0a:a8:d9:ea:6d:75:14:8b:05:20:ca:bf:d8:00:9c:b6:
         6c:54:a8:2a:55:a0:29:1b:1b:12:1f:ab:b6:7c:76:20:e7:5a:
         b3:5c:5b:cf:b0:a2:ee:19:24:e1:3b:7f:39:9a:1e:93:e7:1e:
         2d:64:7f:0f:4d:e7:ea:71:68:70:70:c0:fd:af:5b:aa:40:2d:
         57:db:49:48:f2:83:01:40:79:c4:b4:34:12:95:aa:67:61:95:
         e5:38:36:b5:af:95:3c:7a:75:a1:88:77:01:a4:c4:94:bc:1d:
         a8:ef:9e:4e:52:45:ff:a6:03:ab:e8:7a:c3:05:68:1b:47:67:
         b4:7f:59:43:37:66:28:a9:38:cf:f3:e6:ce:bd:e4:ff:1e:bc:
         13:2b:af:10:ef:8e:2f:7b:f4:4a:65:8f:10:34:92:04:e0:0b:
         e9:e6:f4:9e:93:7a:56:93:28:41:69:8b:1a:1c:0c:4c:13:6a:
         33:f4:65:b4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUILJLyEtVPGh3wx0c8adpzCe2EuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz
MDlCM0YzQjAeFw0yNTEyMTcwNTQ2MTVaFw0yNTEyMjAwOTQ0MTVaMDMxMTAvBgNV
BAMTKEU4QjlGREY3NjQ4NDQ1REYyREZBNDU5OTc3QzExRTg5QTQ3REE4RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36MDXNMEXY9rEMV7PyjXdIkY9
h9nOS1o0U9KTl8wC3dHNTRRIrTRMVrVr84XMjem3e76SfkoIH1Z4BiONbEksohuq
aMxylrWe5Bzt3MwY5/KY612omsU/L3XN3ylhyGQYRHo5poL1NpYbgGqEVQVDL8F4
3jTX7QR6mg4IXNDLDom7yckvf61u76a6QWfOc/0qv6ExdSio0pZSGFaK9IRLF3W3
X9yyVp/qmzGU4JmhzOgPDPocBPH1wPiC61R6AUBBFAZyBiswASZFoZmwhJrmRScs
MgTXxovyBVuSezWTpQ8SGd3kOJCmVD8FYZ6izxMiPXnmSg338KZDACiWkXhtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6Ln992SERd8t+kWZd8EeiaR9qPUwHwYDVR0j
BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx
RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC
M0YzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4NmIwOTItNTI3ZC00ODhmLWE5
ZjctMjQ3OTdkOTc3NGNiLzAvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlB
NjgzMDlCM0YzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAByt925pQWDpPOmKvQ2j/6kxmicjK/UaYfMv
mcPF71gp112/4avLCpP+OdvgM66KjRSpULP394e1Qffboixdiaz+z5cMeNr3+LRi
CqjZ6m11FIsFIMq/2ACctmxUqCpVoCkbGxIfq7Z8diDnWrNcW8+wou4ZJOE7fzma
HpPnHi1kfw9N5+pxaHBwwP2vW6pALVfbSUjygwFAecS0NBKVqmdhleU4NrWvlTx6
daGIdwGkxJS8Hajvnk5SRf+mA6voesMFaBtHZ7R/WUM3ZiipOM/z5s695P8evBMr
rxDvji979EpljxA0kgTgC+nm9J6TelaTKEFpixocDEwTajP0ZbQ=
-----END CERTIFICATE-----
Generated at Fri Dec 19 13:38:52 2025 by rpki-client