This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
File:                     C00163880F235714759920507217F2A7D557C953.mft (raw, json)
Hash identifier:          Xsx9PG6VJ71G2KwkZ788Sx1NYQhUh8WpDJ6HNjkqgUA=
Subject key identifier:   D3:B4:46:18:23:EE:6A:20:AB:81:7E:86:7E:53:D6:DF:D6:E4:C0:0D
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       03FFCD45C986601E9CE68305A4F8690C11C58C0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
Manifest number:          0549
Signing time:             Sat 20 Dec 2025 06:11:12 +0000
Manifest this update:     Sat 20 Dec 2025 06:06:12 +0000
Manifest next update:     Tue 23 Dec 2025 15:15:12 +0000
Files and hashes:         1: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: wJcVXH5kdnO3oVC250cjFRiURy0rH8CsrLKZhYlCnvE=)
                          2: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: ne4Fd9z4GMtggr+H/mTwmUbV1S7/FJjgjsGd2sQh0+E=)
                          3: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: 4tkvmHO2brVIZ3whhevsuoDJ/Kb5htbxnedOQ9re2sg=)
                          4: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: mISY0erp3ysDPa3O+17vQrQWnmbYh2F2NVUBefRVeig=)
                          5: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: rTOdy2cdmmm5QYorTFShkoD3ZBHt/J9THDepoiG1zQU=)
                          6: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 2Y6D9qyT24i+mrDmXDYxZ/h+kMGeojU/2MwD0/st0XM=)
                          7: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: oKxubgVSq9KanfdFvoxAtxxPQZTjjUlhGrzvFIeghIM=)
                          8: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: xHN63AGHVhpLy6i5Ne/Rg1b8TEgYmsmsilFtTygXtok=)
                          9: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: WjUo8uQ6z2o8xHjo7VhYk2FONtSF96fbL4VpKiZUe3M=)
                          10: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: g6G0tGc+VbiXH94zgiJaavS68ToTcFl7b92TkAIdvw4=)
                          11: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: XOiKBhMpiojDMkAtgGNcSAtmHT5v9rhfXApeFJZLH2w=)
                          12: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g2oV0iGk+oSLBEAQ3+fcNmyGfdkZlXFUuvI/IByWsRg=)
                          13: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: NQW7UwpMESN0U2eeb5sCy8+6MskrqZgb0v8mJ0QPgMY=)
                          14: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: pKw5LGAwZ02j8bp/435WnbI3b3bMVBsuwWMCKuHmspo=)
                          15: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jv40inOqkP45tTFU+4fmcadEbXbs4EIc7qcUlk8q2LU=)
                          16: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: oeZmr3dpPOSKqyrPruBZU1vvAe8Vo0KgbyY7tyhEXpI=)
                          17: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: YznKDs1CbxF08N3mJ1JGQ46Fgw+8Zoc4by7UrLF1FjE=)
                          18: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: oCRdMEaQb+0L+jLmpAQiC99Gb3FvgP0DAlKAkjWxSuo=)
                          19: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: XSZGKE/S6Hn7twCZ3sUL7QvBv8/jTjIsBvikiErVDPQ=)
                          20: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: 9gW/gDrS5M+meNB8DH240JCZZ/+dYKmLblxStXo0uQc=)
                          21: C00163880F235714759920507217F2A7D557C953.crl (hash: WNoJtjwTILk4wRcxt2z1k+t7SRwDwzrygsqDxDcj7gU=)
                          22: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: RMDQ4JU1W8jQ/y6PzJZSI8HHgybbgbJ49cw97ZP5E8k=)
                          23: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: fEyWQ5MFyToVUsb1qHQF70b1Re5EIhjysqGNFf3N2uE=)
                          24: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: ExAeQuV2nwMk6MuMAQPtG+claobmvvbve+qtKVWxRzM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 15:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ff:cd:45:c9:86:60:1e:9c:e6:83:05:a4:f8:69:0c:11:c5:8c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Dec 20 06:06:12 2025 GMT
            Not After : Dec 23 15:15:12 2025 GMT
        Subject: CN=D3B4461823EE6A20AB817E867E53D6DFD6E4C00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:27:85:3c:80:87:ab:f1:36:9d:f0:d2:45:
                    d1:4f:e8:68:21:a9:4d:cd:ef:4e:a6:66:b2:33:0d:
                    40:86:03:a3:06:df:e2:42:69:32:fd:b4:0a:fd:06:
                    c9:6c:bb:50:b9:44:34:65:47:1b:fd:81:02:26:cf:
                    bc:e2:d0:cd:3d:11:99:1f:6f:73:5a:96:1e:47:fd:
                    35:a6:7b:61:3a:60:a2:9d:87:87:09:7a:6b:c6:58:
                    b0:0b:02:5c:ac:b0:f3:5f:1b:fa:93:b5:ef:b2:47:
                    0c:9a:41:3e:d2:6a:2f:f3:64:7a:2c:f8:7e:d2:81:
                    18:53:33:e0:bd:70:a5:5a:9c:81:9c:b4:d3:22:c8:
                    08:4b:7f:60:b0:c0:1e:05:7f:b6:21:bd:2d:c1:3d:
                    6a:07:1c:94:b5:c5:2b:fa:8a:ed:fe:70:5f:d3:5b:
                    db:49:10:47:48:f9:26:fe:39:f1:c7:ed:02:f4:ee:
                    eb:d7:5a:6a:fe:b4:0d:69:6b:72:9d:2c:1b:2f:cf:
                    ae:e8:16:95:e9:78:30:85:f7:5b:70:13:5f:15:30:
                    15:3a:2d:05:ae:12:dd:a7:04:55:85:c8:10:9f:51:
                    2a:d6:6c:7b:0e:42:76:80:a5:f9:cc:d9:d8:f7:51:
                    3d:2e:d0:9d:6b:05:e4:59:22:63:7e:10:72:04:20:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B4:46:18:23:EE:6A:20:AB:81:7E:86:7E:53:D6:DF:D6:E4:C0:0D
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:da:dd:9a:d9:12:88:b2:15:6a:88:f4:c5:01:22:0a:ef:e5:
         04:c0:05:70:18:00:11:2b:e9:99:48:10:22:fd:e5:01:9a:c4:
         31:59:2a:ea:00:82:9e:5c:4f:eb:93:b2:aa:a0:76:28:03:60:
         cc:9c:f9:c0:a8:7c:43:fd:3d:73:ef:6b:ae:a7:75:d4:f5:1f:
         b9:51:fb:ff:f7:c7:7b:2f:24:80:56:86:f7:7d:29:ba:b4:0c:
         bb:44:b1:da:83:d0:13:ce:91:38:41:ca:a2:6e:e9:c0:0f:fa:
         01:f7:6a:c1:2b:5d:78:df:fb:04:08:aa:37:de:75:2a:32:e5:
         df:85:b2:c9:96:2c:02:67:79:99:2a:06:57:78:a9:4f:61:3b:
         40:5b:f2:68:e6:61:69:2d:1b:03:50:fb:af:bc:e4:2c:10:f1:
         39:3a:fb:d4:fb:02:07:d7:18:ee:f9:14:af:7a:e1:c6:a0:7c:
         74:05:87:1a:c7:6a:0f:a4:ac:63:9b:0c:24:df:5f:36:79:3b:
         ab:9c:35:bf:f3:cc:4c:8a:03:27:84:cf:e2:e6:bd:7a:ef:b1:
         ea:9f:b0:c6:c2:6c:0d:ec:ca:c2:36:60:df:ac:c9:18:02:1f:
         10:c3:42:d4:6e:31:e5:a7:50:cb:f3:3d:b7:8c:72:99:c3:e0:
         09:f5:db:ee
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA//NRcmGYB6c5oMFpPhpDBHFjAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE
NTU3Qzk1MzAeFw0yNTEyMjAwNjA2MTJaFw0yNTEyMjMxNTE1MTJaMDMxMTAvBgNV
BAMTKEQzQjQ0NjE4MjNFRTZBMjBBQjgxN0U4NjdFNTNENkRGRDZFNEMwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLSeFPICHq/E2nfDSRdFP6Ggh
qU3N706mZrIzDUCGA6MG3+JCaTL9tAr9Bslsu1C5RDRlRxv9gQImz7zi0M09EZkf
b3Nalh5H/TWme2E6YKKdh4cJemvGWLALAlyssPNfG/qTte+yRwyaQT7Sai/zZHos
+H7SgRhTM+C9cKVanIGctNMiyAhLf2CwwB4Ff7YhvS3BPWoHHJS1xSv6iu3+cF/T
W9tJEEdI+Sb+OfHH7QL07uvXWmr+tA1pa3KdLBsvz67oFpXpeDCF91twE18VMBU6
LQWuEt2nBFWFyBCfUSrWbHsOQnaApfnM2dj3UT0u0J1rBeRZImN+EHIEILRBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU07RGGCPuaiCrgX6GflPW39bkwA0wHwYDVR0j
BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG
MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3
Qzk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhN2ExMTUtYjhiOC00OTBiLTgz
MjAtYzllNTlhMTAwM2RkLzAvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0Yy
QTdENTU3Qzk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAOPa3ZrZEoiyFWqI9MUBIgrv5QTABXAYABEr
6ZlIECL95QGaxDFZKuoAgp5cT+uTsqqgdigDYMyc+cCofEP9PXPva66nddT1H7lR
+//3x3svJIBWhvd9Kbq0DLtEsdqD0BPOkThByqJu6cAP+gH3asErXXjf+wQIqjfe
dSoy5d+FssmWLAJneZkqBld4qU9hO0Bb8mjmYWktGwNQ+6+85CwQ8Tk6+9T7AgfX
GO75FK964cagfHQFhxrHag+krGObDCTfXzZ5O6ucNb/zzEyKAyeEz+LmvXrvseqf
sMbCbA3sysI2YN+syRgCHxDDQtRuMeWnUMvzPbeMcpnD4An12+4=
-----END CERTIFICATE-----
Generated at Mon Dec 22 04:39:36 2025 by rpki-client