This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
File:                     48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json)
Hash identifier:          dTT35MtPBOAtme3t61UNcOu90UPZUfSwl40xejYlUfQ=
Subject key identifier:   0C:DC:FF:B9:99:E4:8B:13:B3:CA:FA:1E:B9:DB:C3:DA:F1:F0:A9:77
Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8
Certificate issuer:       /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
Certificate serial:       78434FA74E05C1B6A21ACC7B9CF9A033E9C09567
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
Manifest number:          03B7
Signing time:             Fri 19 Dec 2025 16:41:39 +0000
Manifest this update:     Fri 19 Dec 2025 16:36:39 +0000
Manifest next update:     Mon 22 Dec 2025 22:17:39 +0000
Files and hashes:         1: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=)
                          2: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=)
                          3: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: UQdK71SKL4NYaBuIQnK5+6XWfNucbAcVwZnMqeSI+Mw=)
                          4: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl
                          rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 22:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:43:4f:a7:4e:05:c1:b6:a2:1a:cc:7b:9c:f9:a0:33:e9:c0:95:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
        Validity
            Not Before: Dec 19 16:36:39 2025 GMT
            Not After : Dec 22 22:17:39 2025 GMT
        Subject: CN=0CDCFFB999E48B13B3CAFA1EB9DBC3DAF1F0A977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:00:96:22:8b:8b:f8:d0:a6:aa:ae:46:59:
                    94:30:a7:ea:e7:27:c6:dd:ce:fc:08:9f:4b:76:89:
                    01:bd:6b:46:f9:87:d4:74:94:89:b7:5c:8c:29:68:
                    e4:3e:f5:dc:07:60:a4:4f:81:7e:a9:c5:aa:e7:b3:
                    6e:86:e5:eb:3e:eb:84:05:14:2d:77:e6:af:0b:52:
                    d8:9e:6c:5e:28:b5:99:88:12:01:8b:26:2b:4e:39:
                    c8:bc:73:dd:f7:97:be:a7:15:8d:5e:c8:20:15:2e:
                    2c:23:b0:0c:9a:27:05:f5:c7:82:3a:a7:b5:19:82:
                    5a:10:2c:00:9b:35:3d:7f:5c:db:58:07:9a:47:ab:
                    db:73:68:c7:dd:96:33:b8:6a:04:69:f5:e5:e6:e8:
                    35:b5:7b:89:48:e1:71:89:3a:f2:40:c9:ed:39:b1:
                    d1:9f:80:c7:e2:f5:43:15:90:cb:9b:d8:cc:e7:c0:
                    81:01:30:6a:4e:47:ff:c8:41:db:98:8b:0e:2b:ce:
                    b8:04:b3:bc:1c:3a:16:04:00:9f:aa:e2:23:a8:fa:
                    aa:e4:90:25:98:1a:3b:6e:be:30:03:99:65:bf:a4:
                    38:eb:01:a8:ed:8b:14:68:15:67:ae:93:88:fd:d6:
                    65:55:c7:63:db:eb:6b:2c:61:18:02:61:23:e3:95:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DC:FF:B9:99:E4:8B:13:B3:CA:FA:1E:B9:DB:C3:DA:F1:F0:A9:77
            X509v3 Authority Key Identifier:
                keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:85:88:88:c1:86:6d:df:3f:bf:ff:46:7d:91:5e:01:eb:
         72:d3:7c:18:e2:8c:b0:94:1f:29:95:31:b8:33:63:e0:f5:79:
         72:42:62:31:d2:e5:49:b1:c6:1e:86:ab:3b:48:ab:60:5e:a4:
         0b:ee:43:0a:49:d3:93:50:28:70:48:76:98:c1:8a:eb:1d:31:
         69:2f:ed:fd:ae:8e:20:63:71:18:0f:db:9a:f7:15:2e:96:2c:
         54:83:de:14:93:6c:85:d3:13:ec:33:b2:ab:b8:fb:5d:6b:ea:
         70:28:4a:c5:fc:7c:62:42:3e:05:14:a2:2d:59:36:5e:45:1c:
         e2:97:e9:d7:23:02:f7:9a:b1:32:c5:3f:75:6d:45:d1:19:46:
         b0:b4:65:35:d1:74:27:e2:9b:5f:91:0a:ea:7d:65:e3:f6:fa:
         66:82:90:7b:0d:ae:1b:fe:5d:6f:11:83:59:fb:3e:3e:2b:22:
         2c:8a:3c:12:5d:31:d7:d2:c7:1e:d8:64:49:ec:87:3a:5a:da:
         7f:5b:7b:9c:a0:3c:01:2c:ec:fe:3f:98:cf:b3:fb:ba:c0:2d:
         f3:68:71:71:88:52:b8:6b:1e:ac:63:fc:b9:a1:ee:4a:e2:df:
         db:06:f8:22:92:bf:b4:9d:23:8b:f3:16:29:d8:13:ec:7d:58:
         d7:63:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:57:57 2025 by rpki-client