This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          1rMt3qxf0fAZnaK1QdvbnrecoThqydbj54p8xQyk+8Q=
Subject key identifier:   D2:E9:3F:51:D0:6F:48:16:D1:F4:FE:CF:36:F0:60:3F:5F:0B:12:AC
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       3176823E4B9A4EAD462A1D97F25BDBB013D77F75
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          0538
Signing time:             Thu 18 Dec 2025 09:12:05 +0000
Manifest this update:     Thu 18 Dec 2025 09:07:05 +0000
Manifest next update:     Sun 21 Dec 2025 19:12:05 +0000
Files and hashes:         1: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: 5aSqM2G2yl80LesSPcdF7TAurA8t2nRlgTMy90PqfEI=)
                          2: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: GRueTMA2O7baTL3L4l0x1m5orgjkTOBplI10xnIAWvE=)
                          3: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: y4LCjeHJUSobMj/KV8lbwGmURe5cadaNn3OVULBwa7M=)
                          4: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: 6MeWYAWtNqzt67sAV06u6BArwq93v2nLiPhDZr8DwFc=)
                          5: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: X7lH+ZABzDfLLUY93QifZSz4LLPKca9OeiY0/c7tpYs=)
                          6: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: IBqG3JTOb2BDjjHywaslInJ9v2wxZNaFPsj9QnGmFyU=)
                          7: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: Z0HkArdqIMJrBesbtTWXeTOTwVWpOh3aH8V39csunso=)
                          8: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: 8hhOR4WCINakOuDn9ngdKAlBm2vVq/aSfVO70m35uwA=)
                          9: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: LXI9mNoX4MU73UV9+XQILK6lbIuNFPN8Km57asx93mE=)
                          10: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: pgKybEe1UDr8NMq8IDGfdGJ30yQQRx6GVXnTuNxgMuU=)
                          11: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: KQGoiV9BbegSAyEwUGTDu3EKXx16FmPyMikvR+g+1xM=)
                          12: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: QRbMpzKdAfgfaj6wVJQ8tKGh3zUVZXKDZTbjWChNsSM=)
                          13: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: mo73R1U2LRRACPv5b5VCB+N8zr+c81xhXk+xM1vfR8g=)
                          14: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: 7SlCCBwvpXf5oNDVNUKjezl2ujoj3pY3VJsCEIji7gA=)
                          15: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: yJK4a8K11r+E+tJag+nY+8xsV5fpS89Sq9CzTcNXWcQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 19:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:76:82:3e:4b:9a:4e:ad:46:2a:1d:97:f2:5b:db:b0:13:d7:7f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Dec 18 09:07:05 2025 GMT
            Not After : Dec 21 19:12:05 2025 GMT
        Subject: CN=D2E93F51D06F4816D1F4FECF36F0603F5F0B12AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:77:d6:28:0e:48:7d:ac:df:7b:e6:b2:a0:
                    bd:5e:4c:57:7d:9a:b7:14:c9:9c:8f:73:ec:ee:24:
                    89:ae:ef:d2:6d:0d:75:ab:61:0a:ed:6c:5c:05:aa:
                    30:df:ec:6f:f0:e0:c4:2d:65:b0:74:55:ce:14:74:
                    5f:4a:eb:57:47:32:0a:de:72:cd:34:7f:44:08:4d:
                    d4:f3:9f:67:66:8b:c1:45:c9:79:e5:74:38:ed:13:
                    f8:b6:47:aa:19:5f:cc:d8:99:47:16:49:8e:fe:78:
                    1f:70:3b:13:f7:51:b5:7d:af:cf:95:6f:42:a6:30:
                    18:35:82:83:e4:d3:ff:04:27:4b:88:b3:39:d6:42:
                    a8:aa:d9:60:c1:9b:0d:44:ef:43:44:25:9a:35:47:
                    07:be:64:5e:ab:b3:05:e5:81:e3:31:66:d3:ed:10:
                    95:46:b2:ed:85:6d:39:ac:5b:d4:da:12:65:5d:ce:
                    22:80:bf:1a:08:90:4e:15:3f:c8:ef:65:43:28:92:
                    d8:34:44:86:9e:e0:48:3f:3c:d3:60:2b:fa:7f:b9:
                    b9:39:67:2f:7f:27:2b:81:5f:98:42:f7:73:f0:a1:
                    f8:0a:e9:54:af:c2:8b:e3:15:11:27:5e:40:76:08:
                    94:75:90:eb:be:5f:9e:04:ab:af:d5:68:23:42:8c:
                    15:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E9:3F:51:D0:6F:48:16:D1:F4:FE:CF:36:F0:60:3F:5F:0B:12:AC
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:80:34:43:b3:f1:a5:9c:18:14:df:3d:4d:32:2e:1f:a6:bc:
         da:eb:03:d4:85:af:87:0a:7a:94:93:fa:71:6a:ed:8d:bf:8f:
         8b:73:09:a5:29:07:de:a3:48:76:1d:24:e4:a0:71:85:74:e4:
         2b:05:d4:3e:79:83:11:9f:58:c5:6f:4e:1c:7f:f7:b4:91:60:
         6a:ba:fa:4d:e0:8e:8e:58:34:25:ce:92:b8:e4:b1:d7:d4:13:
         1b:d8:6b:1b:03:4f:2f:28:21:5b:38:e0:3a:40:82:eb:8d:0c:
         d1:a5:87:c3:ba:1c:86:2d:52:55:61:fe:0e:17:8f:03:0d:c3:
         e2:c4:c6:2f:d6:92:93:b3:17:01:93:90:40:e8:4e:fb:96:e1:
         ba:30:3d:6c:78:43:2a:87:a4:68:a7:d5:e3:c1:ef:fd:15:ed:
         06:d0:f8:98:1b:78:aa:04:d5:60:f6:d5:82:1c:d1:70:5b:3b:
         40:e6:1f:5f:12:00:07:e5:07:78:ac:03:57:07:00:1a:6b:3c:
         cd:45:07:ff:f9:08:b8:96:8b:bd:a1:d4:7d:c3:65:7a:3d:8d:
         a7:bf:8e:14:d1:9b:5b:fe:74:0a:9b:a5:c6:9c:d5:71:94:24:
         e4:a5:6f:36:e3:c8:eb:ee:08:a4:11:40:88:20:dc:9d:1d:18:
         e4:c3:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:46:11 2025 by rpki-client