This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
File:                     21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json)
Hash identifier:          LvFGgOtzF6D6Lly0CP4p4hxS9MSIL1Z4haShGD1YLXI=
Subject key identifier:   E6:BD:BF:8A:20:31:DA:0F:5C:34:B8:73:3B:86:2D:22:15:D5:AC:BB
Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
Certificate issuer:       /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Certificate serial:       466460D5396BF49B4538D886A69880930519A447
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
Manifest number:          C1
Signing time:             Fri 19 Dec 2025 04:43:31 +0000
Manifest this update:     Fri 19 Dec 2025 04:38:31 +0000
Manifest next update:     Mon 22 Dec 2025 07:30:31 +0000
Files and hashes:         1: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: NaHe5YrxTvb1T+B86yAscpluwifFSNcBhISUAGBKlIw=)
                          2: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: juQ/cwjH1toIUGh+4Z6y41hGaf2rFqJaltHbfzkfdBc=)
                          3: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: CbiBxaX9ddBH1o7nomW/iHw3KqeexSYJrX7KRnYKypE=)
                          4: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: iSq6NwogxUEJNuToH4CRAdLPA94Ifhymd/i0qK2RpFY=)
                          5: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: +PmFbdoieOm1HYaiDNoJSgRpm6MfVAVtuXNpglouU7g=)
                          6: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: PLR5JgPEervTPecUXZiZDmLWFwTBu9T/3wAVKLsZTQQ=)
                          7: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: aO0x+zXgbPOIjgzHxX0fAcf+6eJJ6z747uBT9dWocuM=)
                          8: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: WYN4mrwjKunsGp4uZVpUx9nBxwBDSeavyWVXTw8bEXE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl
                          rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 07:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:64:60:d5:39:6b:f4:9b:45:38:d8:86:a6:98:80:93:05:19:a4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
        Validity
            Not Before: Dec 19 04:38:31 2025 GMT
            Not After : Dec 22 07:30:31 2025 GMT
        Subject: CN=E6BDBF8A2031DA0F5C34B8733B862D2215D5ACBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:83:96:e7:44:ba:57:d7:13:e6:58:83:8c:
                    2a:7c:88:19:aa:32:8e:eb:8d:8a:8e:c3:f8:64:6f:
                    a4:9a:13:5e:f9:13:66:e6:61:c0:57:0a:0d:36:f5:
                    2c:6d:7a:07:57:de:44:d2:29:86:c0:a1:89:53:75:
                    61:5b:55:bf:c7:df:38:d3:68:63:39:64:b5:6d:3d:
                    a0:46:04:bd:d0:fc:68:98:1e:25:62:e5:db:2f:42:
                    95:b5:60:64:69:95:e9:31:f8:94:b6:71:b1:f5:0f:
                    c7:4f:ad:78:5a:ad:a0:fd:c6:7a:a4:85:53:f8:f9:
                    bc:f8:93:d5:e1:58:ce:7c:08:e5:8f:ee:49:86:9e:
                    3c:d7:bb:93:42:49:ec:d4:8d:6a:88:f1:fe:6f:5b:
                    96:68:cf:ab:06:ba:6a:94:4e:08:5a:e6:ed:09:76:
                    91:a2:04:eb:48:ba:0d:88:8e:6c:55:37:88:a9:38:
                    22:e9:65:8e:7e:4b:d9:41:db:c6:05:c6:26:2a:51:
                    bc:d1:de:1e:15:5e:a6:6c:8d:e0:11:cc:db:b1:4c:
                    6c:be:49:06:03:cd:a2:96:33:2b:a4:97:c4:ea:c8:
                    84:c0:68:48:80:07:35:91:c0:fd:50:49:dc:f3:fa:
                    ef:a3:f5:b8:66:1d:2e:2c:e7:fb:5d:ed:aa:0a:04:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BD:BF:8A:20:31:DA:0F:5C:34:B8:73:3B:86:2D:22:15:D5:AC:BB
            X509v3 Authority Key Identifier:
                keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:43:53:eb:46:f4:2e:a8:ee:9c:9f:f3:ca:0e:75:4a:9b:67:
         f5:57:c5:ea:c6:22:01:54:17:21:f9:97:05:16:22:cc:4f:45:
         91:19:ed:2d:20:a5:7b:dd:c6:7f:c2:c9:8a:b2:65:19:e8:47:
         67:4d:76:77:1a:bc:9b:e6:0b:4c:5a:46:74:fc:2c:9d:88:cf:
         b2:7c:3f:09:6e:40:46:79:f1:9d:e0:d7:b4:38:25:73:15:2f:
         29:10:92:3f:8a:18:05:7f:3a:af:a8:7d:ea:cb:56:8a:dd:5e:
         15:48:a2:00:97:40:67:6e:c7:0c:1d:bb:e6:dc:8f:2c:15:e0:
         9a:82:44:10:db:25:fe:10:6f:6e:dd:e0:13:be:ed:15:9b:bc:
         65:5b:ad:03:4d:9f:cc:1a:8e:83:b3:9d:3b:20:c9:97:7f:3c:
         8c:32:28:97:e1:76:23:06:59:7d:1d:d7:b6:d3:c4:e6:fd:07:
         f1:45:15:ed:09:b3:82:c0:ed:29:f7:93:71:f0:30:4b:c0:0b:
         f6:7e:6b:8c:5a:5f:d0:79:ed:00:c8:c9:c7:3e:ed:c5:9e:ff:
         67:3e:c9:49:a1:1c:23:3e:6d:8f:d0:3c:0a:02:93:a1:46:62:
         77:7f:0c:b3:5d:23:60:de:ac:fd:78:97:2f:77:cd:7d:61:c1:
         c4:0b:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:43:10 2025 by rpki-client