This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
File:                     1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json)
Hash identifier:          h6J1mzelAkcm6vC4JdzHgu8nHt5Zg/RrbO9z9D94IA8=
Subject key identifier:   0D:86:04:35:4C:9F:29:5B:22:20:EB:AE:E0:58:D7:46:2B:4F:9C:CF
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       287DE510BA46A37593B563BC9A6E1E8BCEFB5DA0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
Manifest number:          01D7
Signing time:             Wed 17 Dec 2025 10:10:05 +0000
Manifest this update:     Wed 17 Dec 2025 10:05:05 +0000
Manifest next update:     Sat 20 Dec 2025 16:38:05 +0000
Files and hashes:         1: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: CSQkGTmQt+s2JfwWnvim+F5o3slRbbgf9XyF9r9GepU=)
                          2: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: K3N55cBe6+W2+UEDhGR/EreK/NsWeZinIyNl1uxEyoA=)
                          3: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: N5G8KF7hd1GZF46JwC5xmLKpa2hWY0AWMli60UwT5/M=)
                          4: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: FqS1mlGjIL0BP5gK9enlmVRuaz2y9/mIcmX+UTD+qKA=)
                          5: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: 8i3x4gBaZ9q2FeKL77QwQugTPoFrVoqppzokcKf7V9U=)
                          6: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 9CQ6JFUhExdNBAYYYWcUpyzc1PDrxOfBKcNbdLlWf6U=)
                          7: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: IJ/QrpohwAAMEHf60VyOYZyE2rLKrvAARpcXl8wmM9I=)
                          8: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: hHpqodeyU8amc0Yg+Vz1Yb1kEzG9g5qGdXKGONkFhDE=)
                          9: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: uzdxCFJ60y1EqFPWBfLgLUEnJ7LWJrfPQeMyJb9m5FM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 16:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:e5:10:ba:46:a3:75:93:b5:63:bc:9a:6e:1e:8b:ce:fb:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Dec 17 10:05:05 2025 GMT
            Not After : Dec 20 16:38:05 2025 GMT
        Subject: CN=0D8604354C9F295B2220EBAEE058D7462B4F9CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:15:7c:4d:0b:cd:97:8f:01:f6:97:ce:56:44:
                    09:96:af:00:ec:34:51:5c:d2:a7:1a:53:91:78:97:
                    7b:28:e8:2f:53:5f:55:0a:fe:fd:74:aa:76:3a:d7:
                    56:6d:49:8a:ce:2e:5e:66:67:21:f2:d3:5a:66:df:
                    6e:86:da:82:94:06:f4:51:88:3f:15:35:3a:93:b3:
                    92:78:2e:08:db:70:71:44:81:75:69:a6:f1:60:fe:
                    4e:b7:0c:b7:c5:ca:df:42:27:70:69:2b:5b:8d:f4:
                    14:1f:34:f9:58:2c:71:6e:8d:95:bf:9d:96:a5:8a:
                    9f:4f:c2:a8:75:ae:f7:b4:69:80:3f:12:5c:77:a6:
                    aa:42:fb:f4:69:81:4a:c3:85:ff:57:c2:a3:2d:3d:
                    53:ba:ef:cf:af:a8:70:44:08:df:b1:26:37:09:35:
                    ee:bc:be:f4:25:d7:1f:b8:88:5d:df:8c:e6:08:cd:
                    1b:b0:27:dd:1f:18:e3:ea:8f:a0:0b:0c:89:12:af:
                    d7:b9:b0:aa:ab:18:b2:19:00:f0:c8:a4:19:9a:5c:
                    1d:d7:dd:e6:93:3a:18:cf:53:5c:c4:da:6c:69:07:
                    ce:98:c2:50:24:81:2d:aa:dd:ae:53:71:61:4b:7d:
                    4e:23:c8:b6:cb:b9:f0:9c:34:8f:a9:6a:4b:c6:03:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:04:35:4C:9F:29:5B:22:20:EB:AE:E0:58:D7:46:2B:4F:9C:CF
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:37:4d:69:51:e1:1c:6a:1b:5f:91:f5:a2:82:cf:e4:28:
         a8:78:1f:c5:33:09:56:ef:f1:69:6f:13:40:f9:85:b3:ed:bc:
         ef:be:d7:69:e0:ab:13:7e:28:c7:a1:7e:1f:1a:f4:69:9e:0c:
         33:bc:ec:9c:ba:07:cd:25:a9:72:6b:08:9f:2b:50:35:53:5b:
         9f:71:3a:59:5c:0d:b0:6d:f6:e2:21:de:25:2f:6c:ca:5f:c2:
         77:d2:51:2c:30:63:9d:8b:7d:8a:10:24:91:b8:da:85:71:cc:
         14:1b:58:3a:1c:b4:28:bb:74:fc:78:5c:97:03:b1:a8:03:78:
         b7:77:ca:76:95:45:53:ca:f5:8c:80:50:82:ec:d7:45:6f:04:
         16:9b:09:37:39:b5:91:5d:16:2f:d5:00:5d:28:04:4c:e1:97:
         d8:a3:4d:7b:82:91:5d:6e:15:e4:60:0d:04:37:6e:34:44:c7:
         9b:af:2b:75:90:ed:b1:ae:e1:46:ab:d8:e6:93:fb:48:bf:7c:
         4c:b0:5c:c2:a5:80:6c:ca:f2:40:63:1e:ac:79:eb:ed:2d:68:
         08:6a:54:55:29:e9:7b:06:d9:9f:6f:31:15:92:45:87:e5:96:
         e1:c1:88:a1:7c:e3:5b:f6:9c:44:32:18:20:2a:ce:33:79:1c:
         8c:0c:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:18 2025 by rpki-client