This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft
File:                     744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft (raw, json)
Hash identifier:          N5T/yOIBPTdyoWuJ5G0eZ7EEByXOZUIIr2Yk31EuoOs=
Subject key identifier:   D5:D2:03:68:3F:7A:DF:78:B9:EF:4A:0D:3D:28:C1:D2:AB:79:B7:2A
Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23
Certificate issuer:       /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323
Certificate serial:       4D242B858D58706B5AA83ABB7F1CD6F2C75C14E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft
Manifest number:          013E
Signing time:             Thu 18 Dec 2025 22:11:36 +0000
Manifest this update:     Thu 18 Dec 2025 22:06:36 +0000
Manifest next update:     Mon 22 Dec 2025 03:05:36 +0000
Files and hashes:         1: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: Nyxgg8pBzc0S11WPRtK59UFRSivtWFPC71vDqqqNcpI=)
                          2: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl (hash: lAhbuArcVmAQXWOMsAG98S6OEWwdC7q3ajMOD0qMu5Y=)
                          3: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: f6CLm//dO0n6OthDYmsvLFicH09gzcmnHxf/Flc+xDQ=)
                          4: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: 0RiS+RR5AkQk/dYZxan36BDxuGPtCqd2prjnjXfUECQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl
                          rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:24:2b:85:8d:58:70:6b:5a:a8:3a:bb:7f:1c:d6:f2:c7:5c:14:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323
        Validity
            Not Before: Dec 18 22:06:36 2025 GMT
            Not After : Dec 22 03:05:36 2025 GMT
        Subject: CN=D5D203683F7ADF78B9EF4A0D3D28C1D2AB79B72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:4e:95:bd:a3:9e:36:61:00:47:df:7f:2e:
                    c9:72:5d:13:de:c9:bc:be:1b:eb:bd:20:18:10:86:
                    cf:2c:15:93:7a:27:e3:02:fa:86:70:ae:09:5a:ba:
                    08:ac:c0:91:32:08:e1:e8:58:09:06:5a:f3:6a:ae:
                    4d:bc:28:5e:b5:87:c2:d9:b6:ae:33:b3:ac:0e:f5:
                    a7:4c:f4:e8:83:4b:21:7a:36:0f:c6:e4:b7:ce:8f:
                    c6:af:49:27:d8:6f:5f:16:84:83:aa:53:87:12:67:
                    07:f6:58:57:dc:58:ab:46:af:8e:fc:12:84:bb:dc:
                    dc:6c:99:f5:b6:94:8b:bc:67:08:19:58:9c:28:af:
                    ad:f6:d3:93:24:79:eb:ba:05:12:84:3a:a9:46:9f:
                    46:f8:a8:42:7b:73:e8:af:20:01:6c:14:16:53:c4:
                    16:73:83:98:09:74:f9:ec:43:18:19:a5:11:29:33:
                    18:b1:60:6f:46:be:6b:b0:26:67:42:fb:84:59:f5:
                    f9:3a:0a:ea:df:4b:e4:1a:ed:99:75:04:7d:34:e2:
                    80:40:fe:51:3a:7b:ae:a8:fc:e5:56:f1:d9:38:9a:
                    e7:2c:16:96:eb:d1:c1:74:59:72:84:97:16:c5:d9:
                    4a:44:61:53:29:b8:93:3e:8e:e2:57:5d:97:c0:55:
                    ec:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:03:68:3F:7A:DF:78:B9:EF:4A:0D:3D:28:C1:D2:AB:79:B7:2A
            X509v3 Authority Key Identifier:
                keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:e9:f0:8d:d0:05:25:8e:b8:b4:09:96:cf:3f:75:a5:d1:
         73:e5:f1:62:51:e3:ce:b3:94:6f:40:a1:af:f4:2f:d3:7e:89:
         fd:44:21:ed:d0:eb:03:9c:ab:51:ef:16:da:4e:32:71:b3:96:
         11:07:26:93:70:97:9c:85:22:53:4b:1d:58:a4:3f:b2:ca:68:
         cd:a4:91:9c:6c:eb:95:ef:2c:b4:10:08:6f:61:8a:0b:39:6d:
         70:fb:c5:80:f6:ca:8e:c6:2b:32:7f:75:eb:22:92:5f:3b:45:
         ac:6c:8b:96:8c:94:d0:df:f4:da:c9:65:32:b1:87:de:19:2f:
         d8:f3:a9:9e:40:b1:3c:78:53:6e:66:06:c4:52:fe:d7:19:ab:
         e4:1f:75:08:d9:ee:e0:06:6f:40:07:7a:19:53:ea:42:82:0b:
         1d:a1:47:14:13:7d:cf:34:be:d4:72:9b:86:69:1c:c4:01:49:
         2c:1f:a1:92:9f:7d:47:25:2f:ac:ef:84:fc:81:c2:01:27:f0:
         07:30:b5:18:08:4f:58:8a:44:a8:20:24:1b:db:72:d8:4a:c8:
         a6:89:a3:14:59:bb:a6:e4:72:97:94:00:f2:51:86:fd:06:c5:
         a2:1a:a9:13:72:a9:7e:be:95:d0:fc:40:3a:e0:45:76:7e:ff:
         e7:d3:73:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTSQrhY1YcGtaqDq7fxzW8sdcFOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5
OEY0MzMyMzAeFw0yNTEyMTgyMjA2MzZaFw0yNTEyMjIwMzA1MzZaMDMxMTAvBgNV
BAMTKEQ1RDIwMzY4M0Y3QURGNzhCOUVGNEEwRDNEMjhDMUQyQUI3OUI3MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHT06VvaOeNmEAR99/LslyXRPe
yby+G+u9IBgQhs8sFZN6J+MC+oZwrglaugiswJEyCOHoWAkGWvNqrk28KF61h8LZ
tq4zs6wO9adM9OiDSyF6Ng/G5LfOj8avSSfYb18WhIOqU4cSZwf2WFfcWKtGr478
EoS73NxsmfW2lIu8ZwgZWJwor63205Mkeeu6BRKEOqlGn0b4qEJ7c+ivIAFsFBZT
xBZzg5gJdPnsQxgZpREpMxixYG9GvmuwJmdC+4RZ9fk6CurfS+Qa7Zl1BH004oBA
/lE6e66o/OVW8dk4mucsFpbr0cF0WXKElxbF2UpEYVMpuJM+juJXXZfAVewbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1dIDaD9633i570oNPSjB0qt5tyowHwYDVR0j
BBgwFoAUdE+X4d8b1tN+bC6o8CwIhJj0MyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ODBkZGU5NC1lNWJlLTRkMjktYmIxMi00NWZiNWMxZDJjNzkvMC83NDRGOTdFMURG
MUJENkQzN0U2QzJFQThGMDJDMDg4NDk4RjQzMzIzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5OEY0
MzMyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi
MTItNDVmYjVjMWQyYzc5LzAvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4
ODQ5OEY0MzMyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHjL6fCN0AUljri0CZbPP3Wl0XPl8WJR486z
lG9Aoa/0L9N+if1EIe3Q6wOcq1HvFtpOMnGzlhEHJpNwl5yFIlNLHVikP7LKaM2k
kZxs65XvLLQQCG9higs5bXD7xYD2yo7GKzJ/desikl87Raxsi5aMlNDf9NrJZTKx
h94ZL9jzqZ5AsTx4U25mBsRS/tcZq+QfdQjZ7uAGb0AHehlT6kKCCx2hRxQTfc80
vtRym4ZpHMQBSSwfoZKffUclL6zvhPyBwgEn8AcwtRgIT1iKRKggJBvbcthKyKaJ
oxRZu6bkcpeUAPJRhv0GxaIaqRNyqX6+ldD8QDrgRXZ+/+fTcyI=
-----END CERTIFICATE-----
Generated at Fri Dec 19 03:06:19 2025 by rpki-client