This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
File:                     4F50242149BE32942675690F53BF8FE81E99F74D.mft (raw, json)
Hash identifier:          M20EHotTvnAhz7OseHRnG7X/5+6fLATzWYhO8INJsnw=
Subject key identifier:   81:EE:1C:56:93:A6:EB:43:D3:AD:B8:1D:25:67:BE:90:60:30:62:3F
Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
Certificate issuer:       /CN=4F50242149BE32942675690F53BF8FE81E99F74D
Certificate serial:       18BEFDE8BC00CA84A569F79CE012A6CDCE9CFA22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
Manifest number:          03A7
Signing time:             Sat 20 Dec 2025 06:31:05 +0000
Manifest this update:     Sat 20 Dec 2025 06:26:05 +0000
Manifest next update:     Tue 23 Dec 2025 14:11:05 +0000
Files and hashes:         1: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: t11QqdTM2g6bD0yLgDwQ54lubiayCOppdK4lspJl/fw=)
                          2: 4F50242149BE32942675690F53BF8FE81E99F74D.crl (hash: YHulE0WfG9v31s2fzOflVEw+mAXOU08HP8SkYADjdWs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
                          rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 14:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:be:fd:e8:bc:00:ca:84:a5:69:f7:9c:e0:12:a6:cd:ce:9c:fa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D
        Validity
            Not Before: Dec 20 06:26:05 2025 GMT
            Not After : Dec 23 14:11:05 2025 GMT
        Subject: CN=81EE1C5693A6EB43D3ADB81D2567BE906030623F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:d7:28:00:7b:64:71:48:11:81:ce:89:6b:
                    d6:36:86:10:be:88:5d:d8:f8:63:84:6f:06:4e:6f:
                    fe:fe:f2:61:46:ab:08:25:51:6f:37:e0:c9:2c:ad:
                    58:bc:f9:4e:69:e5:23:15:e1:f4:e0:a2:a9:95:6c:
                    12:5a:b0:9e:79:43:bc:41:1b:6c:69:14:32:99:61:
                    d2:4b:49:a8:07:a2:97:1c:a7:e6:1e:4a:9f:13:70:
                    f0:0b:9a:3b:14:0e:e1:73:5e:41:17:93:a3:73:67:
                    d0:27:af:b2:58:4e:bf:d3:59:20:0d:fb:d5:ea:ae:
                    c2:c8:4d:16:b4:8c:8c:1a:9f:28:32:6d:09:d4:20:
                    0a:82:ab:d8:cc:5e:e4:12:eb:e6:8c:cf:50:bb:4f:
                    9a:52:b4:43:0a:0c:79:97:39:82:84:c0:01:72:18:
                    49:2e:ea:29:8c:f5:4b:28:fb:09:13:a4:f5:f1:d3:
                    a1:50:56:f6:74:bf:8b:4f:92:be:c6:24:57:b6:e8:
                    76:ac:ab:37:97:27:f9:c1:92:2d:58:2f:ca:65:1b:
                    1b:a0:ca:97:43:a5:3e:56:05:29:58:ee:b6:7a:89:
                    fe:61:07:36:a6:4c:01:a7:d5:38:de:1d:8b:ef:81:
                    55:37:a3:cc:52:f4:89:6b:d0:a5:5b:dc:02:0c:1f:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EE:1C:56:93:A6:EB:43:D3:AD:B8:1D:25:67:BE:90:60:30:62:3F
            X509v3 Authority Key Identifier:
                keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f8:d2:82:8a:b8:d0:b1:72:63:8d:4d:d0:3f:0d:f3:64:5c:
         0f:ba:0d:2a:89:e8:65:06:dd:bc:48:67:bb:93:1e:9c:db:72:
         8b:c4:fc:4f:19:52:70:13:66:06:aa:47:aa:3a:2b:9d:d2:0f:
         90:04:8f:20:0f:93:15:da:14:f3:53:29:05:fe:80:e3:84:0d:
         cd:8e:e7:0d:48:e3:ee:5f:4d:10:e5:bc:6f:04:3f:35:ea:58:
         c5:22:ad:d3:91:75:69:52:73:f7:e1:96:9e:9a:a9:c6:ae:57:
         1a:8c:46:80:30:34:b1:d1:dd:9d:06:84:0e:bb:45:a7:3a:d5:
         4a:cd:a1:ad:a7:a0:b3:6a:65:3d:c5:0c:0f:8f:a5:b8:32:f3:
         c5:5f:dc:21:8e:86:6e:42:4b:3b:6b:da:a5:a5:3d:76:2b:4a:
         cc:3f:f2:2b:82:c0:7d:0e:f9:f0:6e:1d:ec:04:67:52:8f:84:
         83:51:66:d9:3d:45:05:5f:6a:80:f5:e3:aa:95:c1:6c:ea:4b:
         38:b0:83:f0:0a:56:a4:91:44:ac:bb:f2:82:5f:22:4a:ed:d9:
         db:1a:28:12:db:c1:f8:0e:3b:45:63:e7:10:77:0f:b3:d1:99:
         fc:97:ad:93:5e:2e:03:bf:ce:e9:91:33:a4:33:73:10:b2:1d:
         2b:ee:4f:d6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGL796LwAyoSlafec4BKmzc6c+iIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgx
RTk5Rjc0RDAeFw0yNTEyMjAwNjI2MDVaFw0yNTEyMjMxNDExMDVaMDMxMTAvBgNV
BAMTKDgxRUUxQzU2OTNBNkVCNDNEM0FEQjgxRDI1NjdCRTkwNjAzMDYyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkwdcoAHtkcUgRgc6Ja9Y2hhC+
iF3Y+GOEbwZOb/7+8mFGqwglUW834MksrVi8+U5p5SMV4fTgoqmVbBJasJ55Q7xB
G2xpFDKZYdJLSagHopccp+YeSp8TcPALmjsUDuFzXkEXk6NzZ9Anr7JYTr/TWSAN
+9XqrsLITRa0jIwanygybQnUIAqCq9jMXuQS6+aMz1C7T5pStEMKDHmXOYKEwAFy
GEku6imM9Uso+wkTpPXx06FQVvZ0v4tPkr7GJFe26HasqzeXJ/nBki1YL8plGxug
ypdDpT5WBSlY7rZ6if5hBzamTAGn1TjeHYvvgVU3o8xS9Ilr0KVb3AIMH7IbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUge4cVpOm60PTrbgdJWe+kGAwYj8wHwYDVR0j
BBgwFoAUT1AkIUm+MpQmdWkPU7+P6B6Z900wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTA5M2FkNi1iMTE1LTRmMTAtODhkNy02ZTU3ZGNmZDMyMjMvMC80RjUwMjQyMTQ5
QkUzMjk0MjY3NTY5MEY1M0JGOEZFODFFOTlGNzRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgxRTk5
Rjc0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwOTNhZDYtYjExNS00ZjEwLTg4
ZDctNmU1N2RjZmQzMjIzLzAvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhG
RTgxRTk5Rjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALD40oKKuNCxcmONTdA/DfNkXA+6DSqJ6GUG
3bxIZ7uTHpzbcovE/E8ZUnATZgaqR6o6K53SD5AEjyAPkxXaFPNTKQX+gOOEDc2O
5w1I4+5fTRDlvG8EPzXqWMUirdORdWlSc/fhlp6aqcauVxqMRoAwNLHR3Z0GhA67
Rac61UrNoa2noLNqZT3FDA+Ppbgy88Vf3CGOhm5CSztr2qWlPXYrSsw/8iuCwH0O
+fBuHewEZ1KPhINRZtk9RQVfaoD146qVwWzqSziwg/AKVqSRRKy78oJfIkrt2dsa
KBLbwfgOO0Vj5xB3D7PRmfyXrZNeLgO/zumRM6QzcxCyHSvuT9Y=
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:42:17 2025 by rpki-client