This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
File:                     C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json)
Hash identifier:          /VsQXtUB4Vxkqlg/A69baEEiiGpMhrPmjwlNgXtKGHM=
Subject key identifier:   EE:0B:35:DB:57:B4:9A:88:CF:5D:B5:FE:D6:0A:53:7C:DA:0C:6C:17
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       6B6E34F7A0CC17680460E932CE027DAE11D544C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
Manifest number:          039D
Signing time:             Sat 20 Dec 2025 05:32:53 +0000
Manifest this update:     Sat 20 Dec 2025 05:27:53 +0000
Manifest next update:     Tue 23 Dec 2025 13:53:53 +0000
Files and hashes:         1: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: s1sd22aoOx7eVnGzzPZfaCEnUeLM+0ey0B/Ng0FNQzE=)
                          2: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: xUdwOu6GtGdzxItV3iA1A5hAD2Ey5dnmQ19p3DcRu10=)
                          3: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: /wV95wT81KDKro/jg/Buo94wrPpWyGBGso5Gssi1qLc=)
                          4: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: r1xG0EZ+diPvqjo3maUSgSdAXF/PbzNzYbElj3DkPms=)
                          5: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: Giz7os34qxdcaeyi2EtKcr2LS4LsMlTnJlV8pqSpEa4=)
                          6: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: q+4LJqnEtPR8u/O7vXDxEMWbUC+3pBdRVabjnpWaIW8=)
                          7: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=)
                          8: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=)
                          9: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: YtgOnaLw1bxl1wUrgM2neAz8Qf57lo3CvBW85nMyhJg=)
                          10: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: OxhA3uXfrHkYk9hpK8Kprlt50rQpJAHKf4/psbChj9g=)
                          11: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA=)
                          12: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU=)
                          13: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: YfbB3z09y4MNoTi1HjR4+z9IdxMYyBM89bj8p3WiTw4=)
                          14: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 8c4EuCrXR9USSkoSueUSWcZF3Vya08SYcqUOI9OfmOY=)
                          15: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: pMSHdCGU3wSWW64VJ8Q+XCnRMyb8p81kTgkpP+Gwk14=)
                          16: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: f0QuTjuXU3+PMwtOvyLhhE3F7fk0wnPs64pd29FWWiY=)
                          17: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=)
                          18: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: Kqb1Ihb2CECXEmdzbETSDgaCFS4nZqV2eayTu8iFGJM=)
                          19: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=)
                          20: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: TzoAuOSZ6mXbYFD7JpUog8X7cU+aL4pu97WqgSsQlww=)
                          21: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: VEDwBMu7e2mzL/h9CHSnsP+W8nFPBXkEhV06ak5Sn4k=)
                          22: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: TPAjUCjHJnWAtWeWIogMrgqyIk1DQzed8sLTl5HA/OY=)
                          23: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: BEXTqeRuOYeCds/GtbXckcTCx17EaQiOC1/BtPp70DI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 13:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6e:34:f7:a0:cc:17:68:04:60:e9:32:ce:02:7d:ae:11:d5:44:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec 20 05:27:53 2025 GMT
            Not After : Dec 23 13:53:53 2025 GMT
        Subject: CN=EE0B35DB57B49A88CF5DB5FED60A537CDA0C6C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:e6:72:f8:d6:11:9b:0f:da:53:ec:7a:ca:
                    84:cd:8d:5b:3c:c3:68:ff:78:d9:33:ed:76:9a:1c:
                    1c:18:b6:33:bd:e2:26:44:3d:a6:ca:13:b8:d5:7a:
                    43:8e:fb:01:7b:b4:28:42:ba:c4:ef:52:f2:95:9a:
                    20:fe:7f:d6:18:7f:94:08:9c:3c:36:d1:b5:be:b4:
                    66:3d:df:1e:24:ae:79:9f:26:dc:f7:0f:5d:01:7a:
                    20:be:8f:09:6a:12:e3:e6:2f:a3:f2:c1:11:85:d2:
                    f6:ed:6d:ec:e1:75:f3:f7:e6:50:0c:93:af:c7:a3:
                    c9:ac:6d:f2:e8:6a:df:40:8b:66:3e:17:9e:2d:e8:
                    59:60:a7:f2:b6:3d:36:a3:a8:68:85:da:25:00:e1:
                    b2:83:53:37:07:7d:26:22:7c:29:e3:f0:5e:87:63:
                    dd:ef:39:61:93:17:34:2e:ec:f6:8e:77:5b:da:23:
                    6a:69:b2:56:45:49:90:2f:eb:5c:9a:44:1b:54:d2:
                    f9:9d:dc:3e:35:b1:8a:79:2b:47:2b:f1:78:6a:3d:
                    8a:bf:5c:d1:8d:ef:21:ed:2b:c4:16:eb:dc:02:a1:
                    6f:e1:f3:94:02:75:ab:84:3d:9b:c1:10:cb:81:08:
                    3e:11:8a:6d:ea:cc:9d:4d:1c:77:0e:8b:36:9b:e4:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:35:DB:57:B4:9A:88:CF:5D:B5:FE:D6:0A:53:7C:DA:0C:6C:17
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:06:aa:cf:70:12:d5:f1:4c:56:1c:bd:5e:5e:95:36:15:e2:
         d0:79:72:89:61:f5:8a:81:3e:8a:b8:7a:c0:06:3f:00:b0:81:
         3a:30:de:e2:e3:d7:3a:39:3f:c7:c1:8c:d0:64:4e:c2:1c:07:
         39:49:25:c0:d6:20:01:82:77:65:09:8e:b9:ee:40:f5:23:a5:
         58:16:95:42:e5:78:88:6b:f1:d1:b0:91:6a:08:12:81:24:34:
         bb:a6:36:32:d3:74:40:2c:8f:f6:dc:e4:65:24:fc:9b:5d:c2:
         a6:7f:df:bd:70:81:79:49:a1:ce:d9:c4:3d:a4:04:a6:36:2c:
         a0:eb:bb:a4:fb:7a:75:d8:06:7a:26:fc:11:f2:59:60:1c:51:
         fa:14:71:b8:91:a2:9f:b8:56:7c:a8:62:65:03:a7:73:fe:d1:
         3d:18:fc:00:e4:e0:47:81:f4:e8:af:81:b9:69:d4:f7:7b:0d:
         60:f7:f0:46:29:36:98:da:e2:13:cb:70:c0:98:4b:11:fa:32:
         98:b2:4d:38:12:f5:da:9a:fa:4c:d0:3a:be:9c:5b:be:72:0e:
         4b:97:79:8c:00:96:c1:c0:b0:94:cc:1b:dc:82:03:5d:62:cc:
         b5:06:52:ab:ca:af:b1:da:5f:25:61:1a:62:40:82:0e:26:d5:
         d6:68:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:03:11 2025 by rpki-client