This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
File:                     19093F7761A9E337D03405604750BFD4ADC2121E.mft (raw, json)
Hash identifier:          azfOOh4NOiMe+JCcxz1QYoZLlrLpk/UgcSt9dfCPX8Q=
Subject key identifier:   C7:44:21:39:63:CA:C2:58:B3:E3:E3:31:0A:70:00:5A:43:A9:86:E1
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       0E5BD77011B965EBB5E052286037D07D8EC6B917
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
Manifest number:          0315
Signing time:             Sat 20 Dec 2025 20:12:24 +0000
Manifest this update:     Sat 20 Dec 2025 20:07:24 +0000
Manifest next update:     Wed 24 Dec 2025 05:05:24 +0000
Files and hashes:         1: 3130332e3130362e3231362e302f32342d3234203d3e20313337333239.roa (hash: iXT6UN+/y7TpwDVLtWSqY1anfK2nC6SOVMT2pIsEPoE=)
                          2: 3130332e3130362e3231382e302f32332d3233203d3e20313337333239.roa (hash: Yc0O5+qtHM8Cg9+HmRmWj5NMgYm36//r/nNqyuQykHU=)
                          3: 323430323a343834303a323030333a3a2f34382d3438203d3e20313337333239.roa (hash: yu7VVYTmwbbAphSKuxMMCnUsC1g5eRXchMRdKeOy1S8=)
                          4: 323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa (hash: LO6MPJjKWemlUPi4+oxONCOZfPyfc9fE6EVbhP2nAoE=)
                          5: 19093F7761A9E337D03405604750BFD4ADC2121E.crl (hash: HvGOnGBjQOjxeowhDQO6dvfnNuUE1ELTrpTswy3DmUA=)
                          6: 323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa (hash: Fg5IQfmN/uV6Pq+L0Hms1sr7WpBiC72ZjiTkhle8JAM=)
                          7: 323430323a343834303a3a2f33322d3332203d3e20313337333239.roa (hash: wDyjwgu3ZYcBbSHiE5VOmyIDo+GYNsdEYGrlAlAWtFg=)
                          8: 3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa (hash: WewuJXzVlBORg3zM7f78L++639jfr5b/XQq8c9iPr1A=)
                          9: 3130332e3130362e3231362e302f32332d3233203d3e20313337333239.roa (hash: p9SyZFa3x7f0walZnnGPqPIWth/R5l5VwkN9290zRYs=)
                          10: 3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa (hash: O1F6UXnN65dQGo+3dl4TvwFmm4QtbYg1z3tQh7ze/pQ=)
                          11: 323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa (hash: 37dKtLWLzY2g+0icDDx79+9se08OIglhTc54oaTUF8U=)
                          12: 323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa (hash: 9NzWf8ibKIq24emIKFXn5dlc1dEEoPdQWvq5hw5Txm8=)
                          13: 3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa (hash: q4WFCaiQmAzAaQj4nP7IWYXfOXbnr1y6bJzPyRDDyHU=)
                          14: 323430323a343834303a323131333a3a2f34382d3438203d3e20313337333239.roa (hash: v8N5W4vBGPF8ifVtPYc3kUKB1CF/32VLR1fOCHQJLpI=)
                          15: 3130332e3130362e3231382e302f32342d3234203d3e20313337333239.roa (hash: HArV7crweqyhUpJ40R33MPv7QYuuFWagsggCP8zgV0I=)
                          16: 323430323a343834303a313a3a2f34382d3438203d3e20313337333239.roa (hash: eLhY6o5wd0LhUORB13U7rBVGOG36K01kVeOb5OLuofg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 05:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5b:d7:70:11:b9:65:eb:b5:e0:52:28:60:37:d0:7d:8e:c6:b9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Dec 20 20:07:24 2025 GMT
            Not After : Dec 24 05:05:24 2025 GMT
        Subject: CN=C744213963CAC258B3E3E3310A70005A43A986E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bb:89:55:c1:65:b8:7b:f8:44:94:b5:da:db:
                    ab:e8:18:b3:17:6a:8e:33:bf:98:b2:be:11:2d:5a:
                    e7:3c:0c:8c:15:8b:df:44:e3:d4:fa:66:ba:21:de:
                    ed:ee:2a:6c:ed:97:8e:c0:d6:a4:e5:a9:8f:ef:92:
                    0d:70:1d:cc:ae:d6:db:2a:22:a6:6c:cf:a8:ab:03:
                    76:16:3a:b4:ce:0c:a5:eb:bf:00:aa:54:68:ec:08:
                    14:72:93:b0:6d:2a:46:ce:8b:2d:0b:ec:4a:b7:ef:
                    7f:93:ce:d8:15:eb:4c:03:20:84:c5:71:d7:16:c9:
                    06:2b:79:0e:fb:22:9d:2c:e1:1a:4b:ab:22:d8:4f:
                    a5:ec:36:1f:b0:a2:99:c9:45:80:21:ba:d1:de:34:
                    b8:74:d8:6f:ec:89:98:53:a1:18:74:59:67:8f:d2:
                    05:29:0d:e9:24:70:6b:84:c9:32:c2:99:a1:83:2c:
                    fc:8c:54:f0:ba:c3:44:a3:18:96:45:c3:bb:e0:90:
                    2b:50:5c:30:a2:16:a3:99:40:f9:e6:43:99:1c:c2:
                    27:bf:2e:cc:d0:99:cc:a5:58:59:f8:70:5a:af:1c:
                    74:1d:bf:f7:37:35:15:52:b7:b9:ad:01:f4:97:55:
                    0d:c6:0f:98:c9:2a:c0:ee:d7:b4:02:43:42:4f:84:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:44:21:39:63:CA:C2:58:B3:E3:E3:31:0A:70:00:5A:43:A9:86:E1
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:79:49:c1:e8:9b:0b:77:df:ae:b4:d7:d6:75:d3:19:cc:
         97:c2:78:7b:5b:01:d9:fd:82:c3:44:61:0f:a9:c7:a9:8e:b1:
         7a:7a:fe:cf:c7:a5:f6:d6:9d:87:c4:ca:5a:f3:5f:04:e2:2a:
         78:de:05:85:41:9f:8f:c3:0a:42:d8:59:89:73:d1:14:30:ab:
         bb:4b:d0:76:f3:be:b1:44:fe:5a:6b:54:03:fd:68:ac:03:dd:
         c4:95:7f:58:f0:d3:ea:57:a4:42:89:12:10:0a:fb:ce:4a:e4:
         86:48:e1:78:6f:47:19:96:ce:67:89:32:aa:6d:f7:29:90:c4:
         d3:e3:cc:c0:b0:2e:96:16:f1:55:ab:cb:b4:21:8d:a2:cd:bf:
         3b:f7:4e:66:5f:7d:06:bc:a2:38:a7:1d:bb:49:25:41:c8:cf:
         c8:11:03:a3:35:b1:9d:7d:53:0a:d6:51:03:f4:e8:81:38:04:
         35:58:cc:3e:36:95:29:e2:b3:57:72:e5:ac:81:d1:fc:a8:3d:
         3f:2b:78:63:4f:10:8c:c5:8f:fc:58:87:fe:23:25:0d:1d:c3:
         f4:12:35:6b:d2:48:b0:79:39:f5:21:3b:a8:14:c3:c0:e4:1d:
         7a:0d:07:aa:ac:c0:6e:2d:2c:b2:e6:f1:18:82:5f:e8:8c:86:
         c7:4b:79:88
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDlvXcBG5Zeu14FIoYDfQfY7GuRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB
REMyMTIxRTAeFw0yNTEyMjAyMDA3MjRaFw0yNTEyMjQwNTA1MjRaMDMxMTAvBgNV
BAMTKEM3NDQyMTM5NjNDQUMyNThCM0UzRTMzMTBBNzAwMDVBNDNBOTg2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlu4lVwWW4e/hElLXa26voGLMX
ao4zv5iyvhEtWuc8DIwVi99E49T6Zroh3u3uKmztl47A1qTlqY/vkg1wHcyu1tsq
IqZsz6irA3YWOrTODKXrvwCqVGjsCBRyk7BtKkbOiy0L7Eq373+TztgV60wDIITF
cdcWyQYreQ77Ip0s4RpLqyLYT6XsNh+wopnJRYAhutHeNLh02G/siZhToRh0WWeP
0gUpDekkcGuEyTLCmaGDLPyMVPC6w0SjGJZFw7vgkCtQXDCiFqOZQPnmQ5kcwie/
LszQmcylWFn4cFqvHHQdv/c3NRVSt7mtAfSXVQ3GD5jJKsDu17QCQ0JPhAPnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUx0QhOWPKwliz4+MxCnAAWkOphuEwHwYDVR0j
BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx
QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy
MTIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTE3YmQ1MDItNDJjMi00MDBkLWEy
YWQtZDE3NTQzNjVhNDVkLzAvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJG
RDRBREMyMTIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACxleUnB6JsLd9+utNfWddMZzJfCeHtbAdn9
gsNEYQ+px6mOsXp6/s/HpfbWnYfEylrzXwTiKnjeBYVBn4/DCkLYWYlz0RQwq7tL
0HbzvrFE/lprVAP9aKwD3cSVf1jw0+pXpEKJEhAK+85K5IZI4XhvRxmWzmeJMqpt
9ymQxNPjzMCwLpYW8VWry7QhjaLNvzv3TmZffQa8ojinHbtJJUHIz8gRA6M1sZ19
UwrWUQP06IE4BDVYzD42lSnis1dy5ayB0fyoPT8reGNPEIzFj/xYh/4jJQ0dw/QS
NWvSSLB5OfUhO6gUw8DkHXoNB6qswG4tLLLm8RiCX+iMhsdLeYg=
-----END CERTIFICATE-----
Generated at Mon Dec 22 04:19:25 2025 by rpki-client