This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          Xvd0IqAcrNn5oGW7O4vyboMh5qb5tdPrG8Erg786Q08=
Subject key identifier:   37:AC:F1:BA:19:C8:65:83:FB:BE:92:87:6F:95:61:91:87:85:26:E5
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       64F6911AD22601049A08A725588202648519FBF3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          0543
Signing time:             Mon 22 Dec 2025 19:33:14 +0000
Manifest this update:     Mon 22 Dec 2025 19:28:14 +0000
Manifest next update:     Fri 26 Dec 2025 03:18:14 +0000
Files and hashes:         1: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
                          2: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
                          3: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
                          4: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
                          5: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: tRJhTXXnrqK5XjBkLtAVhypiPy4PCZmwclaztmWYdmQ=)
                          6: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
                          7: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
                          8: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
                          9: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
                          10: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f6:91:1a:d2:26:01:04:9a:08:a7:25:58:82:02:64:85:19:fb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Dec 22 19:28:14 2025 GMT
            Not After : Dec 26 03:18:14 2025 GMT
        Subject: CN=37ACF1BA19C86583FBBE92876F956191878526E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:47:e7:a9:38:d1:3c:b4:36:62:fb:c0:ed:
                    40:7c:07:9f:5c:22:c9:f5:fd:f2:db:bd:ca:8b:d5:
                    6c:5c:ac:12:a0:78:20:e2:47:14:46:89:f7:e4:7a:
                    57:77:49:64:ee:f5:1f:39:52:94:ee:00:c6:0b:d1:
                    86:e4:e5:b8:16:c1:31:68:f7:4a:19:30:33:a9:fe:
                    d7:a4:ec:d1:9f:db:ce:bf:63:dc:e3:67:be:90:22:
                    59:01:27:54:19:41:0e:5d:23:d7:13:9a:c2:25:9d:
                    65:61:61:e7:d0:6d:a2:47:9f:8a:8c:05:a7:b4:b8:
                    c7:38:f6:a7:5e:f2:35:4a:75:1b:dd:8d:21:2e:53:
                    37:88:e4:de:e2:c6:0e:5b:90:7c:a0:b2:51:a8:db:
                    7a:33:e1:5e:b2:99:bf:9f:74:72:19:8d:61:a9:6d:
                    45:b5:e9:b2:60:04:0e:37:fb:21:01:c8:84:9d:d9:
                    d7:01:04:5b:44:03:63:57:07:1f:2d:b7:b6:e5:86:
                    4c:61:63:b7:b1:63:47:94:7b:e3:57:b0:31:68:ce:
                    92:b0:18:e0:de:cd:d3:a0:3d:43:82:11:ac:f9:f2:
                    d8:89:4e:7e:2c:2c:9f:28:20:ae:e3:aa:86:34:90:
                    4f:73:f2:a7:af:ed:61:d0:6b:62:d1:e3:0b:28:d4:
                    4b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:F1:BA:19:C8:65:83:FB:BE:92:87:6F:95:61:91:87:85:26:E5
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:99:62:a6:65:0a:19:e0:11:2a:05:b9:ac:f4:bf:5d:f6:
         85:b1:6d:43:ba:e4:b9:d8:ed:ed:54:ed:d0:8a:12:9e:16:03:
         48:49:ab:32:ae:30:b3:98:bb:c5:0f:ad:ea:c3:2f:4e:aa:6c:
         78:54:05:e2:3e:48:e6:a8:41:90:58:49:9c:6f:ed:3c:cd:d3:
         5a:3c:17:05:6f:e1:08:2b:b7:d2:da:4c:83:b0:00:74:55:aa:
         a3:aa:e8:06:69:e5:33:18:34:c7:57:8a:a9:30:ef:3e:78:47:
         37:ff:ad:af:10:24:a1:cb:e8:98:ef:28:54:d5:1a:28:c9:56:
         3b:59:f4:6a:a5:39:33:9c:59:dd:93:9a:83:7c:0b:45:3b:69:
         4e:ca:b6:bc:6c:91:6b:7c:ec:44:2a:ac:58:a0:33:a1:bf:a0:
         eb:28:dc:ba:8d:67:ca:da:44:06:22:c5:1e:38:d0:72:ad:c5:
         1e:e5:22:05:a1:7f:20:43:7a:a5:07:57:e5:81:9f:97:78:6d:
         3f:91:8a:24:ac:ea:1c:6e:e5:1c:f6:1c:61:4d:03:01:cb:2c:
         bb:68:59:f5:12:1b:20:58:92:59:c2:ff:ab:3f:58:d8:3b:b4:
         80:f2:8d:d1:a4:6d:f3:7e:66:23:91:11:d0:ba:35:4d:9a:9e:
         5f:41:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 04:48:50 2025 by rpki-client