This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
File:                     D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json)
Hash identifier:          FB9WIO0C7K0QthWi2Sg30GxK5NtqbemknDcGGDvT5yU=
Subject key identifier:   7F:02:2D:D3:DA:0E:CD:B3:62:66:74:17:F7:74:27:25:B7:BC:31:6B
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Certificate issuer:       /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial:       69995395FFF88315CCACF30CE5A80ACE3B866D3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
Manifest number:          01FC
Signing time:             Thu 18 Dec 2025 06:21:13 +0000
Manifest this update:     Thu 18 Dec 2025 06:16:13 +0000
Manifest next update:     Sun 21 Dec 2025 11:49:13 +0000
Files and hashes:         1: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 2I1hpf1XM01hpFE4apAQaCDZ2SJv/6pMmkxZHdmPTWg=)
                          2: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: q2HyhqMcqNKr/1kOvWeC7Bv0LZJy34QkHpHUyM3pSpc=)
                          3: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: 34A2BUSShUZPVIfqgS6asXgjQt3veKA7gOq2ToaSSKg=)
                          4: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=)
                          5: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: Pkdf7SsfkpbiJuE6kdJ40FkL/ss5mA3yBuB75QVgOO8=)
                          6: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: o9JWChuMppyDlwbbP2wl7a1BlqxO7U1pMNyySwQnepQ=)
                          7: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: 6MS+hpY8AAAW2vT3UGxha7ncda+Mv46TSI1kZZNVt4E=)
                          8: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: CFppjbu+j9vN8xa/dDTxQelhICtYUCoA83bushfIr2o=)
                          9: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
                          rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 11:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:99:53:95:ff:f8:83:15:cc:ac:f3:0c:e5:a8:0a:ce:3b:86:6d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
        Validity
            Not Before: Dec 18 06:16:13 2025 GMT
            Not After : Dec 21 11:49:13 2025 GMT
        Subject: CN=7F022DD3DA0ECDB362667417F7742725B7BC316B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:c5:cd:6f:60:dd:c4:6b:fc:23:e5:f0:a6:
                    2e:fc:d8:6f:d0:cd:ed:0c:16:01:0a:ae:92:ee:97:
                    46:62:77:1f:cd:c2:8e:b4:16:63:26:5a:11:94:11:
                    5c:ef:08:d6:d2:fd:15:90:ed:a3:77:bf:20:3f:3a:
                    61:2e:f9:f3:66:72:e6:46:49:71:29:c8:b7:1e:61:
                    be:95:a6:11:e1:c8:1c:18:84:9b:32:d2:e0:e1:1d:
                    da:97:d9:f5:23:b1:58:91:a0:ab:9d:15:5f:8e:45:
                    ac:d3:f4:f5:c0:31:23:3e:e2:58:f9:b5:49:1b:76:
                    3a:b9:94:3c:09:ba:22:e3:f9:34:2e:46:06:b6:0a:
                    6a:c0:d4:5d:39:11:82:11:4a:af:74:ae:f4:50:00:
                    b4:96:99:da:ba:39:64:ef:a7:22:a5:b7:2c:39:3e:
                    3e:1f:16:65:e5:1b:b5:57:55:e9:a2:cb:d2:11:bf:
                    a1:31:a4:bd:09:d7:a2:31:ae:2b:0b:64:a6:c2:23:
                    ba:08:3a:fe:89:5e:68:16:b9:6c:44:31:e9:f2:36:
                    2b:be:90:24:ed:bc:07:d0:55:ad:9f:3f:09:91:4a:
                    40:4a:63:f5:a9:af:2e:ff:79:ee:68:97:ea:06:95:
                    7f:91:5d:b4:87:62:da:47:c2:f4:08:8f:91:f5:42:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:02:2D:D3:DA:0E:CD:B3:62:66:74:17:F7:74:27:25:B7:BC:31:6B
            X509v3 Authority Key Identifier:
                keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:c2:6d:01:b2:bb:78:4e:f1:11:82:70:4c:00:2e:09:63:
         21:84:78:2f:74:ea:06:1b:2a:ea:94:4e:0d:e4:be:a2:ec:04:
         b3:a1:88:72:52:04:e1:56:7a:04:7f:ec:e1:d8:ff:88:5f:b0:
         18:84:0e:65:0f:22:37:75:ff:9e:de:52:98:59:3c:aa:f0:89:
         15:8c:e3:88:6e:ba:04:e6:75:06:a0:ec:97:73:a3:f1:00:a8:
         6b:12:aa:14:fa:c0:f0:cb:86:e1:7e:43:7e:68:1a:a1:3e:90:
         fe:b6:6f:c1:14:04:19:06:03:03:44:3b:91:d9:93:f5:a3:00:
         13:cf:8f:76:8f:fd:25:b8:ad:d5:f7:d7:06:45:fa:13:e7:0e:
         d7:de:61:2a:ce:10:c6:ab:0f:1d:72:f7:50:f7:1a:cb:a2:8c:
         8c:b3:29:7c:48:e4:49:43:d7:88:bb:58:d3:1c:ac:b7:1e:f7:
         db:fa:e0:0a:25:ff:4a:77:de:99:5d:8d:83:8b:2e:ec:03:d0:
         57:ae:f8:e9:be:89:25:67:8f:b5:4d:71:aa:09:41:19:48:1d:
         1f:ba:d2:75:eb:b2:5f:72:a7:48:af:3a:2f:2b:0c:58:4c:83:
         79:e6:3e:8c:1d:fd:98:0b:2c:61:8c:e1:b6:87:25:56:9c:ff:
         ad:68:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:18:43 2025 by rpki-client