This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
File:                     49CDCA308C289D688C649C2303BECB3ED76B5054.mft (raw, json)
Hash identifier:          nDFfuhk9lzLlKxbLfEKzd9aqTfdbgXN/AN5+10EYmAg=
Subject key identifier:   A8:6F:99:F4:22:57:7C:10:B3:92:A5:11:42:D8:DD:6B:A3:F7:10:A2
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       7DB94DD36001565C66BD70C62D32C98E511AE4DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
Manifest number:          0540
Signing time:             Tue 23 Dec 2025 04:31:49 +0000
Manifest this update:     Tue 23 Dec 2025 04:26:49 +0000
Manifest next update:     Fri 26 Dec 2025 14:55:49 +0000
Files and hashes:         1: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: 2ttGNYSIno2YUVrl5iMDUeYoXTM+0/k8iShvnFHSZUg=)
                          2: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: 04eyxXbv9jngQdgYmmSjLsuCye8qiexJidy0wMhDXkQ=)
                          3: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: +XaFO38Q9dXCmJ85JQuHQCLrxReLtpZeqTNCnHE/ld8=)
                          4: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: 6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=)
                          5: 49CDCA308C289D688C649C2303BECB3ED76B5054.crl (hash: Gs1/g2/yz1Yx7/JW+epJp+QqsDbgkkUfYlzEz5SAxhA=)
                          6: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: lh1ua1Y9ZtE2dDW45ObJ8+6IvX0lmoDB+fa6NG7jmTA=)
                          7: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: gEYK+18FP+7kBMfZJoRXCpV612TXysZxOtU9C0Gw8cc=)
                          8: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: GUJzG7I21c6XIuzE+3MXjSNzND91626bZhTZv88Tj9U=)
                          9: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: 38apIlW13UqRkBJC0AvLF1JxLSXx4uzPA7tj9m0g40E=)
                          10: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: 6lzTZpzOtbXaisX77lh3zqfu4RoYr39Ke230rMF+BLA=)
                          11: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: PNF09SxEelapDmbcZhAv/JlSjlnccRnMVMsb6Vjd5Cs=)
                          12: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: 6VuJVE5V+cRzw0YC3j26AjnB200tu5ynyJ2PlMkHwdk=)
                          13: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: VOPS8e3VH0l6ubQIOcds4q8+0PaehGxHMdByhPPUMRk=)
                          14: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: Ha3WoHQ/zP70el2yWIeTgLkGHqYuIOHL7pH96V5JFfw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 14:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b9:4d:d3:60:01:56:5c:66:bd:70:c6:2d:32:c9:8e:51:1a:e4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Dec 23 04:26:49 2025 GMT
            Not After : Dec 26 14:55:49 2025 GMT
        Subject: CN=A86F99F422577C10B392A51142D8DD6BA3F710A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:ce:bb:2a:fd:2e:a6:27:8f:ad:53:60:bb:
                    aa:d5:98:c8:fb:d7:2c:ad:88:9c:25:47:fb:7f:5e:
                    28:9f:8b:9d:31:e3:a0:2e:41:80:f4:9b:ed:74:43:
                    48:88:69:1f:af:41:f5:9e:e0:7e:52:4b:89:6b:34:
                    d6:d0:86:b0:76:1c:71:15:d4:54:c0:45:2d:e0:78:
                    67:5d:f0:f3:75:00:db:ff:6c:e3:67:e6:a9:2f:90:
                    9f:9a:74:49:ed:7b:c0:17:78:ea:2e:7c:f9:37:ae:
                    3f:56:27:b3:63:8d:c6:f3:58:e4:0c:4c:1c:6b:5e:
                    12:ac:f3:1d:37:c1:55:86:b6:9c:1e:69:34:29:bb:
                    22:0f:73:d5:bd:9f:8f:17:7b:cc:d2:a0:ba:02:8f:
                    30:b2:0f:f0:0d:fe:f7:de:fc:49:85:ed:a5:bf:7d:
                    c8:03:1f:6b:f8:e6:c7:32:5d:4c:0b:07:7d:3b:f6:
                    3d:a9:d6:b3:fe:ca:ea:dc:0a:58:09:2b:26:ea:24:
                    24:9d:4b:ac:a9:11:fb:45:3d:ee:5d:ca:21:ae:4c:
                    97:21:b1:aa:43:21:c5:d3:a6:7e:7e:64:73:b3:92:
                    2d:d1:b7:a5:4b:61:9d:f4:bc:fc:d6:e0:d6:e5:af:
                    df:46:f7:05:25:f7:23:a5:cf:3e:ff:0d:97:1b:32:
                    2a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6F:99:F4:22:57:7C:10:B3:92:A5:11:42:D8:DD:6B:A3:F7:10:A2
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:aa:25:5f:77:6b:21:82:04:1d:be:43:e9:17:3f:b7:5c:42:
         9c:2a:7e:c0:63:17:4e:d2:7f:32:03:92:89:b2:05:8c:57:a6:
         78:28:01:37:77:95:4f:cf:33:db:a2:4c:63:e2:51:1a:f6:69:
         b5:d7:36:ca:d6:45:71:a1:63:75:73:8b:fb:d8:24:80:37:24:
         17:4f:bd:33:f7:b2:8a:13:a2:ef:50:2f:e8:6f:bd:0b:76:44:
         93:42:69:53:4a:3c:48:8d:37:e3:c3:69:5e:a0:4f:5e:f5:37:
         ed:12:c9:01:74:be:bd:33:5d:6d:61:d6:f5:2b:da:12:49:5d:
         83:77:26:a8:c0:9d:f6:86:80:c9:67:51:9d:be:4e:d1:8e:6a:
         af:ef:15:d2:f6:ab:b4:60:1d:c2:c8:35:50:a6:c4:47:66:86:
         a6:18:93:51:2c:b4:a2:01:4a:96:aa:da:ab:c6:8d:1b:c3:a0:
         0b:18:a9:e1:1c:66:60:a9:90:cb:11:4b:4c:17:46:02:b2:15:
         85:a3:96:27:1a:24:a6:45:1f:81:0f:ba:89:96:1c:fd:78:98:
         4d:a4:fc:9f:f1:7a:0e:aa:07:09:4c:33:c0:fb:a5:8d:a2:7d:
         c1:2e:91:b1:01:10:1a:d8:da:63:cc:aa:f8:9c:01:61:94:2b:
         19:47:dd:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfblN02ABVlxmvXDGLTLJjlEa5NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE
NzZCNTA1NDAeFw0yNTEyMjMwNDI2NDlaFw0yNTEyMjYxNDU1NDlaMDMxMTAvBgNV
BAMTKEE4NkY5OUY0MjI1NzdDMTBCMzkyQTUxMTQyRDhERDZCQTNGNzEwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Cs67Kv0upiePrVNgu6rVmMj7
1yytiJwlR/t/Xiifi50x46AuQYD0m+10Q0iIaR+vQfWe4H5SS4lrNNbQhrB2HHEV
1FTARS3geGdd8PN1ANv/bONn5qkvkJ+adEnte8AXeOoufPk3rj9WJ7NjjcbzWOQM
TBxrXhKs8x03wVWGtpweaTQpuyIPc9W9n48Xe8zSoLoCjzCyD/AN/vfe/EmF7aW/
fcgDH2v45scyXUwLB3079j2p1rP+yurcClgJKybqJCSdS6ypEftFPe5dyiGuTJch
sapDIcXTpn5+ZHOzki3Rt6VLYZ30vPzW4Nblr99G9wUl9yOlzz7/DZcbMiqBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqG+Z9CJXfBCzkqURQtjda6P3EKIwHwYDVR0j
BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD
Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC
NTA1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWViOThjZWQtYWYxOC00YmZmLWFk
NzEtNzNkMmIwYzlkOGE5LzAvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNC
M0VENzZCNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEqqJV93ayGCBB2+Q+kXP7dcQpwqfsBjF07S
fzIDkomyBYxXpngoATd3lU/PM9uiTGPiURr2abXXNsrWRXGhY3Vzi/vYJIA3JBdP
vTP3sooTou9QL+hvvQt2RJNCaVNKPEiNN+PDaV6gT171N+0SyQF0vr0zXW1h1vUr
2hJJXYN3JqjAnfaGgMlnUZ2+TtGOaq/vFdL2q7RgHcLINVCmxEdmhqYYk1EstKIB
Spaq2qvGjRvDoAsYqeEcZmCpkMsRS0wXRgKyFYWjlicaJKZFH4EPuomWHP14mE2k
/J/xeg6qBwlMM8D7pY2ifcEukbEBEBrY2mPMqvicAWGUKxlH3Tg=
-----END CERTIFICATE-----
Generated at Thu Dec 25 00:55:44 2025 by rpki-client