This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          rZ0ow0jMaq2oQKp5qG1RknPC+MCgDDZQ09XpeSIvxLo=
Subject key identifier:   B8:B5:27:90:01:9C:C6:72:09:68:93:60:BE:11:E1:F1:26:F3:CF:30
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       4764D5E5962E740F14871A0FAA8C030730A1FD09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          028A
Signing time:             Sat 06 Dec 2025 07:51:56 +0000
Manifest this update:     Sat 06 Dec 2025 07:46:56 +0000
Manifest next update:     Tue 09 Dec 2025 16:21:56 +0000
Files and hashes:         1: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: qNzsGiJwf7XGjGP4j+CDhg7oJnuuTy/kX7unl+wQ3hg=)
                          2: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: 1S76/HrjUbBiAn5ZM34FLqmHD8p3H4UjIcnlsDjI5eo=)
                          3: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: I2GxvF+hElG1yAh007aM/yMEViDm+JYfJmwRWj1ftM0=)
                          4: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: bCrGS2h+/zPAS+2DepWngEarE7NIIMpAdATexMqAfyQ=)
                          5: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=)
                          6: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=)
                          7: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: Sm/MByCUVOhu6ULq3sIzfHgpRtekl1ETdukmwPQMprw=)
                          8: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=)
                          9: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=)
                          10: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=)
                          11: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: 8DZyaUiRoOO65NUaONfqFvKdCMf6lQxmDXD3kWuEgfI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:64:d5:e5:96:2e:74:0f:14:87:1a:0f:aa:8c:03:07:30:a1:fd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Dec  6 07:46:56 2025 GMT
            Not After : Dec  9 16:21:56 2025 GMT
        Subject: CN=B8B52790019CC67209689360BE11E1F126F3CF30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:45:ea:21:af:03:a3:12:de:f4:14:44:17:
                    9d:98:89:50:27:3c:de:23:fc:62:ce:58:f3:ba:9b:
                    6b:90:f8:ad:af:23:61:96:19:b6:1a:e0:98:70:8e:
                    20:be:cb:f4:bd:b9:5e:f6:e1:37:e1:aa:be:2f:4f:
                    31:91:a3:e2:94:db:c0:76:c6:a8:da:4d:4a:da:d7:
                    10:6b:a6:94:9b:2d:8e:01:3d:f4:f1:73:28:94:25:
                    23:53:0d:8a:d5:9d:38:3e:be:54:f1:3e:2e:a7:59:
                    66:da:43:6f:89:70:b1:91:39:a0:13:d5:5b:36:04:
                    ee:29:a1:47:56:5f:a0:60:35:6c:f2:a4:32:89:a2:
                    29:99:73:47:61:88:92:e3:01:8d:f1:96:e4:a1:af:
                    53:c4:e5:bc:c8:46:d1:50:30:de:9c:70:7c:63:af:
                    f9:36:f1:41:69:83:a3:8d:0a:fe:14:30:e1:1a:63:
                    36:8a:c1:bd:47:ba:ac:84:5e:b4:6b:45:e0:4d:27:
                    d2:c8:4b:09:de:07:09:c4:78:27:53:76:a3:e3:ec:
                    54:03:5b:2b:f0:4d:16:4d:96:7d:fb:96:84:5f:ca:
                    1a:18:ae:74:30:93:ef:23:64:f4:af:03:c6:5d:f5:
                    fb:77:3d:b0:e0:58:0e:da:eb:fb:0e:fc:93:a7:e3:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B5:27:90:01:9C:C6:72:09:68:93:60:BE:11:E1:F1:26:F3:CF:30
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bc:3b:da:37:ff:1b:68:ce:0c:74:da:83:84:6a:d4:e6:ce:
         e3:1d:43:45:2c:6c:92:39:15:93:35:58:d3:7b:65:ee:e1:c1:
         4e:5f:30:58:1d:9b:a8:63:32:c1:ed:60:3a:f0:0c:f8:fd:ca:
         e7:81:05:4f:1e:12:15:5b:81:0b:c4:c6:6b:fc:82:ba:d4:4f:
         a6:50:9e:cd:e1:87:f1:43:57:44:1c:e2:b9:50:dd:d5:7d:3d:
         37:72:e4:63:16:66:e1:3a:f5:90:e3:a4:6d:87:87:c2:7d:3b:
         77:90:54:90:7e:25:23:fc:44:0b:fe:b8:42:96:84:ce:5d:9b:
         36:7a:1b:3b:85:00:73:6e:fa:c1:8f:f7:a8:0f:70:f6:2e:45:
         62:90:4f:ba:cf:93:42:28:fe:9a:1a:a4:a1:04:1d:e8:84:f3:
         be:cd:29:06:3b:59:ea:32:19:53:18:05:74:bc:8c:7b:70:69:
         74:11:d8:bf:53:09:28:64:4b:b6:10:84:66:82:51:c1:3d:d6:
         d3:c4:d2:8f:71:62:eb:9d:e0:0c:3f:06:d4:1d:b0:07:7c:27:
         45:7a:4b:5b:55:c1:88:cf:44:e5:2f:eb:34:38:0b:bd:89:b7:
         8b:81:fd:f7:bf:c9:6a:2e:b3:90:14:bf:ae:97:23:61:b1:aa:
         3e:6d:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:16:00 2025 by rpki-client