This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
File:                     C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json)
Hash identifier:          tY1WlL73tmqabz6x56qSl0GMW8WWtIeDW5m7XsF6U/U=
Subject key identifier:   60:5A:6E:59:CB:D6:DE:93:A8:C2:E8:88:57:50:8B:6E:A5:9B:D2:16
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Certificate issuer:       /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial:       571F3F826B9563BD4DD1D8532189C690F9100686
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
Manifest number:          0261
Signing time:             Sat 06 Dec 2025 07:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 06:56:02 +0000
Manifest next update:     Tue 09 Dec 2025 11:41:02 +0000
Files and hashes:         1: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: Bs16YGnlwrlePVXXY4N5cyCqUbI8df0nJCiwrMRxGZM=)
                          2: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: Hf5K1p+vQmx7pwQtwgIu6JAU7f1ndfpYuonG6YF7L6c=)
                          3: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=)
                          4: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=)
                          5: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=)
                          6: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=)
                          7: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=)
                          8: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
                          rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 11:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1f:3f:82:6b:95:63:bd:4d:d1:d8:53:21:89:c6:90:f9:10:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
        Validity
            Not Before: Dec  6 06:56:02 2025 GMT
            Not After : Dec  9 11:41:02 2025 GMT
        Subject: CN=605A6E59CBD6DE93A8C2E88857508B6EA59BD216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:be:84:16:6e:15:4e:d2:d4:4c:6c:ee:28:
                    75:69:57:15:d3:2e:74:af:ed:85:c9:18:5f:ce:7c:
                    4e:0c:44:0b:81:0a:eb:da:63:4c:ed:74:a7:a4:33:
                    3d:52:c3:0e:0b:ae:db:14:90:2a:6e:ce:c6:3f:57:
                    a7:c0:e8:82:e0:30:67:05:c9:16:02:c5:bd:9d:62:
                    3e:36:34:b5:56:07:62:45:29:e1:6f:40:5b:13:c2:
                    16:b0:db:d4:3b:ac:8c:9d:d6:52:8d:64:db:03:4b:
                    f0:bb:c6:11:cb:65:43:84:00:d3:c9:aa:02:af:3a:
                    88:1d:16:bc:87:48:f3:46:88:ab:f7:8d:11:9b:46:
                    5c:de:2a:25:cf:b0:d4:be:46:64:5f:1d:5d:3a:6e:
                    0e:b9:fa:3b:bc:d7:6e:8e:e4:87:d3:a6:46:b1:9f:
                    ea:fe:0b:15:6f:70:c7:05:6a:ea:1d:54:12:34:2e:
                    2e:81:fa:b8:dd:5c:88:22:45:7f:82:47:ed:02:04:
                    d9:41:0e:04:eb:aa:06:4e:5d:a4:2a:39:a5:32:82:
                    29:2d:4b:74:4d:3f:e9:9c:17:af:bc:61:ec:4b:27:
                    70:da:f3:06:ff:29:25:8b:f6:f8:1e:da:0c:50:10:
                    ae:72:41:47:aa:90:db:55:b2:40:8b:28:9b:da:83:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:6E:59:CB:D6:DE:93:A8:C2:E8:88:57:50:8B:6E:A5:9B:D2:16
            X509v3 Authority Key Identifier:
                keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:7d:e5:0e:66:b9:ea:fa:0a:f3:c9:10:46:11:fb:82:7c:
         73:b2:a7:3c:f4:14:f0:35:72:53:a2:f1:9a:34:c2:8b:57:d0:
         11:8f:8f:da:24:16:09:69:bc:f2:8b:a5:60:7d:9e:56:af:ec:
         70:80:bf:21:07:27:79:40:78:50:7c:ab:c9:a4:50:23:bb:92:
         98:28:a8:b9:53:b9:d1:e9:ca:fa:83:53:1d:4d:02:9f:ec:80:
         74:66:56:c8:b0:07:05:88:42:e4:35:fb:76:1d:6f:71:d1:e1:
         71:8d:00:3c:12:8d:17:a2:13:f0:ba:3f:7b:8d:11:1f:cf:61:
         aa:70:c8:1e:e8:ab:fb:31:f5:29:fc:a1:6a:6d:84:7e:e6:c6:
         1b:b2:a0:de:c6:cd:50:a8:17:3d:10:68:b6:2a:d2:86:cb:82:
         83:0a:0f:ea:2d:79:4c:81:44:00:94:7f:31:89:d4:49:93:88:
         24:8c:23:91:68:c0:c7:57:d4:5f:75:35:75:bb:d8:91:e1:c6:
         d1:e0:80:43:87:10:08:e1:3b:ae:d7:1c:ba:58:0c:7f:6f:e0:
         61:e5:84:e8:7c:8e:da:05:32:01:d7:3d:86:f8:12:96:c0:64:
         c1:b1:fe:6c:17:34:d4:7d:9c:3e:e4:d0:d5:d8:9d:54:c7:2e:
         b6:69:0c:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVx8/gmuVY71N0dhTIYnGkPkQBoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw
ODMwNUU0NTAeFw0yNTEyMDYwNjU2MDJaFw0yNTEyMDkxMTQxMDJaMDMxMTAvBgNV
BAMTKDYwNUE2RTU5Q0JENkRFOTNBOEMyRTg4ODU3NTA4QjZFQTU5QkQyMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfr6EFm4VTtLUTGzuKHVpVxXT
LnSv7YXJGF/OfE4MRAuBCuvaY0ztdKekMz1Sww4LrtsUkCpuzsY/V6fA6ILgMGcF
yRYCxb2dYj42NLVWB2JFKeFvQFsTwhaw29Q7rIyd1lKNZNsDS/C7xhHLZUOEANPJ
qgKvOogdFryHSPNGiKv3jRGbRlzeKiXPsNS+RmRfHV06bg65+ju8126O5IfTpkax
n+r+CxVvcMcFauodVBI0Li6B+rjdXIgiRX+CR+0CBNlBDgTrqgZOXaQqOaUygikt
S3RNP+mcF6+8YexLJ3Da8wb/KSWL9vge2gxQEK5yQUeqkNtVskCLKJvagyYZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYFpuWcvW3pOowuiIV1CLbqWb0hYwHwYDVR0j
BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG
NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw
NUU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE5MjAyMWUtMzkwNC00MTE1LWFm
NWUtM2VkYjcxM2JhYTE0LzAvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJF
RDkwODMwNUU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI7DfeUOZrnq+grzyRBGEfuCfHOypzz0FPA1
clOi8Zo0wotX0BGPj9okFglpvPKLpWB9nlav7HCAvyEHJ3lAeFB8q8mkUCO7kpgo
qLlTudHpyvqDUx1NAp/sgHRmVsiwBwWIQuQ1+3Ydb3HR4XGNADwSjReiE/C6P3uN
ER/PYapwyB7oq/sx9Sn8oWpthH7mxhuyoN7GzVCoFz0QaLYq0obLgoMKD+oteUyB
RACUfzGJ1EmTiCSMI5FowMdX1F91NXW72JHhxtHggEOHEAjhO67XHLpYDH9v4GHl
hOh8jtoFMgHXPYb4EpbAZMGx/mwXNNR9nD7k0NXYnVTHLrZpDIo=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:55:34 2025 by rpki-client