This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft
File:                     CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json)
Hash identifier:          o9PZMGqJ5Tpz9ftdRu5WYx2WlHeE62MHHZAeJzOMuy8=
Subject key identifier:   3C:27:D6:EA:29:C0:8A:35:E5:78:80:9E:14:C0:DA:14:80:A3:32:1F
Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F
Certificate issuer:       /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F
Certificate serial:       6CED368765D76379BA05838D39A16B696089CD1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft
Manifest number:          0556
Signing time:             Fri 05 Dec 2025 22:01:55 +0000
Manifest this update:     Fri 05 Dec 2025 21:56:55 +0000
Manifest next update:     Tue 09 Dec 2025 08:05:55 +0000
Files and hashes:         1: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: uYljhWPFI38b1Nx1UtlQJyqp8X7WWWNXDKkB58nW4HI=)
                          2: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HWfHUrPU0i0A++2BYGkQMMOMjrzhDkKb6wybSU/0t9A=)
                          3: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: 6WhqetXB0Qru1Hk4/GxM3BsbsVKsqVduKrzOxiby6RM=)
                          4: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: la3Lo26Aa17Lz+dfnwUc2WZ/Zq7gWX7qsfEvtWc9abY=)
                          5: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: YMkK1MNXH2D6eByawSLr2fAy1YjJp/Nm5M4Ucze1b40=)
                          6: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: SHObZCSyQ759rOoQJ/JZR3beQgRHBAmiHG/b7NwBiWM=)
                          7: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: uySOy+S8Xsy4H4ygVfn9FFZSJNP2ZKNqDsizB5B+qv8=)
                          8: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: W+avD/27cuz8u7PAdTFS+byjySE6cCdTL/goNcaSuQ0=)
                          9: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: 42OUxulwbAB1CTRXrAGVc4itTg6RD7nCc12Z/wbxKk0=)
                          10: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: 0r1qT8I3KYKeRC/g+vu3+beTQV2dYBEegiYAXFw3fs8=)
                          11: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: G3BDF4TZ5GKx7Jq6M6FOl3lpCmK1xcIVdoD+jUyf4vU=)
                          12: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: nCRffZlynF4CiEOh2iuotIMhJ1K47T3UdPYWHYFk4iY=)
                          13: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: C1WvxvbH5IPUep7eQYoHGhXLqRMtWOqOKZMr05i/OjU=)
                          14: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: iGsP4VUogsadbwnWd/AM/1aXy+hpua+BCk1eWXzoRzA=)
                          15: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: NzMEm3c3sVacQZSWsj7eCdzP+65DR1/M0h04y+5YJYE=)
                          16: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: 09wWxPVAnpsug3YZq5fezhFaG7QDA9T1Mjs7NiJLE+g=)
                          17: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: 4xDh+QQ3DjVG3ZsJTKYXeue+iML5/d6SNSBZf74CI44=)
                          18: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: jzYSflbMwJIU7OJmfhxLLNRmLBX8xfDaE+EvcpXWcPM=)
                          19: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: bHw7ucEbh58xjruyf4VXXtftgFiKqgJhqbjayjPsTrs=)
                          20: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: CzG4HAOt3YGe8Hiz5yi0Z/DxBKiWe3MqxlSfWXppPPg=)
                          21: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: gYdjbrllcxVsFjz+69ccDbd/xh/3XuSos0MpuObt62I=)
                          22: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 8QPIleK9jMxRrZo8MGpSwWvTnJ7WLwlPDZ1i0haixbA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl
                          rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 08:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ed:36:87:65:d7:63:79:ba:05:83:8d:39:a1:6b:69:60:89:cd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F
        Validity
            Not Before: Dec  5 21:56:55 2025 GMT
            Not After : Dec  9 08:05:55 2025 GMT
        Subject: CN=3C27D6EA29C08A35E578809E14C0DA1480A3321F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:fc:6e:ad:df:4e:d5:ba:bb:b2:d3:37:52:
                    24:b6:33:ae:0f:c0:ba:65:8d:96:74:44:f5:1f:d9:
                    a5:02:73:87:9c:85:19:9d:fb:33:04:aa:f1:d7:57:
                    10:0c:3e:d1:50:ae:aa:ac:27:2d:92:d7:9d:98:f6:
                    91:f3:74:68:ff:c4:26:91:ae:55:9d:07:5a:c0:ba:
                    d4:49:9b:ae:36:49:a1:67:f9:1d:3d:f8:72:ac:85:
                    2f:39:9b:80:54:49:c1:e7:92:73:94:a9:01:1f:6f:
                    fb:54:4e:15:3e:54:1f:bb:1a:11:e7:18:66:00:58:
                    f1:9d:b6:bc:46:2e:82:92:c0:ad:fa:45:17:fc:6f:
                    46:6c:d2:86:1d:c1:a0:97:d0:a5:c7:d3:ea:45:7c:
                    91:29:b2:7b:20:58:b2:d4:bc:14:5e:e6:15:d8:b2:
                    c5:90:49:f0:b6:b1:14:12:48:14:fa:c3:7e:b6:20:
                    ba:8c:13:26:82:a1:18:ee:2b:6c:93:10:61:16:14:
                    96:bc:89:db:4c:9a:e6:70:11:c5:4e:93:df:51:6b:
                    1a:7f:fd:f4:c4:e9:2a:e8:8f:66:89:ac:5f:80:48:
                    6f:ac:45:f8:57:0e:b4:a5:ea:67:d7:bf:b5:68:5f:
                    e5:32:c6:b0:64:8d:a6:73:6c:67:18:81:5d:19:39:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:27:D6:EA:29:C0:8A:35:E5:78:80:9E:14:C0:DA:14:80:A3:32:1F
            X509v3 Authority Key Identifier:
                keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1f:9f:a9:69:7b:90:aa:1e:62:53:b5:58:57:f1:ad:de:e1:
         80:ca:a7:dd:22:bc:83:3c:51:5d:dd:3b:f7:63:ec:ef:b2:09:
         82:75:ec:b1:b5:ed:4b:80:d1:00:ac:31:33:a5:29:b4:ba:ec:
         fa:10:ce:bf:c9:e4:97:b5:31:88:ad:9d:63:9c:4a:8f:c6:56:
         62:cc:df:83:2d:2c:1f:40:21:a7:a0:6d:6d:fa:ac:57:a5:d5:
         4c:00:31:57:f6:a6:6e:98:50:56:3b:6f:fd:c5:1e:64:2d:3e:
         3e:86:51:d1:47:fa:39:65:83:ed:b3:58:0b:c6:9a:0b:d3:ce:
         f2:f9:f2:d3:0b:1b:41:51:f7:5c:05:06:5e:a6:0d:c1:39:0f:
         a4:82:4b:dc:ea:ec:b6:4a:69:b2:97:42:31:65:c4:cd:74:16:
         22:85:75:34:16:07:60:d7:87:35:0e:e3:6c:4a:ca:bf:7f:a5:
         44:d1:8f:15:1b:85:a9:ab:68:90:6e:51:ff:86:4a:8f:d4:43:
         0d:7c:72:ad:46:73:a6:a6:b1:3b:10:df:a4:bd:d4:59:9f:bf:
         71:46:96:95:60:44:26:07:e5:55:25:7a:43:4c:65:75:cc:94:
         27:d2:17:e1:c4:39:f0:4a:17:ac:6b:2e:7a:b3:4a:04:86:84:
         60:88:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:27 2025 by rpki-client