This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File:                     667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier:          UiPc+aaolVCW9RzLcN8feSWhXi1SaTYyLEUA+wnicXw=
Subject key identifier:   FB:01:EC:C0:2C:69:91:E0:8A:5C:BA:E3:DC:E6:15:AF:04:79:E3:24
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       3A0577A30AE241204558AE84F6A05611BC000DA0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number:          02DD
Signing time:             Mon 15 Dec 2025 18:41:29 +0000
Manifest this update:     Mon 15 Dec 2025 18:36:29 +0000
Manifest next update:     Fri 19 Dec 2025 05:51:29 +0000
Files and hashes:         1: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: yr0MNMuQ/IlUxBG9BJkWSvncA4WzNuZMrgeTlRsfQrw=)
                          2: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: HbKwsuQgYC8kyv50M23w4h1WaGyYUtMgukyV/PzUlcs=)
                          3: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ=)
                          4: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: CFm8UxOFUNv/+ECnjHOC47sfC3C4NJroGuyfEm+9/Ds=)
                          5: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: 4EhIBVtTUnA2NsufqUE56qVJQ8W9fy5ksrwQzL7c16E=)
                          6: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: 2pAFw4pCfgppnXNzn4U9fVaUZRHA5FxGk6QsaeCqBJY=)
                          7: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: Ix+R/yfCu9YeIQiklNVMKU4ccTsIM4M8qCqs+sb4ZL0=)
                          8: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: Rpp4YpehQ1M+h6emtzM5wkYph2BpAIpQDGT9zp1ts2M=)
                          9: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: W5Ot0BBUNk5NFwRYk7ap1jPaT+1meSB0kfyCkhd5n7I=)
                          10: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=)
                          11: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: Y74KSj55RfHXIPY1QWdhS0Q2Wa+Q94IkRzO0wJ51JZI=)
                          12: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: p1IlE+POO9hCFBImJs4SWaLDjBIhdLsxh8yaBGtXhAg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 05:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:05:77:a3:0a:e2:41:20:45:58:ae:84:f6:a0:56:11:bc:00:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Dec 15 18:36:29 2025 GMT
            Not After : Dec 19 05:51:29 2025 GMT
        Subject: CN=FB01ECC02C6991E08A5CBAE3DCE615AF0479E324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:61:3d:cd:d0:c9:99:ff:aa:ef:6d:73:07:
                    7d:7d:64:8c:c6:f5:96:6a:8c:b1:3f:bf:ea:b8:be:
                    5f:68:d0:50:3d:af:79:1c:c8:13:dc:e8:dc:1d:34:
                    22:03:5c:1d:95:a2:0a:b7:bd:c5:a9:8b:d0:50:d1:
                    4e:94:de:07:e1:e9:88:0b:a2:ac:b4:44:dc:53:3c:
                    be:5a:08:8d:f8:ee:a2:2b:fd:84:40:58:0c:77:6b:
                    c1:a2:91:33:db:ac:87:7f:02:a1:53:95:4b:37:15:
                    83:78:1d:8f:23:ce:88:54:95:5b:c9:4d:ef:73:13:
                    7d:af:8d:ec:1b:a8:9e:0d:54:2e:df:93:53:f0:7b:
                    93:8f:ed:24:6a:c3:69:44:e0:3c:69:c5:de:78:51:
                    87:15:91:82:78:2b:e0:fd:0f:b9:53:36:2a:33:e6:
                    82:8a:52:7c:e0:bb:af:79:3c:72:10:9b:15:ea:49:
                    b7:c5:5d:25:e8:6a:f5:1f:c4:d4:6f:47:a7:de:32:
                    94:45:95:f4:04:8b:4c:50:7e:84:fa:ea:c8:9f:94:
                    57:08:d6:7c:dd:f6:d6:b9:af:46:5b:1a:ac:0e:97:
                    1d:5f:c5:db:2b:d9:64:a6:0f:be:f8:86:29:a8:02:
                    9b:41:55:9c:62:45:2e:4b:3d:f9:e2:ed:e9:6d:72:
                    d7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:01:EC:C0:2C:69:91:E0:8A:5C:BA:E3:DC:E6:15:AF:04:79:E3:24
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:13:e5:44:45:a0:50:64:c2:e9:16:91:9c:fc:f8:a9:04:f2:
         92:bc:68:af:a6:1e:cb:ad:de:11:3a:1f:3e:a5:c1:ea:ad:48:
         13:b9:88:29:17:f3:a9:16:18:33:4f:7e:e4:8a:30:90:41:76:
         56:53:5a:85:6e:d3:cb:9e:b9:a3:a2:20:a6:54:2b:57:00:38:
         7c:ad:1f:28:12:44:60:7b:98:e4:97:da:d6:18:ec:43:25:88:
         7c:dc:3c:b2:42:3f:91:3c:1d:de:96:38:13:86:12:a4:31:22:
         14:f6:3f:ae:67:a8:68:e2:e2:b1:0a:01:bb:9f:b1:dc:5f:5a:
         f0:d9:fc:18:0a:54:e5:af:c3:3d:fc:ec:b6:5e:3f:68:88:c2:
         78:f0:f6:e3:44:73:22:9e:9b:76:65:51:17:31:8d:69:bd:82:
         75:ae:31:f1:c6:cd:a9:a1:97:6f:dc:3e:12:b8:25:3a:e9:f8:
         f5:d9:ba:28:b8:80:82:61:14:30:8c:1f:1b:94:47:72:1a:30:
         bc:10:0c:de:08:e0:bc:ef:22:ad:02:fe:94:80:c3:f3:08:39:
         07:e8:bb:45:7f:f0:58:c9:14:e4:f0:25:23:a2:53:91:94:12:
         74:4d:1f:55:0e:4b:47:54:4e:49:1f:e7:6b:e2:f5:6e:b3:57:
         85:43:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 07:01:09 2025 by rpki-client