This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
File:                     10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json)
Hash identifier:          5A7s3T13AIdquaVE9Bby8U63cMbnGB26k/AVGcvSy0k=
Subject key identifier:   A8:54:21:9C:EA:9F:3B:6B:65:6F:46:AD:40:D5:01:EC:41:29:74:B4
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       2FF229741F6CE42927A8C3F699CB53B381C2F49B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
Manifest number:          053B
Signing time:             Fri 05 Dec 2025 02:52:05 +0000
Manifest this update:     Fri 05 Dec 2025 02:47:05 +0000
Manifest next update:     Mon 08 Dec 2025 06:29:05 +0000
Files and hashes:         1: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: Oqj6PoE4F8AznRA3O47Q/vammp0q4o8hLusJKPdYYNc=)
                          2: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: AM+aiplYUdhH8KU+dJBKvmqgp4vQ5YGIVFo2krKpct4=)
                          3: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: Htx/fOPObPi6ATUBVsfJbs0qEhGzdpd2T6aHa8E9uiQ=)
                          4: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: SjzDmLz46qIS/nJ0zn3gr3kiE+RR+H/5PGnqBHKVams=)
                          5: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM=)
                          6: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: wXhkK7uiuOpjHC2A0NMyoBCjpeit4b5RIwLk/h9wbpQ=)
                          7: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: Fv3PzH/PpXCb1xS63tcNe76mWTrdMYYDd+HvPixKLKI=)
                          8: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=)
                          9: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: NQhanJjaDTGlHqgVpp7WZk1oBiHC9a8024nRDhFHB5U=)
                          10: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: iqsK2yD07mvgljIh3SYbfzahEnFRSGZHOcXe83IfFtI=)
                          11: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI=)
                          12: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: rAFjuW4Ob+s+8+VX602W+l2HlUbwposeuUvXP5ZI5FU=)
                          13: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: TkM6f8/8bl8VJM/y37L1BIkGsrEx/IcZC/SKW3F/E78=)
                          14: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: nIo8hwuirVHnHkmWMKJHXedLZK1IsiVp+gI1eB5wIWM=)
                          15: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: R5DcBcZsZ/tVTFJsSzzQGY3wUUyH7B2253S6p3vidZI=)
                          16: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE=)
                          17: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: 85lx2+O0c1Tye1V/YF4G0HFNwN1FRAy3MZlTA2YttNs=)
                          18: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: 8yEyL4RD7Qa35m9yx8L60c6viJWD8aIwuREP+x+PT4o=)
                          19: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: +XotVkUYpiJ83hc89EWoIGxGRhhZu0xl8ZYTUA6r/r8=)
                          20: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: YJQzg1U9jA4AWFaUYLdryvvEck232YTbH13zq010OFw=)
                          21: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: qwxYNTh6xKdp2uATuIFR5O42e+8ng5z76v1e121JSWc=)
                          22: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: Hah38SlTgCkIbLHq1q3uLH0RNUqGa3DsQKagbnlKgEg=)
                          23: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: C8WKEDh35WX/j3rJi1+NJXVLBziYbBALI4qujCiFsgQ=)
                          24: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: noUPhk/lMic4mWf4jKWj6yuqbnoenZnLHoMy6mHYvdE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 06:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f2:29:74:1f:6c:e4:29:27:a8:c3:f6:99:cb:53:b3:81:c2:f4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Dec  5 02:47:05 2025 GMT
            Not After : Dec  8 06:29:05 2025 GMT
        Subject: CN=A854219CEA9F3B6B656F46AD40D501EC412974B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:1e:0d:74:7d:25:56:f0:d7:98:3f:b6:07:
                    40:40:9e:c4:0b:9c:58:de:de:c7:e7:43:ab:25:64:
                    fa:b7:28:c0:dd:3d:02:e4:89:79:e1:ea:ef:1c:52:
                    0c:82:8a:5f:4b:59:a3:23:40:ac:79:f5:2c:bd:aa:
                    63:fd:1f:fb:cf:12:3b:f0:2c:53:37:ad:72:c6:1b:
                    8d:99:96:b7:82:90:ac:7d:ac:8b:bf:41:1c:f2:e2:
                    a1:f8:5f:9e:d1:86:6f:01:a8:95:18:02:12:95:2d:
                    26:77:7b:2f:34:cc:a5:a2:b7:14:52:3f:6f:5b:e3:
                    95:03:95:c1:b9:13:34:23:0d:dd:95:71:6a:d4:de:
                    54:7e:85:59:32:58:3e:60:77:13:72:3d:60:b9:40:
                    1c:be:a3:2c:cf:96:d5:51:ce:e5:8a:41:dc:91:53:
                    da:ca:7b:d6:c1:19:23:3a:81:d4:dc:00:65:33:e5:
                    ea:3a:51:3d:bc:ff:ad:c0:04:69:44:4d:06:90:3a:
                    22:52:ca:63:66:58:68:02:50:95:cf:1d:4c:7d:ae:
                    92:3d:37:21:46:64:c7:c4:ac:18:b5:e5:8b:00:91:
                    65:57:78:97:86:bc:59:13:3c:d4:fd:65:f8:fd:69:
                    ca:13:29:cb:c7:67:e7:f0:ae:cf:6b:70:17:26:67:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:54:21:9C:EA:9F:3B:6B:65:6F:46:AD:40:D5:01:EC:41:29:74:B4
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:49:36:d1:90:08:eb:19:06:49:65:54:15:0e:3f:74:1a:81:
         0e:45:41:e3:4d:b8:cb:e8:9d:21:3e:b2:3c:41:2e:e9:a4:c2:
         a6:f2:80:b8:53:67:f0:be:1d:70:5d:a2:99:d6:67:cb:18:7b:
         6f:17:c5:15:75:18:9b:b5:58:79:42:b6:02:49:b4:bd:cc:8f:
         ad:ab:c2:82:ea:bc:cd:67:f2:98:ea:cf:0d:8c:23:75:f9:7e:
         3f:c4:bf:d7:b3:5c:f8:8d:59:0f:ae:c7:c6:8d:bb:1a:13:4a:
         40:0a:62:f5:67:ba:3a:bc:33:f4:21:12:81:c0:b1:7f:91:3e:
         02:30:f5:fe:08:e9:85:c3:7b:a1:65:f7:c7:5a:8f:17:bc:86:
         b5:a3:6d:30:80:69:f5:5a:25:a8:04:6e:6a:2a:fe:1f:d5:db:
         c6:d9:74:26:e1:eb:55:d6:86:4b:73:0e:3d:52:7c:27:c7:39:
         79:ef:27:a2:ca:f1:63:96:0b:13:51:3e:1e:f1:5a:2f:5c:d9:
         40:59:b6:0c:c7:df:b7:fe:b4:9c:b7:f2:75:0a:91:e8:d6:00:
         47:1d:87:45:f0:bb:f7:59:2f:50:20:e0:db:98:3c:97:49:33:
         cd:18:a2:c6:9c:af:18:c1:ad:ff:43:d5:64:06:14:21:1c:c7:
         49:a4:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:39:50 2025 by rpki-client