This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
File:                     9A52B6405ED406A7B17C4478D516DF3E37282980.mft (raw, json)
Hash identifier:          iUzQuZsdM1UlXiZKLhhQgxojwJ2FT5Q6LVGO0Gy3PrI=
Subject key identifier:   5B:6E:C1:70:B4:FB:C2:C5:7C:8F:A3:D7:32:41:E6:08:D8:17:E8:EB
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       3BE0CD2C0D0794F85DA2D0252724075251627E19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
Manifest number:          02CD
Signing time:             Fri 05 Dec 2025 02:11:04 +0000
Manifest this update:     Fri 05 Dec 2025 02:06:04 +0000
Manifest next update:     Mon 08 Dec 2025 13:12:04 +0000
Files and hashes:         1: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: 9D15ranZ4YwNSLaXFD5FAq+pNZxj9EjBiBFXk+HdqAc=)
                          2: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: 0k545OOwyj9NvbehxX+QV0g5xQmQQnbTNP95f97h71M=)
                          3: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: LHnVdcZ5/YfYWNz9EwzLlVaYYhGPyvyomANm7mqWzO0=)
                          4: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: pifjJjTcE6PeDdv2QBGHsCyyOypnfnj2TzyiuJpYoi0=)
                          5: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: kEXHj9pv5MWefZu6lpGXP15sPBFvi6JY6eKJO5xEqB4=)
                          6: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: uhlzYip1Vr9wq1FIVgoBLWnymsgGUspFrO9lWq8rb2g=)
                          7: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: r39b6mOH1IwysZ4h0sWe8of8Eqz81JxpSEnLBmKsOQg=)
                          8: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: OgrUIPRU4hlKsLPwGuGpe/ivo5VWBIS7QYpm7Sxho2I=)
                          9: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: EvUm4cJBa4C1BImp9thQZ8BX3+SY4YqvKOUkSPQljL0=)
                          10: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: 5FcZQWvOh6pLwsoaD4YTIG17OJilGjN+93omVyyFOZM=)
                          11: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: INC+aAdBEWi58gMud2WYkmc5AYB/cZKH3D/b7vcKvsA=)
                          12: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA=)
                          13: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: eELtUE44s8kWXW53efaOQB87hQvYKnu+4QWMOO/ldiE=)
                          14: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 6i3UMACzodtWNujjB7HjZ1wIY9Wkv8kYqdabcGyF3UA=)
                          15: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: uA6xDa7IvgkDp22R6G6BTJTUnQ6z5ZPc+c5h8RXJlMc=)
                          16: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: bH0QRBT1yTn/wCvKxau4plk6nMYBKS98USNjhSr5VTI=)
                          17: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: WrWbmsZZrPD4tCYkM+PlD88T9/eqy1PkC98c/wYNVkI=)
                          18: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: UbfbQp2UJcWdUXOg3yUdX64d8tTRpxRLmsAiq/gQPtk=)
                          19: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: ZlLb/8ABoTMshaPAOuB5oc8hOwpCTBM9+ckE++m8QHc=)
                          20: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: YdSsGr4BjFrFET1Pgec0CyVOY3w0mCvZYunx96T/HRk=)
                          21: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: BASa57B0aeCvQjUkpH58uhcpVnA7zhpchwSCS5nsYmM=)
                          22: 9A52B6405ED406A7B17C4478D516DF3E37282980.crl (hash: KGAQG6dJoWx48ZV4+5IsBPHEu/uZUXWURj0UKCO7JaE=)
                          23: 3130332e3137372e382e302f32332d3233203d3e20313437313337.roa (hash: uHzq3FI/OUse3guEAZ2X3n26c+18IEz5AqEGOSkyu60=)
                          24: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: kS9+afwSiaTp9TelPiQ0ILiNOqNp/k8Ib68mizaidfE=)
                          25: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: iK23Ih7KgC4OjnO9UHJglzhRasd3vRLpYeuOhNGE5hk=)
                          26: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: +gPgp8QYiU/daLpgrvM/5BELV5q0+mYrJuLKheezSV0=)
                          27: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: 9MFeAvNjxRA9vbUf2UgXcthdxQ5XENOLt4Ao9GHoHp4=)
                          28: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg=)
                          29: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: xUscykaPjchZwH98C+3nSOKZLZaGqcecZKinfhX00i4=)
                          30: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: Y3XYf27QnurhdV1CW67C5UxWbak1ZDu532ZjKsBxVtw=)
                          31: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: IEucjhXv8bAa5eR/7We292E0AjQSxt/nxsHzEY0hsao=)
                          32: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: z2k28a+6ZI3VAF075Ex5TSmy7XYBAGjTmBdcFap9YJg=)
                          33: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: a4kar+hZC31dN5bmEcyjGudCJwDbez0xQdLphlBrsp8=)
                          34: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: h0oH/3iLu1unRW/jZRg6pYTlxoghvh0aIr1dQ6X1C3o=)
                          35: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: 23/idCqUx8EPa7QGFdtUC3If9YW7mCjrP46bOrSKS5Q=)
                          36: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MQTEtT0TR1f+0V0bndDRXrcOI9gxT90XmU11iLCfrjk=)
                          37: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: s3Xjjbohn1CufgneBaEZY/bwLMOk5+UIxmZaor+mssg=)
                          38: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: ShZcfvOuL7hhFcin6d6C9YZIwo2zOBT3B5csjg2tV64=)
                          39: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: KAxv+bcTcqGpScOTMbFMveWIpWOPxpJEwT7ajRyz6mM=)
                          40: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: kbuURMx081wdwMkjcRHHCXRBMB09bh+YCCGTym9STe8=)
                          41: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: UeQqi6ZVFgPrGYMster+xne64h585Ow3H0IaK3UC2WM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 13:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e0:cd:2c:0d:07:94:f8:5d:a2:d0:25:27:24:07:52:51:62:7e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Dec  5 02:06:04 2025 GMT
            Not After : Dec  8 13:12:04 2025 GMT
        Subject: CN=5B6EC170B4FBC2C57C8FA3D73241E608D817E8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:20:9d:0e:fc:46:c1:71:12:24:0b:f2:42:
                    cc:5a:ac:a3:6f:c7:29:dd:4f:26:ef:38:68:ca:d4:
                    f7:ba:52:5f:c7:01:10:5a:d4:be:75:75:bb:40:5f:
                    c5:bd:da:23:d6:6e:1a:db:01:af:5a:3e:2f:a2:ca:
                    51:96:e3:a3:2a:21:01:33:2c:d4:d6:21:30:6c:af:
                    4d:09:0a:cb:eb:ef:70:d2:e9:bb:29:e1:5f:73:7c:
                    13:8c:4d:76:4c:91:18:03:f9:a0:82:b5:1f:c1:9c:
                    be:66:fe:e5:50:94:b8:7c:51:56:dc:d9:fd:aa:a1:
                    c9:6d:b1:f8:e9:03:ab:bb:8f:fe:c1:6e:3a:18:b7:
                    db:26:c1:7b:f0:c6:4f:79:d8:1d:20:0e:b4:bb:75:
                    90:96:7d:43:cb:bf:5e:49:75:58:d3:22:f0:8a:9e:
                    c6:57:37:2d:5a:35:f1:9e:7b:6c:18:6a:96:7b:db:
                    e1:d8:87:70:55:19:27:75:4b:56:aa:83:a5:76:49:
                    f9:fb:bb:27:c9:c1:dc:8f:db:ac:d0:34:fc:68:c3:
                    df:26:b9:83:8c:bf:b8:c1:f7:29:00:26:d5:c7:ef:
                    5c:a6:ce:a9:0f:08:cb:26:02:d0:6b:36:2d:a1:e6:
                    e2:fe:6e:d9:14:2f:ce:1c:63:3d:7c:c3:99:ba:d9:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6E:C1:70:B4:FB:C2:C5:7C:8F:A3:D7:32:41:E6:08:D8:17:E8:EB
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f6:cc:0e:90:73:81:97:f6:e7:9d:b5:96:7b:e4:d3:17:90:
         af:d4:67:00:c3:69:9d:d1:3e:a8:60:4c:7b:16:50:92:d6:b9:
         ce:66:df:b5:c3:c5:de:97:26:b4:78:ec:f9:69:64:d1:c4:eb:
         aa:bc:0b:44:9f:38:4a:10:4f:df:a5:12:9c:94:3e:54:6a:5c:
         f1:69:9c:7f:47:47:42:13:c6:ef:7d:3e:e7:45:ae:a0:14:76:
         b3:4c:24:2a:ae:ff:02:ff:3f:48:a5:ae:40:81:c8:90:ab:6c:
         10:d3:2f:b0:53:2d:58:6d:04:64:00:f0:db:94:81:09:8c:e3:
         30:87:bf:88:dd:82:17:58:9d:61:be:74:d8:5b:49:c0:42:66:
         93:49:c4:6f:bf:78:3b:cd:f8:20:0c:42:44:64:25:d2:31:04:
         8c:3d:6c:34:df:3e:42:49:36:fd:da:52:d5:fe:5e:25:7b:d6:
         d9:1b:1b:08:54:12:74:64:3a:ef:3d:4b:66:38:a0:ec:2e:c0:
         13:d5:cb:27:32:29:90:21:a9:33:e4:79:2c:d9:ca:02:f8:da:
         50:7c:88:84:d4:84:73:dd:ff:fc:6c:81:3d:73:15:ba:21:75:
         3f:8c:1c:76:c2:94:f9:8e:b4:93:58:4f:48:1d:97:36:f9:40:
         69:0e:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:13 2025 by rpki-client