This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
File:                     BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft (raw, json)
Hash identifier:          bBtIvuyqLSjgguRX0pOgU7VkaDVXh55OeaixxWJxB8Y=
Subject key identifier:   55:60:1B:4B:C9:B1:AB:AA:B0:6E:60:C2:2C:1F:90:14:E4:CB:01:E7
Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
Certificate issuer:       /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Certificate serial:       499285129FC62D047F5FB4EB82D3D219DCC4A644
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
Manifest number:          0537
Signing time:             Sat 06 Dec 2025 22:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 21:56:28 +0000
Manifest next update:     Wed 10 Dec 2025 07:06:28 +0000
Files and hashes:         1: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: IzocfQbAm6re271rkdggFPq3VGCEGAEeE3AdaJEm7ps=)
                          2: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: ifILYerUDcpRe223pMC/3xtPqhg84IovzTQC0ym+UNg=)
                          3: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: JGFlFhH6nweNzgQ11TLkyB/qqq3QQSYaNP8bQViVV64=)
                          4: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: gB/Q187la6gm8qsp2Yv6/zuENtxXbTAl8b+QHinNe0w=)
                          5: BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl (hash: dWDhRU2rpe322yOrQ16DoZ2djFJDpsZg7/E9wzd0Xrg=)
                          6: 3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (hash: 8j0jRsDzFx9gAhfck8T4zhTfxl09chfxnR3KSNz+QGw=)
                          7: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: 2/e1df75ZuB0mlztIUau/nvIcUBCoLK27iXCpZBorYA=)
                          8: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: T+xAmOcrpikrQh6BNR+E6JFDb4uNhHPoQy2Ve9WHYks=)
                          9: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: lE9s+BoEY5gwrvlaGT630nudod/SJ6QnowFtOuZG/F8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl
                          rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:92:85:12:9f:c6:2d:04:7f:5f:b4:eb:82:d3:d2:19:dc:c4:a6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
        Validity
            Not Before: Dec  6 21:56:28 2025 GMT
            Not After : Dec 10 07:06:28 2025 GMT
        Subject: CN=55601B4BC9B1ABAAB06E60C22C1F9014E4CB01E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:fa:4f:c5:64:3b:76:29:5c:16:63:0c:0d:
                    3d:53:19:33:59:e9:69:bc:f3:11:a4:65:30:1f:4d:
                    4e:4e:78:87:99:44:9d:60:85:89:e1:66:94:d4:18:
                    4d:12:aa:33:3a:5d:d2:b9:99:e1:38:ff:96:e5:09:
                    b3:07:a1:cd:63:23:06:79:ab:32:1b:a5:7f:81:61:
                    3d:45:74:0f:63:2c:96:2a:c1:2c:5a:21:aa:87:32:
                    5d:74:15:61:9a:97:f6:9d:93:3e:8b:4a:03:dd:d9:
                    13:d4:ef:93:b3:dd:aa:e4:ee:d2:20:74:cd:9a:1e:
                    8c:d8:60:7e:ae:11:4d:12:8f:8f:7b:1d:6c:bf:12:
                    0f:99:f1:ca:53:15:c9:9e:d5:60:34:f9:db:79:8f:
                    ce:d2:75:a6:69:18:d3:6e:50:9a:cf:58:42:56:71:
                    92:04:aa:90:2a:55:06:20:bf:1d:2c:14:94:35:96:
                    37:4f:f5:4d:95:dc:d1:52:c0:5e:19:ad:1e:00:56:
                    70:24:63:09:d8:62:f0:72:86:b5:43:7a:3a:60:8b:
                    21:76:6d:95:07:ad:07:f0:09:84:1b:95:9d:06:14:
                    79:a0:d5:e2:c6:12:ed:c6:9f:f2:4f:68:13:c4:19:
                    10:63:ac:94:7d:b9:54:e0:ff:2b:03:90:ff:50:c6:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:60:1B:4B:C9:B1:AB:AA:B0:6E:60:C2:2C:1F:90:14:E4:CB:01:E7
            X509v3 Authority Key Identifier:
                keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:40:d1:ea:1b:06:f3:64:27:10:e1:9d:80:2e:12:7e:3a:a8:
         d5:59:71:f9:33:7a:14:60:46:98:e1:8b:12:7c:b1:fd:1a:a0:
         0e:0e:18:16:7c:90:1b:5a:91:f0:fb:1e:b0:a0:bc:5f:5e:4c:
         93:15:f4:cf:c8:58:cb:9b:e9:17:9f:c0:25:5a:b9:88:74:c8:
         5f:89:e2:76:b5:69:d6:17:37:48:ae:4f:8d:40:75:be:4c:96:
         19:8b:7f:e4:b0:e5:a7:70:a7:8b:30:48:6b:ef:7e:eb:2d:78:
         e5:21:9d:28:36:89:8b:9e:0c:ff:ee:62:dd:33:1c:d1:b6:4f:
         7d:a5:32:f1:55:93:c3:61:68:1b:78:32:d7:98:73:e0:cf:a7:
         10:99:65:e3:e7:f7:87:9f:0f:d4:88:1f:20:20:b1:3e:04:ee:
         9f:00:9c:47:0b:0f:52:f9:1f:13:34:62:3e:53:ac:70:c6:d4:
         d9:cf:08:25:14:22:c0:cd:c3:f2:68:e6:62:42:60:6f:be:0c:
         6b:d9:d6:2b:19:a3:5b:8b:7a:a8:6b:6a:be:f7:28:63:d0:fb:
         43:07:91:2e:ec:de:22:e0:54:dd:fa:9f:cf:76:b0:87:f8:96:
         4f:34:44:08:c8:21:17:ba:e5:ec:ab:6b:98:f5:10:77:a4:91:
         2e:54:15:ae
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSZKFEp/GLQR/X7TrgtPSGdzEpkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUy
MDdGQTMzNzAeFw0yNTEyMDYyMTU2MjhaFw0yNTEyMTAwNzA2MjhaMDMxMTAvBgNV
BAMTKDU1NjAxQjRCQzlCMUFCQUFCMDZFNjBDMjJDMUY5MDE0RTRDQjAxRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6PpPxWQ7dilcFmMMDT1TGTNZ
6Wm88xGkZTAfTU5OeIeZRJ1ghYnhZpTUGE0SqjM6XdK5meE4/5blCbMHoc1jIwZ5
qzIbpX+BYT1FdA9jLJYqwSxaIaqHMl10FWGal/adkz6LSgPd2RPU75Oz3ark7tIg
dM2aHozYYH6uEU0Sj497HWy/Eg+Z8cpTFcme1WA0+dt5j87SdaZpGNNuUJrPWEJW
cZIEqpAqVQYgvx0sFJQ1ljdP9U2V3NFSwF4ZrR4AVnAkYwnYYvByhrVDejpgiyF2
bZUHrQfwCYQblZ0GFHmg1eLGEu3Gn/JPaBPEGRBjrJR9uVTg/ysDkP9QxlUHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVWAbS8mxq6qwbmDCLB+QFOTLAecwHwYDVR0j
BBgwFoAUvKMZU7ksX8RS7ah7kMvZjiB/ozcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZTJjNDgxNS1iMmRhLTRjMjAtYmMzMS01MDNhZGY0OWI0OTAvMC9CQ0EzMTk1M0I5
MkM1RkM0NTJFREE4N0I5MENCRDk4RTIwN0ZBMzM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUyMDdG
QTMzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UyYzQ4MTUtYjJkYS00YzIwLWJj
MzEtNTAzYWRmNDliNDkwLzAvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5
OEUyMDdGQTMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABVA0eobBvNkJxDhnYAuEn46qNVZcfkzehRg
RpjhixJ8sf0aoA4OGBZ8kBtakfD7HrCgvF9eTJMV9M/IWMub6RefwCVauYh0yF+J
4na1adYXN0iuT41Adb5MlhmLf+Sw5adwp4swSGvvfusteOUhnSg2iYueDP/uYt0z
HNG2T32lMvFVk8NhaBt4MteYc+DPpxCZZePn94efD9SIHyAgsT4E7p8AnEcLD1L5
HxM0Yj5TrHDG1NnPCCUUIsDNw/Jo5mJCYG++DGvZ1isZo1uLeqhrar73KGPQ+0MH
kS7s3iLgVN36n892sIf4lk80RAjIIRe65eyra5j1EHekkS5UFa4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:00:18 2025 by rpki-client