This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
File:                     0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json)
Hash identifier:          oU9B48qeHLhseni4AtxVkPbQFtoL7zl2GUIIUV+mIOg=
Subject key identifier:   0D:5B:38:D6:0B:5F:F4:81:CB:6E:FA:10:C6:AA:EA:07:55:BD:5D:9E
Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37
Certificate issuer:       /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
Certificate serial:       5887EFFA77AA579C5DC91D4278683D8CF6634461
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
Manifest number:          0534
Signing time:             Tue 16 Dec 2025 17:11:58 +0000
Manifest this update:     Tue 16 Dec 2025 17:06:58 +0000
Manifest next update:     Sat 20 Dec 2025 04:04:58 +0000
Files and hashes:         1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=)
                          2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: u6yesndZkss95yqt3VHE73ARu7X3X1aYaSRSb/iDU4I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl
                          rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 21:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:87:ef:fa:77:aa:57:9c:5d:c9:1d:42:78:68:3d:8c:f6:63:44:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
        Validity
            Not Before: Dec 16 17:06:58 2025 GMT
            Not After : Dec 20 04:04:58 2025 GMT
        Subject: CN=0D5B38D60B5FF481CB6EFA10C6AAEA0755BD5D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:de:83:d3:66:78:86:00:b6:a7:29:10:a1:
                    4f:ea:73:c9:c1:91:81:91:02:7c:12:52:2a:10:c2:
                    a5:82:75:f4:99:9e:fc:c4:9b:09:e6:e1:18:4e:1a:
                    74:a1:26:af:4d:61:e9:86:5d:94:71:56:2b:77:6a:
                    d9:a7:7c:31:ec:65:d9:13:b5:00:77:96:41:0a:af:
                    10:7f:e5:46:88:c8:06:3d:d0:19:f9:fc:21:45:0c:
                    56:37:e9:de:a8:88:8d:23:4d:7d:5f:68:5b:63:27:
                    34:41:dd:ae:3f:e7:41:d2:77:11:df:ab:fa:d6:ab:
                    a5:42:de:41:cd:ca:03:28:7a:65:85:a5:61:83:d3:
                    c8:84:0f:ba:c9:4f:d0:f3:6f:99:06:e4:e0:8e:e0:
                    6a:50:bf:f0:44:aa:45:7f:47:64:ff:92:c5:5c:5a:
                    6b:83:07:5c:9f:80:3e:72:ad:33:b2:21:bc:6a:d8:
                    18:4c:37:2d:f5:86:e6:b4:79:34:8f:09:63:8d:ac:
                    3c:a6:eb:f6:06:a1:ae:2a:7f:e8:49:fc:3d:33:47:
                    77:5f:7d:5e:eb:e4:fd:a4:4e:c2:cd:39:91:98:6c:
                    b9:c2:bf:22:7b:1c:73:37:eb:01:86:38:35:0a:f6:
                    65:07:03:23:d0:b9:f3:f4:72:c0:cd:cf:dd:60:9a:
                    ad:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5B:38:D6:0B:5F:F4:81:CB:6E:FA:10:C6:AA:EA:07:55:BD:5D:9E
            X509v3 Authority Key Identifier:
                keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cf:5e:f9:1c:24:3c:5a:df:d7:b8:25:c3:15:24:11:5b:b7:
         af:6c:56:18:b6:1f:32:9e:61:3c:e8:c1:7e:f3:b5:63:2c:a3:
         71:9d:f0:db:13:2a:68:a2:69:a4:19:79:2a:89:cb:dd:bc:f6:
         90:08:ec:4b:71:ae:61:f9:6a:7d:de:37:76:20:3b:db:70:08:
         31:1c:55:c7:c0:c9:2b:c7:c3:f9:6a:67:85:c3:7c:e4:4f:9c:
         b1:8d:f0:90:a7:4f:5e:2a:e1:4c:1c:69:9c:de:57:49:6b:ff:
         3d:43:16:6b:b8:0d:84:f4:90:f6:f2:4f:b6:19:98:80:3f:2c:
         a4:87:69:70:70:07:49:f6:32:87:dc:13:61:aa:e1:d6:66:b3:
         e5:83:17:f3:58:8f:36:ed:cd:ae:51:49:a6:92:21:06:4e:d8:
         f4:09:c3:27:d8:75:a0:92:67:3c:bb:03:2b:78:ef:4c:c4:54:
         4c:a3:81:f2:d5:d7:0d:0a:b3:bd:60:8c:e4:85:65:f6:41:69:
         1d:fe:a7:4e:f2:40:c5:92:51:9e:6c:b9:75:36:e8:d0:a0:d5:
         11:ac:4f:cd:03:ca:dc:cc:bb:80:b8:90:d9:8b:a3:eb:63:54:
         4e:56:c9:89:ed:42:63:bd:2e:03:a6:11:c9:49:68:86:95:52:
         a0:06:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:57:35 2025 by rpki-client