This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
File:                     07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json)
Hash identifier:          fn+DH8CA9wEk0Lsn7GjKJKjfqg8nrko6PwxLUFfH/oI=
Subject key identifier:   65:15:61:BE:6E:3C:CA:3B:BE:F4:72:A9:D1:C0:7F:DC:07:5D:C9:3E
Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
Certificate issuer:       /CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Certificate serial:       55D96C8CE8101CF70CB8C0137994DB834183A959
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
Manifest number:          80
Signing time:             Fri 05 Dec 2025 22:51:23 +0000
Manifest this update:     Fri 05 Dec 2025 22:46:23 +0000
Manifest next update:     Mon 08 Dec 2025 23:19:23 +0000
Files and hashes:         1: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=)
                          2: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=)
                          3: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: P02QGX65weKE1lGuHUmYAO61zYCq9vAXJpNGkK3VTvo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl
                          rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d9:6c:8c:e8:10:1c:f7:0c:b8:c0:13:79:94:db:83:41:83:a9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45
        Validity
            Not Before: Dec  5 22:46:23 2025 GMT
            Not After : Dec  8 23:19:23 2025 GMT
        Subject: CN=651561BE6E3CCA3BBEF472A9D1C07FDC075DC93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:59:4a:0f:9b:10:ad:4d:c6:7e:a9:44:77:b2:
                    cc:c2:80:b2:e3:a1:c8:b9:7d:ab:f3:65:bb:58:2a:
                    4c:42:5d:33:88:1f:35:81:d1:3c:c2:73:a7:17:15:
                    07:95:03:3b:52:22:3b:56:5b:5d:64:13:68:0c:e3:
                    c6:af:74:33:f6:cf:f9:9b:6b:18:d2:f9:d5:fb:30:
                    c5:87:b2:36:4e:d4:cf:fb:18:89:e0:82:89:b6:ec:
                    89:77:30:1b:24:39:0f:20:fc:3a:f8:04:c7:eb:fa:
                    12:85:33:f1:13:18:06:4f:b7:99:2d:1f:90:bd:5c:
                    61:ce:1a:b1:da:36:0b:ee:99:ea:d8:cf:96:b2:dd:
                    bf:5a:5a:65:d7:6f:e7:14:be:c6:c2:e7:2f:2d:40:
                    78:08:fd:3d:fb:9f:b3:5e:61:9b:6b:f5:9b:74:14:
                    20:7c:f2:aa:ec:03:12:53:ba:65:33:b4:72:50:16:
                    7c:83:9c:69:80:7b:18:66:75:25:a0:04:72:ad:13:
                    38:b2:83:1a:c9:78:b6:14:ff:ee:44:e5:d7:87:d9:
                    53:59:da:c7:42:80:e7:ec:4a:b9:f6:19:34:63:47:
                    1d:4a:0c:47:a0:46:09:64:9f:42:fd:ba:82:a6:39:
                    0b:d4:46:81:83:7b:f1:17:4c:db:4c:9b:a7:47:e2:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:15:61:BE:6E:3C:CA:3B:BE:F4:72:A9:D1:C0:7F:DC:07:5D:C9:3E
            X509v3 Authority Key Identifier:
                keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:60:13:7a:20:41:c2:93:f4:5c:9a:7c:5e:93:94:a9:50:
         4c:6b:55:64:e5:1f:87:68:87:e6:ac:ec:a8:51:af:13:2a:94:
         8c:16:7c:3c:a4:c1:45:c7:d7:0b:7f:29:e6:01:84:fa:12:d0:
         66:38:b3:a4:d2:d9:8f:06:3b:11:19:6d:ac:43:e5:ee:72:60:
         12:5d:99:c1:52:6f:e4:b4:04:4c:7e:6e:1b:d0:ca:98:82:35:
         3b:a5:3f:6d:7a:ae:6b:1f:73:95:b4:b4:77:ff:53:7c:cd:96:
         2c:e4:e4:10:53:5e:78:1e:43:24:50:22:24:6d:0b:20:a6:d4:
         39:b3:ad:b8:14:0c:a2:92:ad:95:eb:36:60:c1:01:0f:7b:f9:
         fe:d3:34:e5:d3:d0:22:a9:41:68:08:35:f6:cb:da:85:45:57:
         8f:0e:07:89:04:a3:31:22:a1:13:50:c9:aa:47:93:1d:72:3d:
         97:b9:d0:46:c2:4d:87:1a:20:97:74:fa:95:13:70:e1:f3:35:
         a2:90:ad:7c:7e:66:60:3a:9d:8d:05:7a:65:ad:f0:00:26:ed:
         f7:cf:97:88:c3:db:93:9a:76:47:64:4f:98:7a:97:fe:1e:ce:
         8e:a1:ea:c6:c5:09:8b:67:c7:b9:a7:9b:69:a4:a8:93:04:88:
         2a:19:c0:c3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVdlsjOgQHPcMuMATeZTbg0GDqVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw
QzI2NUQ0NTAeFw0yNTEyMDUyMjQ2MjNaFw0yNTEyMDgyMzE5MjNaMDMxMTAvBgNV
BAMTKDY1MTU2MUJFNkUzQ0NBM0JCRUY0NzJBOUQxQzA3RkRDMDc1REM5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWUoPmxCtTcZ+qUR3sszCgLLj
oci5favzZbtYKkxCXTOIHzWB0TzCc6cXFQeVAztSIjtWW11kE2gM48avdDP2z/mb
axjS+dX7MMWHsjZO1M/7GInggom27Il3MBskOQ8g/Dr4BMfr+hKFM/ETGAZPt5kt
H5C9XGHOGrHaNgvumerYz5ay3b9aWmXXb+cUvsbC5y8tQHgI/T37n7NeYZtr9Zt0
FCB88qrsAxJTumUztHJQFnyDnGmAexhmdSWgBHKtEziygxrJeLYU/+5E5deH2VNZ
2sdCgOfsSrn2GTRjRx1KDEegRglkn0L9uoKmOQvURoGDe/EXTNtMm6dH4t0dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZRVhvm48yju+9HKp0cB/3AddyT4wHwYDVR0j
BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx
MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2
NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2
MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy
MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF6dYBN6IEHCk/Rcmnxek5SpUExrVWTlH4do
h+as7KhRrxMqlIwWfDykwUXH1wt/KeYBhPoS0GY4s6TS2Y8GOxEZbaxD5e5yYBJd
mcFSb+S0BEx+bhvQypiCNTulP216rmsfc5W0tHf/U3zNlizk5BBTXngeQyRQIiRt
CyCm1DmzrbgUDKKSrZXrNmDBAQ97+f7TNOXT0CKpQWgINfbL2oVFV48OB4kEozEi
oRNQyapHkx1yPZe50EbCTYcaIJd0+pUTcOHzNaKQrXx+ZmA6nY0FemWt8AAm7ffP
l4jD25OadkdkT5h6l/4ezo6h6sbFCYtnx7mnm2mkqJMEiCoZwMM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:04 2025 by rpki-client