This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
File:                     3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json)
Hash identifier:          5swXsuwwsmEoyn/Q/cRzF/45ojxoZ1OEnbKZ3pzUSVc=
Subject key identifier:   FD:FD:43:78:97:B1:4D:16:1B:A3:50:18:A4:D2:C2:77:67:DD:0D:21
Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
Certificate issuer:       /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Certificate serial:       2DBFA8883AE82044A812841CB08F425F703B7B38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
Manifest number:          01FC
Signing time:             Fri 05 Dec 2025 03:51:43 +0000
Manifest this update:     Fri 05 Dec 2025 03:46:43 +0000
Manifest next update:     Mon 08 Dec 2025 10:29:43 +0000
Files and hashes:         1: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: zGHZkU5k291Inw51iFTMWdBZFLAUaohzkgU1ZQwxFDU=)
                          2: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: tR60fCiZjd5v06AalA8X8w/5DLly0Afx7eBLVEc/3V8=)
                          3: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: xiMw3g54rwkg5pTrfUcRFVEPY6CzUbv7I+jMZseSJVM=)
                          4: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: vkTrRrCDHhU76EnONL3nxnhmmXwfDkffjUohD8cWjx8=)
                          5: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: BHHFTjLTNMFtSq5idTfwLT9M3wuRjM3mExKv2SVRdKc=)
                          6: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: bmUaC8QF2Qe4Z7nZ16NBvJcYRhSFqhjOc2UpYEbn/vA=)
                          7: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: QfPnU4HDxcvt1G/5gTHPJ/Dp2M6HSpvnSOpvvA6HYns=)
                          8: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT26BOddfxbCQwV3l1VwMkd/4U8F416/+EJn9EJQonk=)
                          9: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
                          rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 10:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bf:a8:88:3a:e8:20:44:a8:12:84:1c:b0:8f:42:5f:70:3b:7b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
        Validity
            Not Before: Dec  5 03:46:43 2025 GMT
            Not After : Dec  8 10:29:43 2025 GMT
        Subject: CN=FDFD437897B14D161BA35018A4D2C27767DD0D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:8e:29:3a:72:5b:cb:58:f2:7b:5f:32:a5:
                    26:ad:51:54:07:7b:d7:36:8c:7b:c5:6b:c8:5b:4a:
                    a4:18:22:8b:d6:c4:ad:8c:74:d7:8c:29:57:ad:4c:
                    35:f4:24:65:ad:0d:3e:2a:eb:80:85:44:d7:14:3d:
                    71:54:11:31:71:6a:04:71:44:df:94:c3:31:b7:a2:
                    27:93:37:2b:fa:88:d1:b5:03:5a:9d:dc:11:6b:14:
                    9b:97:e9:ae:f0:ca:5a:ed:41:1e:ca:52:ad:d1:58:
                    47:69:37:03:1f:5f:a7:1a:a9:86:51:e3:3d:09:e3:
                    8d:d8:ad:8f:88:64:9c:91:ee:f2:96:37:4e:ca:59:
                    a4:32:5d:28:c0:45:c5:b2:79:ba:9f:f2:8e:7e:4f:
                    b8:c0:77:ad:b6:b6:48:be:fd:3d:5f:16:24:4f:42:
                    ee:b7:36:ba:bc:ec:02:7e:00:c4:98:a0:b9:20:08:
                    89:bd:5d:02:5a:6c:fe:11:9a:93:57:2b:8d:2b:aa:
                    2f:ee:21:89:6a:70:b4:85:3c:92:ad:74:ee:a8:b3:
                    44:ca:7b:90:3c:0f:36:0a:cd:a0:00:04:df:a0:68:
                    76:b4:25:fd:ef:82:fa:6a:45:76:3d:03:c5:70:76:
                    c4:ea:6b:8c:9f:dd:30:52:20:05:fa:09:99:49:0b:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FD:43:78:97:B1:4D:16:1B:A3:50:18:A4:D2:C2:77:67:DD:0D:21
            X509v3 Authority Key Identifier:
                keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:68:35:36:ed:25:11:be:1f:a6:49:5e:86:23:2b:4a:34:fb:
         77:32:71:e7:37:81:b5:43:20:05:74:3c:ae:eb:ca:5d:50:2c:
         92:c0:39:41:7b:45:0f:19:76:4a:c2:c1:59:c3:54:2a:24:a1:
         ba:cb:37:40:ad:ca:06:d5:2d:6b:4f:06:34:0f:09:31:40:77:
         22:ec:db:b7:78:fc:40:34:cf:06:88:78:8d:5b:6c:92:2f:bb:
         a1:43:46:d5:65:66:1d:e4:9f:59:2f:30:fb:be:49:46:61:ef:
         32:f2:d6:39:15:5b:81:12:f0:26:37:40:9f:fa:9e:60:4d:bd:
         90:77:52:9a:a7:c2:14:0d:60:94:b2:41:9e:21:fc:10:e7:2c:
         d3:12:52:ca:31:a5:f4:c9:79:2c:d8:eb:54:0a:ae:a8:4f:b8:
         44:56:18:ee:81:f1:c1:82:1d:f1:29:cb:51:83:cf:5d:42:a9:
         e2:78:75:b5:8e:7f:58:1b:9e:30:91:ff:a5:04:86:24:81:82:
         b7:41:d0:10:0a:83:9b:01:f4:10:b6:5a:07:fa:bf:61:bf:c2:
         e3:e7:18:76:ad:1e:c0:5a:a9:b7:3a:6f:97:a7:bb:54:5e:1e:
         5b:ce:39:01:62:71:eb:ef:b6:c7:15:8d:44:3c:84:1d:db:93:
         59:e8:d0:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULb+oiDroIESoEoQcsI9CX3A7ezgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2
NDg5MkMyNTAeFw0yNTEyMDUwMzQ2NDNaFw0yNTEyMDgxMDI5NDNaMDMxMTAvBgNV
BAMTKEZERkQ0Mzc4OTdCMTREMTYxQkEzNTAxOEE0RDJDMjc3NjdERDBEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkY4pOnJby1jye18ypSatUVQH
e9c2jHvFa8hbSqQYIovWxK2MdNeMKVetTDX0JGWtDT4q64CFRNcUPXFUETFxagRx
RN+UwzG3oieTNyv6iNG1A1qd3BFrFJuX6a7wylrtQR7KUq3RWEdpNwMfX6caqYZR
4z0J443YrY+IZJyR7vKWN07KWaQyXSjARcWyebqf8o5+T7jAd622tki+/T1fFiRP
Qu63Nrq87AJ+AMSYoLkgCIm9XQJabP4RmpNXK40rqi/uIYlqcLSFPJKtdO6os0TK
e5A8DzYKzaAABN+gaHa0Jf3vgvpqRXY9A8VwdsTqa4yf3TBSIAX6CZlJC+WhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/f1DeJexTRYbo1AYpNLCd2fdDSEwHwYDVR0j
BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx
NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5
MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2
ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG
REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIloNTbtJRG+H6ZJXoYjK0o0+3cycec3gbVD
IAV0PK7ryl1QLJLAOUF7RQ8ZdkrCwVnDVCokobrLN0CtygbVLWtPBjQPCTFAdyLs
27d4/EA0zwaIeI1bbJIvu6FDRtVlZh3kn1kvMPu+SUZh7zLy1jkVW4ES8CY3QJ/6
nmBNvZB3UpqnwhQNYJSyQZ4h/BDnLNMSUsoxpfTJeSzY61QKrqhPuERWGO6B8cGC
HfEpy1GDz11CqeJ4dbWOf1gbnjCR/6UEhiSBgrdB0BAKg5sB9BC2Wgf6v2G/wuPn
GHatHsBaqbc6b5enu1ReHlvOOQFicevvtscVjUQ8hB3bk1no0CI=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:15 2025 by rpki-client