This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft
File:                     F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft (raw, json)
Hash identifier:          8gpZ6F0SxtSMzcnf1Bdn15xR3e3QJg13zexP47IUyU0=
Subject key identifier:   9A:C6:FD:52:77:89:3F:4D:22:96:F3:A0:2A:A2:16:9B:5C:EB:DE:6C
Authority key identifier: F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A
Certificate issuer:       /CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A
Certificate serial:       7CD351B8561CAB3AF6C2AA348EC2E6FE432C53F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft
Manifest number:          02C1
Signing time:             Fri 05 Dec 2025 05:50:38 +0000
Manifest this update:     Fri 05 Dec 2025 05:45:38 +0000
Manifest next update:     Mon 08 Dec 2025 06:39:38 +0000
Files and hashes:         1: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: 5zbaW1xbLSdresKE5AfyN56h8mwWMq5gXzkIga/AR30=)
                          2: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: c3S8Sv0dGIlGjcnrbLjUcHdin3EJiHMEXQSgcY9POBM=)
                          3: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: KyVMhkhG4VtcKnJeiu0MXlT+/JG0ojfS9TufypkTrUA=)
                          4: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl (hash: oPQsy3wThxNYtGzBn4EgvDmgMOQw2b6KnW/yEC08SbI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl
                          rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 06:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d3:51:b8:56:1c:ab:3a:f6:c2:aa:34:8e:c2:e6:fe:43:2c:53:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A
        Validity
            Not Before: Dec  5 05:45:38 2025 GMT
            Not After : Dec  8 06:39:38 2025 GMT
        Subject: CN=9AC6FD5277893F4D2296F3A02AA2169B5CEBDE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:e0:c7:3b:cd:0f:c6:56:6f:3d:75:4b:77:
                    ee:40:5b:d7:57:16:1a:35:d5:66:65:63:77:8c:98:
                    40:8b:b0:da:c2:fd:7c:5c:f1:2f:fe:2f:6d:9c:2b:
                    d3:7d:d7:d0:93:ea:01:55:ad:84:d8:f0:8c:c3:0e:
                    79:d1:60:e7:62:e1:18:3b:35:e8:9b:e2:a4:80:d4:
                    10:97:d4:21:33:16:e1:48:b6:92:fd:9e:ab:18:3d:
                    a5:44:41:a9:42:e1:8e:e7:86:51:55:b1:27:fa:ed:
                    1a:80:d8:83:9d:66:c3:e1:16:6b:92:96:68:a4:e9:
                    6e:60:c3:08:3f:74:45:5c:c7:c4:42:c8:3a:ff:40:
                    d6:6d:c4:6e:bf:7e:43:c9:97:a7:e4:9a:76:e8:3d:
                    86:a5:32:66:4f:30:1e:0f:3e:7e:e4:18:96:34:db:
                    bb:f4:2b:62:e4:d3:de:f2:4f:cd:9d:7f:31:4f:18:
                    1a:e6:b4:f0:04:b1:55:ff:b7:ad:bb:f1:d7:b3:dd:
                    a0:a2:79:34:9e:ba:77:fa:1d:45:c7:47:78:a0:73:
                    d7:6a:8e:a3:3a:d8:97:50:9d:03:96:62:b4:f4:0a:
                    15:66:aa:82:fd:97:b4:a3:25:68:a6:1c:e2:8f:17:
                    58:f9:e4:b6:e5:c6:d2:7c:e1:48:f4:c3:fd:11:a2:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C6:FD:52:77:89:3F:4D:22:96:F3:A0:2A:A2:16:9B:5C:EB:DE:6C
            X509v3 Authority Key Identifier:
                keyid:F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:82:4b:d3:46:8f:b7:7e:78:58:aa:47:73:14:ff:e6:e9:25:
         72:68:90:e9:72:d2:82:46:26:0f:2a:f6:eb:b9:28:9c:ef:dd:
         21:8a:7b:11:95:e6:f1:c9:8b:5c:43:8b:85:45:32:13:c8:36:
         43:47:a3:fe:99:60:fa:4d:60:8f:74:39:8e:6a:65:e3:f8:99:
         1d:ee:82:4f:86:9c:2f:5c:37:b0:7f:07:be:85:cb:59:46:16:
         29:09:48:d1:33:18:15:9e:75:fc:85:34:fb:b3:bc:e3:3c:05:
         78:a5:36:11:ef:0d:a6:7e:94:7f:84:e6:53:bb:84:7f:68:00:
         fa:58:a1:16:62:b4:81:0f:96:d1:d0:23:0a:d6:70:49:58:1b:
         b7:3d:70:b9:a9:ad:56:73:d1:be:2b:d8:25:39:d4:da:1f:78:
         d5:49:b0:97:60:4a:21:ba:35:ba:bd:a7:e3:35:0d:70:28:d5:
         dc:da:81:b2:33:7e:d7:4e:05:8f:58:2e:0a:2f:2a:26:4b:8b:
         4a:2e:67:9d:28:e2:39:5b:d8:78:2c:0e:86:80:1f:bb:70:c5:
         3b:cc:1c:90:b3:04:a9:17:9a:e9:f4:c2:07:d8:36:f3:ec:7a:
         9b:8a:c1:40:4e:b5:90:ae:51:db:cc:e6:9c:17:97:13:72:87:
         fc:ac:85:dc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfNNRuFYcqzr2wqo0jsLm/kMsU/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFF
ODI4OTg4QTAeFw0yNTEyMDUwNTQ1MzhaFw0yNTEyMDgwNjM5MzhaMDMxMTAvBgNV
BAMTKDlBQzZGRDUyNzc4OTNGNEQyMjk2RjNBMDJBQTIxNjlCNUNFQkRFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVODHO80PxlZvPXVLd+5AW9dX
Fho11WZlY3eMmECLsNrC/Xxc8S/+L22cK9N919CT6gFVrYTY8IzDDnnRYOdi4Rg7
Neib4qSA1BCX1CEzFuFItpL9nqsYPaVEQalC4Y7nhlFVsSf67RqA2IOdZsPhFmuS
lmik6W5gwwg/dEVcx8RCyDr/QNZtxG6/fkPJl6fkmnboPYalMmZPMB4PPn7kGJY0
27v0K2Lk097yT82dfzFPGBrmtPAEsVX/t6278dez3aCieTSeunf6HUXHR3igc9dq
jqM62JdQnQOWYrT0ChVmqoL9l7SjJWimHOKPF1j55LblxtJ84Uj0w/0RomebAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmsb9UneJP00ilvOgKqIWm1zr3mwwHwYDVR0j
BBgwFoAU8TZMi2LQqO3/LrfOVWmAEegomIowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NjVmYTk4Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC9GMTM2NEM4QjYy
RDBBOEVERkYyRUI3Q0U1NTY5ODAxMUU4Mjg5ODhBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFFODI4
OTg4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi
OWQtMjg3Mzc4YTRjZTg3LzAvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgw
MTFFODI4OTg4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFiCS9NGj7d+eFiqR3MU/+bpJXJokOly0oJG
Jg8q9uu5KJzv3SGKexGV5vHJi1xDi4VFMhPINkNHo/6ZYPpNYI90OY5qZeP4mR3u
gk+GnC9cN7B/B76Fy1lGFikJSNEzGBWedfyFNPuzvOM8BXilNhHvDaZ+lH+E5lO7
hH9oAPpYoRZitIEPltHQIwrWcElYG7c9cLmprVZz0b4r2CU51NofeNVJsJdgSiG6
Nbq9p+M1DXAo1dzagbIzftdOBY9YLgovKiZLi0ouZ50o4jlb2HgsDoaAH7twxTvM
HJCzBKkXmun0wgfYNvPsepuKwUBOtZCuUdvM5pwXlxNyh/yshdw=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:51 2025 by rpki-client