This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
File:                     2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json)
Hash identifier:          cuUNZ7GVAbNfGTGbtWRHFRITIAGdWjnpg6qhIbsSdQE=
Subject key identifier:   AA:C6:2E:44:93:76:00:E5:CB:B6:F9:6B:86:58:D9:12:81:DC:E4:ED
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       06F7D384DB02598E6EC466BF4766E3B6B8BAEB81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
Manifest number:          020E
Signing time:             Sat 06 Dec 2025 18:42:21 +0000
Manifest this update:     Sat 06 Dec 2025 18:37:21 +0000
Manifest next update:     Tue 09 Dec 2025 19:15:21 +0000
Files and hashes:         1: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: JCzAZhJKrjcnXPRUzXNAKrf8B2XJvFX+OCG60Nl0Dgk=)
                          2: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: 9H4P2m2Q86+wvaB6C5BWHbuw5/CMaL6D8SYn5Utxj3g=)
                          3: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: 8akbgTHcBzy09cH/zWkvU4LNiBkusQqjKfIeLuC7DA4=)
                          4: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: dcc/bwTW1oTsN+Z0h/Aw94q6mQUdzuyzIAdCoesD/EQ=)
                          5: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: gx3tpaKV7N5rzrAAKhaodE6cBBTT0hr5gjQLFnLH7kc=)
                          6: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: 8FISrQYbnFOpjiQHBztskExqHRou9e+XROYZoHoylq0=)
                          7: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: nyiH5XZRu3exSPXepkvkOwB2m2ULxFRKVzAk8qvL/Rg=)
                          8: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=)
                          9: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: u1/FWvhkUX8NdpjOfCEzIQ83rh9KfgiQw+mbq+Uaf5Y=)
                          10: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: MQCiIDyqzNBQYpoR0MRnkXubNFQEv31SOdbwjwRhFAI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f7:d3:84:db:02:59:8e:6e:c4:66:bf:47:66:e3:b6:b8:ba:eb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Dec  6 18:37:21 2025 GMT
            Not After : Dec  9 19:15:21 2025 GMT
        Subject: CN=AAC62E44937600E5CBB6F96B8658D91281DCE4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:16:9f:6f:a8:91:dd:97:36:fa:28:a6:d3:
                    62:51:d6:b3:a5:f0:d8:20:6d:a1:37:9f:b6:73:20:
                    59:9d:7d:ed:68:0f:30:a5:6e:66:54:c1:ae:8f:35:
                    b6:9d:6e:7c:3e:7f:7d:ec:2a:bb:a6:db:b1:cc:7a:
                    de:0c:98:32:d9:50:4c:58:4b:bb:d4:2e:e0:80:a5:
                    56:a0:8e:e7:73:d1:64:4c:c8:07:f5:d5:3b:5e:0d:
                    45:a5:57:38:58:ea:38:e8:bc:2a:06:28:93:a4:e3:
                    a9:4d:7f:6a:99:aa:04:10:bb:91:8e:75:e5:98:c6:
                    c5:8c:6e:46:34:1a:4e:8a:9d:19:6b:41:97:2b:26:
                    35:d9:c1:de:bd:a5:14:70:c7:bc:8c:44:f5:f7:d3:
                    ae:9e:ac:88:c6:2f:81:ee:f6:bf:bc:38:6f:9a:63:
                    28:6a:2e:b6:93:81:f7:11:8b:df:24:a9:35:42:18:
                    cf:e0:2b:95:ef:b2:e2:47:a9:9f:e2:20:16:29:91:
                    06:fe:6e:fa:3e:59:f9:1f:2e:38:cd:b4:92:e0:b5:
                    b9:53:40:4e:e0:3b:bc:ee:4a:dd:4a:9b:da:67:fe:
                    fb:16:66:ea:cd:b5:39:76:5b:b4:f1:9d:d8:ef:62:
                    46:25:f8:cd:12:f4:2a:41:99:a6:33:3f:7f:0b:0b:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:2E:44:93:76:00:E5:CB:B6:F9:6B:86:58:D9:12:81:DC:E4:ED
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0b:27:93:44:61:5c:1a:5b:e0:5f:41:ce:e3:00:00:53:a3:
         64:75:71:ae:38:d7:61:cf:9c:c6:71:02:14:28:d4:ed:de:2c:
         3c:c6:ba:d5:51:37:99:3b:5f:46:86:5a:bf:5e:f6:70:0d:4e:
         04:7b:80:56:a8:c9:ff:8b:52:ec:bb:26:53:9d:05:83:4c:d2:
         50:52:65:d9:8a:1d:5e:25:d6:25:b4:c0:9e:5c:ec:3e:18:4e:
         85:7b:81:85:e8:57:55:ff:6a:e9:95:b7:c8:ff:26:eb:85:6f:
         5a:78:0d:7c:3e:dc:b8:5e:58:6c:e4:01:de:23:92:97:03:7c:
         4e:65:e9:19:0a:15:9f:c1:f9:6f:4c:7b:12:d3:e4:f1:b1:e7:
         c2:91:53:c1:9a:f3:3e:08:db:0c:a6:c0:54:93:b4:c9:82:cb:
         c3:6f:8b:42:75:f3:f2:70:02:d0:35:a3:af:e7:32:fa:5f:2f:
         f0:2c:25:9a:9d:ee:e3:f3:af:ed:17:b9:66:30:ad:24:1e:b8:
         b6:4f:60:82:86:35:10:c3:68:6d:b5:b2:ad:2b:71:8f:ea:f5:
         b8:c9:b0:d9:50:fd:fe:ce:ad:28:43:ec:93:ca:e2:5f:38:b8:
         36:7e:8b:a0:b0:b6:3b:74:d6:3c:94:cd:fb:5a:5c:8a:b5:66:
         f9:89:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:50:03 2025 by rpki-client