This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
File:                     08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json)
Hash identifier:          0a6vwWKAXWHJTuWDH6mdakVvg4DjUFdHXaNouRbDHBY=
Subject key identifier:   21:C5:41:AD:68:D3:36:04:6B:DC:1C:CC:A9:9E:D2:C4:22:10:3F:76
Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25
Certificate issuer:       /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
Certificate serial:       537AD493C9BBA3B942915595FD16AE8604138AF5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
Manifest number:          0541
Signing time:             Sat 06 Dec 2025 20:41:43 +0000
Manifest this update:     Sat 06 Dec 2025 20:36:43 +0000
Manifest next update:     Wed 10 Dec 2025 02:53:43 +0000
Files and hashes:         1: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: U9D771UuAkGUw+fqOOekyqrm8y2+seArJf4nwvuYawE=)
                          2: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: 63Tfw81BZTddeb+f1H4wsRimzGD5u+l/4PZBmxazTmA=)
                          3: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: xpIpnLctgV8IvR/95nZhbbNFRCrOenQ8KDE2o6OGJuo=)
                          4: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: 7kJ8hajX2rvSo00lJwvfDC8ajIDz3XGExMMDFGeILBk=)
                          5: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=)
                          6: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=)
                          7: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: pfUFTVsuIPjmnx0LWYbFiwDyhGMbxuFA/hftBufAVsk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl
                          rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7a:d4:93:c9:bb:a3:b9:42:91:55:95:fd:16:ae:86:04:13:8a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
        Validity
            Not Before: Dec  6 20:36:43 2025 GMT
            Not After : Dec 10 02:53:43 2025 GMT
        Subject: CN=21C541AD68D336046BDC1CCCA99ED2C422103F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a5:ab:41:79:e9:e8:b7:6c:a0:d3:88:c3:1b:
                    42:b9:49:12:f7:f5:ef:c8:db:b7:ee:a5:65:ce:04:
                    12:1c:80:55:87:2f:e7:96:62:99:34:de:50:16:40:
                    28:94:3c:69:43:03:81:3b:77:50:98:bd:83:9d:cd:
                    82:a3:c4:5f:02:d2:29:dc:cb:10:7e:e0:0e:50:53:
                    00:75:2a:05:89:e3:ec:47:7e:3b:0e:cf:50:99:16:
                    d0:74:08:07:c1:ba:68:b3:b4:fe:44:4d:e2:24:ca:
                    fe:ba:16:4c:2b:0d:3e:76:d5:89:fb:98:6c:4a:ec:
                    36:37:e0:99:30:4d:4d:50:88:8a:bf:d7:2d:17:2f:
                    a4:69:49:1a:fd:c0:32:32:3f:e5:f0:62:ed:85:57:
                    dd:0e:61:1a:fb:0e:f9:db:46:93:c4:30:fb:58:47:
                    35:bc:4a:57:26:f7:fb:c0:fc:4c:df:35:12:10:e8:
                    89:9a:f2:68:e0:8e:2d:87:16:18:e6:a5:26:1b:d9:
                    f7:b8:22:e6:8d:c4:16:8a:a5:3c:b1:2f:1b:a1:01:
                    19:a7:6f:85:a5:0e:d8:2c:b7:e4:d3:ee:e8:f9:65:
                    14:db:4b:94:0b:b6:d7:f8:94:58:2f:94:1a:b6:ba:
                    ce:7c:7a:bd:00:f6:d8:fd:8f:7b:40:6f:47:17:6d:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:41:AD:68:D3:36:04:6B:DC:1C:CC:A9:9E:D2:C4:22:10:3F:76
            X509v3 Authority Key Identifier:
                keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a1:52:57:eb:5d:d1:14:e0:0d:61:40:e1:7b:a3:7d:4a:5e:
         a7:1e:b1:c2:2e:e0:2b:78:11:39:a6:27:fc:39:9a:12:bf:cc:
         12:64:f8:71:bb:fe:40:03:de:2c:b1:9b:d7:ca:aa:1b:1d:d9:
         35:e6:35:1e:9e:fc:2e:4c:07:07:31:f3:7c:b4:28:9b:b9:db:
         74:1a:32:74:6d:1d:34:27:f6:63:cd:2e:0a:36:00:d5:bf:c6:
         07:61:c0:d3:fe:ca:30:ae:c0:3d:db:f1:7c:04:07:1a:8c:aa:
         53:13:04:17:93:bc:69:24:ad:11:50:b2:af:d0:ed:ec:3c:db:
         95:88:f1:8f:36:31:1e:29:f8:cb:09:98:9b:c7:9a:4a:66:4f:
         f0:00:75:ef:01:19:ea:6f:29:ee:62:8f:cf:5a:d9:a1:26:07:
         9b:db:ea:75:7c:a3:fe:c1:54:44:f1:11:a1:e5:c1:f6:61:d9:
         55:6a:40:0f:37:ba:02:fd:e7:82:26:ab:ef:98:cf:2b:f0:82:
         93:6e:6a:91:07:2c:02:88:90:e5:ca:90:3f:76:04:c6:28:61:
         55:85:86:38:2b:68:b5:c8:82:19:81:a1:a8:bc:8f:c1:97:49:
         c6:df:33:b5:fa:cb:3d:79:48:2f:8d:e4:10:c4:67:54:5d:a0:
         5e:62:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:43:15 2025 by rpki-client