This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
File:                     1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft (raw, json)
Hash identifier:          btNTTlyA3MtsjsRVUGM1Ipiq//Ml7Om+qpX8C8854+k=
Subject key identifier:   01:76:B8:D4:83:8E:AE:9F:3F:3C:14:25:D5:85:32:99:5B:29:3F:FC
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       17679179EA2D2EBA1167B45E5B5BBDCED11E16B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
Manifest number:          020C
Signing time:             Fri 05 Dec 2025 11:31:39 +0000
Manifest this update:     Fri 05 Dec 2025 11:26:39 +0000
Manifest next update:     Mon 08 Dec 2025 13:30:39 +0000
Files and hashes:         1: 34392e35302e342e302f32332d3233203d3e203436303234.roa (hash: UYaCog++0gqvsXDea9mZnkKimC89Lnd8uWKZu9Blm80=)
                          2: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (hash: 3Kl0ykpc+rRNPwjYjMx54Tqd+CRH2FVLtk851hbh3Rs=)
                          3: 34332e3234392e3230392e302f32342d3234203d3e203435323938.roa (hash: HKEFlGd3fuMjLaak9jaJVW3JC6xTjvu6XpG5EhM3CNI=)
                          4: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (hash: ICLKoH8LfO9RPqo2cawJT61bywbgOJprlh0DKtnFRUE=)
                          5: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (hash: P8D28JKFM06MNi05ib5wcU9FclilcMp00khEQOaFKnw=)
                          6: 3138322e31362e3235302e302f32342d3234203d3e203435323938.roa (hash: x0aTPjrDPj2tG+isyUHS4PYr+Z/d0GFTwX/xZzQ4/Ng=)
                          7: 3138322e31362e3234372e302f32342d3234203d3e203435323938.roa (hash: 4amRYbhJJSDWXkkRhhbgFlFkWrr2hCXvNhf2mcpgA/s=)
                          8: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl (hash: v/tWNd4/E5BhHtXxFpbmZG4shgvOB7l98Pp8N3qqbG8=)
                          9: 3138322e31362e3234322e302f32342d3234203d3e203435323938.roa (hash: uhBFE26V8tIU7PQEDrMRdIxjx5J3XkgvP9oT8QwvDXE=)
                          10: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (hash: 76H0qrG4Uy5/8aWW6KHmL8OdUAxhoKIYB8VrEwRt7hA=)
                          11: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (hash: hBeqiHGxmy6NCMgmNV6p5ha99Si74kGBcjRNx7S7+Rw=)
                          12: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (hash: ZBvkqi4wu7ycsgvkdgZN2UrIQ3x4XvFGJe42h/LvuEk=)
                          13: 3138322e31362e3235322e302f32342d3234203d3e203435323938.roa (hash: /v0Cr6fAOvdJvYC4l4q8Wzedl9V95Oxul6gOFuLUT4s=)
                          14: 34392e35302e352e302f32342d3234203d3e203436303234.roa (hash: +bXCaBbua6T2KBv/snNdo+ibMSi47YiRL7LuzmtTWcA=)
                          15: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (hash: mn89fCBpa1L+r4Zi4IcWuFHARAg3/d1uhObCHoGGpiQ=)
                          16: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (hash: an5W/cXaXaYModPf+N6XOmKZ/Cp6c1fvWdj3PKqPfww=)
                          17: 3138322e31362e3235332e302f32342d3234203d3e203435323938.roa (hash: 7tSE7KkWcsihzvchBrW5YTBm20JcWETuKHlir2V2b+Y=)
                          18: 3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (hash: uiNs4PF5jn59nxQSw5oyyEUEF1jh8DIcSo1Ma1LzQ/Y=)
                          19: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (hash: zyocrG2hpeP9qlrJD0AmGWe005OQobfbPO7J468S0C0=)
                          20: 3138322e31362e3235312e302f32342d3234203d3e203435323938.roa (hash: Mt1DXYTW3OSb5Bm3PeVFWr97+FI1i3tLsNyzndoYvcM=)
                          21: 34392e35302e342e302f32342d3234203d3e203436303234.roa (hash: ZHh4TwmNkfiSfrilBWgPwnleDnUmWbiEe9KNZbEdlK8=)
                          22: 3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (hash: Br2zhO2mtWf4byMN5oW5IF0fqGbzZ4jKe7O7XXXytF4=)
                          23: 3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (hash: ayee7O41lSuhdkX8kgFCAyEZoZeltyZMUPLzbervZDg=)
                          24: 3138322e31362e3235352e302f32342d3234203d3e203435323938.roa (hash: Ih6LaUurzUOWghMvWPDG/3giShb9DXnYrcHVYKod+qY=)
                          25: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (hash: 9GPvbzS14nrsGqBa86Psp3VYtnnpTdNwmEPZ8WpOVfk=)
                          26: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (hash: bHqpsq84uIhoWcWxe7oYJq3JF/6gomerkmgGc5KSkIk=)
                          27: 34332e3234392e3231302e302f32342d3234203d3e203435323938.roa (hash: k7dWhdkZK9UJDfOHlX9DtKI4ltVhma3w/Rs97O9liQA=)
                          28: 3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (hash: ofYpfyIwrFc3EyGc5HbuOjiaT8PI5lzgpR6J06rc1og=)
                          29: 3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (hash: yNFLxX05WMZzMi6ZeEGl6RBki5EIiqpoaz15mWF+Us4=)
                          30: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (hash: 1w/9LRyUE06eBEdRnx71e6cTE3cd85bkpMBBImnruAE=)
                          31: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (hash: dInQPRjkGOWRH1BIDOtz9jdXpBLceJN8qrYrHJtpPKc=)
                          32: 3230322e34332e37322e302f32332d3233203d3e203435323938.roa (hash: CmCK8ZpA/FudP6hIFHJcphPOJ9k3R40wP9Auosw941k=)
                          33: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (hash: uqHQK1i4at+YRbQKPp9nCOZWuomqh/0ErADJ9NJSjx0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 13:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:67:91:79:ea:2d:2e:ba:11:67:b4:5e:5b:5b:bd:ce:d1:1e:16:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Dec  5 11:26:39 2025 GMT
            Not After : Dec  8 13:30:39 2025 GMT
        Subject: CN=0176B8D4838EAE9F3F3C1425D58532995B293FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:25:4f:07:ba:7f:1a:b9:f7:d8:21:39:bc:
                    20:2f:a5:4f:be:8a:f2:d0:8b:e1:9e:56:6d:9e:2b:
                    ea:27:48:a1:ca:5a:5e:b9:dd:ef:59:93:d1:75:d2:
                    f7:4b:ef:b0:b7:db:37:b7:ee:20:51:67:79:37:88:
                    f5:10:4c:45:9c:1f:52:e9:1d:cc:89:ff:02:2f:85:
                    25:e4:e8:10:7c:b8:b6:51:0f:e4:a9:37:48:83:79:
                    bb:a6:cb:44:9b:05:06:55:ac:4f:88:d6:84:53:8c:
                    30:68:ce:26:db:ae:d4:12:3c:97:3f:80:bd:b0:21:
                    11:76:13:ff:10:ca:da:f2:fe:74:8c:78:e8:7f:5f:
                    ff:cf:63:62:12:00:90:52:43:44:aa:31:20:70:44:
                    b4:e8:73:d9:36:c2:07:19:9c:86:56:8d:69:9a:e1:
                    c1:19:c5:94:b4:85:42:06:ba:60:e6:92:1f:a8:d2:
                    6c:8b:c3:e8:16:dd:b8:75:b5:89:56:fb:1e:d3:f9:
                    d4:bc:50:4a:f1:b2:d6:27:6d:bc:67:b1:57:e4:86:
                    e1:e1:35:ad:f7:6a:a0:10:ca:54:68:5b:48:51:ae:
                    8d:df:51:a9:5c:c4:9a:6b:9e:7c:ad:fc:f8:67:f9:
                    1c:2f:49:3e:22:75:16:9e:e9:13:45:cc:95:f7:b3:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:B8:D4:83:8E:AE:9F:3F:3C:14:25:D5:85:32:99:5B:29:3F:FC
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:0a:80:5b:81:34:ad:74:69:d0:bb:d1:be:f7:c2:a7:33:
         cf:7e:ef:5f:eb:68:58:43:ba:08:8f:92:ca:ca:18:03:4c:68:
         53:bc:d0:e6:ce:e3:d1:cc:00:f5:01:2e:8a:4c:57:42:89:5b:
         51:b1:36:fc:90:92:bb:be:ac:b2:dd:47:59:97:38:60:e4:1b:
         71:59:2f:16:58:ab:db:b6:ef:6c:fa:02:69:92:c4:8e:48:e8:
         b5:dc:86:39:2f:40:f8:64:b0:b1:1e:ea:c9:37:55:32:d6:b8:
         41:4c:48:35:a0:7d:ab:56:c5:fa:43:31:83:c4:c4:87:e6:f9:
         b4:a3:32:24:80:e0:1b:dc:49:6f:ea:3f:64:44:0a:c3:db:20:
         73:16:53:21:cc:ed:e1:d5:66:dc:e2:4d:5d:65:76:2f:26:c6:
         11:a1:07:a7:0c:1a:a6:23:e9:d8:7c:97:4f:3e:f7:54:45:14:
         42:ed:5c:21:d8:83:dd:64:dd:4e:e9:a8:af:cf:dc:ab:c2:de:
         3b:3e:c5:20:20:d3:76:e0:54:36:13:aa:62:37:23:a6:1b:0e:
         d2:2a:01:bf:7e:ae:91:ac:50:42:f3:86:d7:80:a9:2a:4b:91:
         e1:0c:9a:22:27:0f:f1:56:3e:ae:66:fb:c5:eb:f0:fe:65:be:
         bd:4b:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:09:38 2025 by rpki-client