This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File:                     CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier:          US98VzuIeD3ghQ2bpI5IvsUfBJRaP5/wp6dh2wpG63I=
Subject key identifier:   54:A1:E8:CD:68:1A:67:FB:C8:B6:21:BD:B7:A1:D4:E1:76:8E:D2:E2
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       4C25DDA5AD53EC002337F86F329EDD0588D9BFD9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number:          053F
Signing time:             Wed 17 Dec 2025 09:05:06 +0000
Manifest this update:     Wed 17 Dec 2025 09:00:06 +0000
Manifest next update:     Sat 20 Dec 2025 18:13:06 +0000
Files and hashes:         1: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
                          2: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
                          3: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: /oo51LQQ8scKv2gz7/Rl0u407ngYD3zqVZZiodNuJGo=)
                          4: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
                          5: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
                          6: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
                          7: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
                          8: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
                          9: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
                          10: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
                          11: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
                          12: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
                          13: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=)
                          14: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
                          15: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
                          16: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 18:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:25:dd:a5:ad:53:ec:00:23:37:f8:6f:32:9e:dd:05:88:d9:bf:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Dec 17 09:00:06 2025 GMT
            Not After : Dec 20 18:13:06 2025 GMT
        Subject: CN=54A1E8CD681A67FBC8B621BDB7A1D4E1768ED2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:80:d9:7e:e8:02:c6:e6:94:c2:12:70:e1:
                    33:84:9b:9d:b8:28:66:ba:c0:f4:9f:36:51:14:f4:
                    a7:15:ea:37:55:bc:29:ca:12:3c:a4:0b:df:b5:17:
                    e3:c0:21:53:5e:25:b2:d6:af:89:6a:29:53:df:47:
                    9b:81:11:0d:a8:80:54:f2:a4:1a:38:96:f0:25:e6:
                    b1:f3:29:28:54:26:69:82:bb:f5:0a:50:ec:60:32:
                    90:7c:fb:b2:f9:a9:95:1d:ee:42:30:bd:77:ac:54:
                    59:73:6b:59:40:40:06:33:d1:b7:a2:df:06:28:90:
                    a8:76:74:15:72:91:5b:ac:43:2c:90:df:88:3b:2c:
                    d9:fb:c6:9f:6e:52:3e:f2:5d:5c:c3:e8:50:e9:72:
                    46:1e:e0:ac:d6:b1:ee:48:ea:1b:da:40:37:1c:7e:
                    34:f8:c8:24:e7:f9:7b:0a:a0:ad:c9:78:5a:76:93:
                    31:8e:21:ed:c0:5b:00:c3:1b:63:9a:da:8a:0e:31:
                    de:c1:90:14:9e:15:62:45:f5:f6:ec:16:64:f8:b6:
                    87:b1:e9:85:39:30:cf:69:7a:58:8a:ca:c8:6a:22:
                    7d:13:67:4e:3c:a9:37:00:d5:4e:8e:61:fe:46:96:
                    2a:73:e4:80:ba:1c:18:6b:0a:13:5d:e5:29:4b:79:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A1:E8:CD:68:1A:67:FB:C8:B6:21:BD:B7:A1:D4:E1:76:8E:D2:E2
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:4a:35:ed:67:f9:d3:83:e4:7e:ec:fc:38:13:02:96:1e:51:
         7a:27:3d:42:fe:1c:8f:97:df:11:7f:77:a3:fc:b0:33:ce:fc:
         a3:eb:2b:69:42:17:d1:5a:f7:a7:c2:87:d7:8b:3b:68:a2:42:
         0d:44:c9:08:71:37:5a:62:10:1d:9b:11:fc:1e:e1:ad:c7:d9:
         58:0a:5a:f0:49:72:88:12:e1:21:42:c2:c6:db:dd:fb:27:2e:
         cf:58:37:04:1a:7e:ef:c2:5c:6a:a8:97:28:8b:a4:0e:e0:67:
         03:d2:ea:9c:ad:67:d3:a6:08:cd:a6:93:29:27:d8:c5:83:cc:
         2f:70:75:b4:d0:3e:a9:fc:a7:52:e8:83:0b:7f:a9:d6:77:c3:
         87:b2:75:3c:5b:d5:e8:02:45:15:73:03:70:e3:31:a7:5d:30:
         ac:d1:ab:80:65:00:6e:11:ca:69:b1:fd:4c:60:20:f3:57:9d:
         3f:c3:60:95:56:74:b4:d9:cf:75:2d:8c:fb:eb:44:09:dd:3c:
         7b:35:33:95:ba:2f:70:2e:3a:ca:d8:86:e1:b1:3b:a8:45:9d:
         5a:48:e8:a9:45:34:36:f6:0e:38:d0:fa:d8:e9:f2:5d:89:38:
         85:27:8c:37:6b:e5:ac:5a:9d:54:3c:9a:3d:36:8e:6a:25:4f:
         c1:25:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:22:45 2025 by rpki-client