This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File:                     CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier:          GF6I7lp92H8EMAyLfLeuumeUxHY/j052E+nKmu89vrY=
Subject key identifier:   76:13:A9:5A:32:D3:46:4D:1B:67:1E:42:29:38:A7:78:AF:6F:2A:AD
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       1DDE0EFED5EF048D18993128200E94DC0E12B28D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number:          053A
Signing time:             Sat 06 Dec 2025 03:52:27 +0000
Manifest this update:     Sat 06 Dec 2025 03:47:27 +0000
Manifest next update:     Tue 09 Dec 2025 08:40:27 +0000
Files and hashes:         1: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
                          2: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=)
                          3: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
                          4: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
                          5: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: lQqkvBXeoBjwREHIng0V8hfbkoiQnaABRntSWObB7Dg=)
                          6: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
                          7: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
                          8: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
                          9: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
                          10: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
                          11: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
                          12: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
                          13: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
                          14: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
                          15: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
                          16: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 08:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:0e:fe:d5:ef:04:8d:18:99:31:28:20:0e:94:dc:0e:12:b2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Dec  6 03:47:27 2025 GMT
            Not After : Dec  9 08:40:27 2025 GMT
        Subject: CN=7613A95A32D3464D1B671E422938A778AF6F2AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:d9:0c:82:57:e6:f4:fe:cb:f7:71:67:d4:
                    3e:19:56:9c:d9:dc:bf:2d:8f:db:29:a1:aa:28:a7:
                    bc:e9:4e:bb:35:b7:49:df:d0:b2:41:1e:04:d8:20:
                    0a:eb:c7:ac:73:5f:b4:0e:ae:af:28:bb:0a:3d:ab:
                    de:f8:f7:b7:af:f0:3c:b5:c5:df:bf:fa:c9:f9:dd:
                    90:ef:a4:2b:28:6e:12:ae:99:57:61:ff:5b:f0:f3:
                    19:b3:3d:95:39:cf:f7:b0:5d:77:01:df:b7:fd:d2:
                    2b:56:3b:2c:ce:e7:4b:b0:a2:f0:53:2f:b8:a2:f9:
                    b3:3d:6a:95:9d:47:7a:7f:20:5b:a0:db:55:7a:ba:
                    d6:e6:1e:11:e1:4a:10:ef:ce:c9:bd:9c:8a:59:30:
                    0e:df:67:11:2a:e2:d7:37:7f:4f:b5:23:8c:dc:34:
                    21:87:d8:03:3a:c6:c7:13:d1:d8:0c:7f:91:1c:28:
                    c7:9d:31:36:62:bc:ab:80:ef:81:90:22:8d:39:83:
                    b8:38:99:04:8e:18:59:09:35:79:57:f8:ec:32:12:
                    bd:26:ed:5f:47:a0:00:09:76:fe:94:29:84:16:7c:
                    0c:f0:d0:d2:b2:9e:40:cf:f4:82:a2:22:00:7b:97:
                    f1:5d:69:78:84:aa:45:58:43:89:ef:c9:60:52:76:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:13:A9:5A:32:D3:46:4D:1B:67:1E:42:29:38:A7:78:AF:6F:2A:AD
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:38:67:aa:fe:30:17:c0:cc:2e:31:5c:04:97:13:36:32:
         a4:f6:5a:e5:97:a8:2d:a9:46:96:63:ad:31:f1:4a:a2:c8:52:
         ec:02:3f:9e:c2:e1:1e:6a:66:eb:45:57:e3:76:4e:49:60:8d:
         51:81:a0:2c:7c:2d:98:e2:83:85:8e:1c:03:8f:d5:67:72:2a:
         a8:64:e7:40:72:17:07:8d:11:06:83:52:cf:8c:64:30:14:78:
         9a:34:1b:84:6c:8d:d0:32:f0:ca:37:a2:30:c0:bc:e5:c1:4e:
         9f:3b:90:8f:5e:eb:1b:54:3f:c2:d0:ac:15:67:09:e7:6e:31:
         35:f0:52:79:f7:78:4c:37:aa:a2:64:ab:6e:29:cb:dd:42:5c:
         26:0c:b2:f6:1b:be:0b:e6:15:c9:98:fc:3e:37:6f:19:d7:09:
         e9:76:48:48:5a:05:b9:7e:0f:25:a5:1e:17:ce:ce:b4:51:b8:
         df:7b:89:1c:03:46:85:c2:00:fd:f0:2a:fd:31:ef:97:01:b9:
         fe:cb:74:5e:b6:7d:70:3b:83:b6:de:6a:9e:51:d9:b8:14:18:
         75:17:fc:05:cb:33:6b:7b:f3:7a:20:9d:58:27:a7:31:b8:94:
         74:33:04:c0:c8:d5:d6:89:f3:2a:70:2c:b8:4c:47:bf:71:32:
         f4:95:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:54:48 2025 by rpki-client