This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
File:                     F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json)
Hash identifier:          PkuaM8htHI2alxeUWcUFaAjjliVR0cm10z21H/8J7OI=
Subject key identifier:   1B:23:B3:6D:7F:19:DB:81:1B:8F:AB:35:A1:F4:17:1A:16:2D:D3:FB
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Certificate issuer:       /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial:       493869825EA5517354ACC642AF248187161B710B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
Manifest number:          01CA
Signing time:             Fri 05 Dec 2025 09:02:41 +0000
Manifest this update:     Fri 05 Dec 2025 08:57:41 +0000
Manifest next update:     Mon 08 Dec 2025 12:09:41 +0000
Files and hashes:         1: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: NYY0i2hycJDZMAWkhMI1MwXrSLzfIpid9oGLQQbdYaY=)
                          2: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: nybBbZermRnfCAlPFTR2ETmDBv6TPrDdj8bK6gzLTv0=)
                          3: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: uH7Yykg71jP1VkPGgxNuX7EouajeURB+bw3/u+w3tXE=)
                          4: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: GgMpV6awuEKacj2HVVRDN4z4Htq937tLhpXSx5OCQQw=)
                          5: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: Tnq3be3UM/p4nWuP69fGGW1ooySTKE/JCgvI2VF8s8I=)
                          6: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: T9XYyvCurgMmepMYEsZNDRpjFjN9NnYsijhEUminICw=)
                          7: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
                          rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 12:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:38:69:82:5e:a5:51:73:54:ac:c6:42:af:24:81:87:16:1b:71:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
        Validity
            Not Before: Dec  5 08:57:41 2025 GMT
            Not After : Dec  8 12:09:41 2025 GMT
        Subject: CN=1B23B36D7F19DB811B8FAB35A1F4171A162DD3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:41:ce:ea:1f:2c:16:d4:30:6f:6a:44:77:
                    eb:5b:f7:80:b1:89:e9:3a:6f:9f:67:b0:22:b5:32:
                    ed:7d:64:99:9e:33:0a:3c:fd:03:ec:c5:b5:fc:db:
                    b2:10:15:1f:a6:76:27:e4:d7:ce:11:3b:26:2e:a1:
                    2b:fe:5e:6c:81:cd:a7:8a:ae:1f:2d:c5:1c:22:9f:
                    ab:2e:38:87:d8:4e:04:bf:4d:5d:5b:03:9b:e3:4c:
                    f1:2f:24:92:75:ac:7e:3b:18:2f:23:6b:f4:1b:f6:
                    30:ea:f8:c9:ec:3f:6f:05:ca:cd:5e:87:46:fc:a3:
                    64:50:ee:f7:6a:0a:c6:26:d0:c1:3d:2f:74:11:f6:
                    a9:3f:50:ec:30:ef:ad:45:c9:7c:38:86:ec:1a:1c:
                    4c:5c:6f:a0:69:65:94:03:38:54:4d:43:76:b6:58:
                    60:16:75:ec:ab:49:1e:8f:d1:33:c3:a0:56:01:a1:
                    95:e0:df:38:2b:2c:81:88:a0:89:2a:d5:fc:67:b2:
                    56:d1:31:31:6d:33:c5:35:12:97:d7:a7:56:2e:fe:
                    c9:43:1c:72:00:e1:2f:81:15:c7:14:b9:1f:97:dc:
                    88:a3:00:d6:3e:28:f1:de:80:b5:c6:5e:ec:87:a7:
                    90:70:d9:e0:5d:5e:09:55:2e:4c:76:eb:e6:6a:52:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:23:B3:6D:7F:19:DB:81:1B:8F:AB:35:A1:F4:17:1A:16:2D:D3:FB
            X509v3 Authority Key Identifier:
                keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bb:22:0a:fe:93:24:cd:ae:57:7d:81:ad:ed:30:2a:e5:8e:
         c3:c6:48:73:b0:57:62:9f:64:6d:a4:78:90:d6:ec:39:9b:f0:
         f3:bb:15:93:bd:01:8a:8f:3c:a3:86:59:3d:e9:8e:14:ee:69:
         0e:12:0f:1d:39:d0:cd:8f:3b:10:b6:1d:06:bd:fe:e1:18:ea:
         44:c5:e1:4f:31:dd:45:a6:6f:05:fc:13:55:c0:bb:2a:ce:a4:
         b0:6a:e8:85:aa:e5:a1:2f:0c:e3:9d:94:87:fb:23:9a:00:d3:
         1f:0c:93:f7:01:62:50:25:1b:f8:f1:2d:e8:c6:e7:fd:80:fd:
         bc:8b:94:a4:42:13:67:8a:54:9f:fb:60:d9:fc:00:69:fc:78:
         de:e5:36:df:35:9e:fa:c2:0f:49:ec:1e:be:5d:aa:58:f9:12:
         ac:b1:9e:0a:c2:56:47:15:3e:c9:e1:71:21:0c:ec:e8:df:74:
         8f:da:90:78:47:55:3e:45:8a:2e:9c:74:41:2b:0e:01:c0:37:
         cc:62:7a:e2:a7:b1:4d:3f:e8:9f:8f:c5:31:04:0e:b1:d3:80:
         a2:83:6b:d1:be:9f:45:4e:c1:dd:84:01:c8:8d:bc:a8:17:7f:
         64:01:67:31:5f:89:f5:7d:59:42:a5:67:51:da:00:ba:b2:13:
         fb:e9:68:a3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSThpgl6lUXNUrMZCrySBhxYbcQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw
MkZDMjFFQTAeFw0yNTEyMDUwODU3NDFaFw0yNTEyMDgxMjA5NDFaMDMxMTAvBgNV
BAMTKDFCMjNCMzZEN0YxOURCODExQjhGQUIzNUExRjQxNzFBMTYyREQzRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bkHO6h8sFtQwb2pEd+tb94Cx
iek6b59nsCK1Mu19ZJmeMwo8/QPsxbX827IQFR+mdifk184ROyYuoSv+XmyBzaeK
rh8txRwin6suOIfYTgS/TV1bA5vjTPEvJJJ1rH47GC8ja/Qb9jDq+MnsP28Fys1e
h0b8o2RQ7vdqCsYm0ME9L3QR9qk/UOww761FyXw4huwaHExcb6BpZZQDOFRNQ3a2
WGAWdeyrSR6P0TPDoFYBoZXg3zgrLIGIoIkq1fxnslbRMTFtM8U1EpfXp1Yu/slD
HHIA4S+BFccUuR+X3IijANY+KPHegLXGXuyHp5Bw2eBdXglVLkx26+ZqUgvbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGyOzbX8Z24Ebj6s1ofQXGhYt0/swHwYDVR0j
BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz
M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD
MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx
NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF
RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADa7Igr+kyTNrld9ga3tMCrljsPGSHOwV2Kf
ZG2keJDW7Dmb8PO7FZO9AYqPPKOGWT3pjhTuaQ4SDx050M2POxC2HQa9/uEY6kTF
4U8x3UWmbwX8E1XAuyrOpLBq6IWq5aEvDOOdlIf7I5oA0x8Mk/cBYlAlG/jxLejG
5/2A/byLlKRCE2eKVJ/7YNn8AGn8eN7lNt81nvrCD0nsHr5dqlj5EqyxngrCVkcV
PsnhcSEM7OjfdI/akHhHVT5Fii6cdEErDgHAN8xieuKnsU0/6J+PxTEEDrHTgKKD
a9G+n0VOwd2EAciNvKgXf2QBZzFfifV9WUKlZ1HaALqyE/vpaKM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:43:59 2025 by rpki-client