This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft
File:                     132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json)
Hash identifier:          1XfSbPR5DlsE2DwQzC6ZXNx8PusbDKElYh7p8Ut5THg=
Subject key identifier:   18:CE:7C:D8:4E:EC:2C:B2:88:A5:4D:9E:88:A0:B5:72:D1:98:24:DC
Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10
Certificate issuer:       /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410
Certificate serial:       0B6F1999D7E2D3E61F6A962AFAF621E185DFFD03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft
Manifest number:          0214
Signing time:             Sat 06 Dec 2025 12:51:05 +0000
Manifest this update:     Sat 06 Dec 2025 12:46:05 +0000
Manifest next update:     Tue 09 Dec 2025 19:45:05 +0000
Files and hashes:         1: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=)
                          2: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=)
                          3: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=)
                          4: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: m6Wq9pIhVaNKSu+oRA54ei/DDASqjYFDxXEN3LlOuis=)
                          5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl
                          rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6f:19:99:d7:e2:d3:e6:1f:6a:96:2a:fa:f6:21:e1:85:df:fd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410
        Validity
            Not Before: Dec  6 12:46:05 2025 GMT
            Not After : Dec  9 19:45:05 2025 GMT
        Subject: CN=18CE7CD84EEC2CB288A54D9E88A0B572D19824DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:3e:34:93:eb:75:64:07:36:a8:33:47:2d:
                    fa:3f:52:9c:ff:98:9f:65:da:01:56:33:f6:24:09:
                    61:47:02:68:e1:81:ca:5c:21:09:a2:cd:fb:ef:a0:
                    67:95:3f:96:54:db:9f:b0:02:b8:8a:26:58:42:20:
                    03:07:ba:87:82:29:9f:1f:be:e2:c7:4b:76:e1:2b:
                    46:44:48:02:6d:34:1d:1f:65:7f:5b:3b:36:92:bb:
                    96:db:1a:b8:a9:13:d3:6a:12:60:dd:1f:f5:70:0a:
                    a4:1d:5c:8b:79:52:cb:6e:3a:c6:45:5d:5f:a5:a7:
                    c8:87:c8:1e:e2:6a:58:0c:92:c4:2a:c4:09:74:eb:
                    a3:34:08:7f:32:97:19:b6:30:08:33:28:d2:09:b7:
                    91:c9:fb:5a:a0:29:f6:e0:c4:e7:99:4e:8b:3c:53:
                    c7:3c:70:a6:06:bb:3a:0e:81:a1:72:f9:2f:28:03:
                    e2:5d:04:14:34:62:55:65:43:9c:84:32:d8:d4:a1:
                    3b:97:11:85:1e:b3:94:62:cc:12:53:59:83:ac:b9:
                    90:0e:95:1f:f8:1e:22:a2:25:05:94:58:d1:20:f3:
                    df:ca:19:8c:2d:54:ec:3d:71:e7:f3:b0:c9:0c:f0:
                    bd:16:56:9a:68:51:22:5b:35:10:59:3a:8e:c2:c6:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CE:7C:D8:4E:EC:2C:B2:88:A5:4D:9E:88:A0:B5:72:D1:98:24:DC
            X509v3 Authority Key Identifier:
                keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:3b:6d:f9:ae:5c:6e:c0:94:5b:1e:b9:f1:57:d4:b7:47:
         62:a7:e7:a4:66:bf:97:1c:c1:ee:7a:6b:7d:a2:77:91:dd:ed:
         f2:49:8a:d8:9a:fd:4c:ba:29:42:c0:23:b4:15:17:84:39:03:
         cc:d9:99:75:26:fa:6e:d1:b5:87:a4:23:1d:92:62:a8:78:bf:
         35:c9:aa:87:a9:32:b2:47:57:0b:4d:21:13:d4:39:83:28:8b:
         2b:6b:60:18:1a:52:07:74:5c:a3:0d:ea:46:4c:9e:bc:63:d6:
         61:53:57:29:2d:ad:6e:ae:bc:00:ee:fe:8b:3e:3e:0d:5d:c5:
         ba:87:c6:95:c5:41:5d:3b:3d:11:f1:03:de:46:e8:0e:f3:98:
         f6:9a:0d:50:b5:2a:41:b4:c1:cf:e1:c9:b0:ac:b1:39:7a:cb:
         c7:ff:53:73:30:ad:d1:0d:e8:16:aa:5b:3f:ee:7c:81:a7:c2:
         0f:fd:82:ac:fe:f3:a6:c9:91:81:ba:15:1b:fb:c3:30:bb:4f:
         65:f4:e1:0b:74:cb:f4:d7:6d:e0:40:03:f7:f2:e0:fb:9c:1c:
         2b:2b:3b:c2:41:e3:fb:a7:54:79:66:67:98:77:37:ac:d2:a8:
         30:82:72:f1:6a:5c:da:68:a4:9f:65:a6:1d:6b:ee:57:cc:a0:
         d7:2b:9a:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC28Zmdfi0+YfapYq+vYh4YXf/QMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz
OEQwNDQxMDAeFw0yNTEyMDYxMjQ2MDVaFw0yNTEyMDkxOTQ1MDVaMDMxMTAvBgNV
BAMTKDE4Q0U3Q0Q4NEVFQzJDQjI4OEE1NEQ5RTg4QTBCNTcyRDE5ODI0REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6j40k+t1ZAc2qDNHLfo/Upz/
mJ9l2gFWM/YkCWFHAmjhgcpcIQmizfvvoGeVP5ZU25+wAriKJlhCIAMHuoeCKZ8f
vuLHS3bhK0ZESAJtNB0fZX9bOzaSu5bbGripE9NqEmDdH/VwCqQdXIt5UstuOsZF
XV+lp8iHyB7ialgMksQqxAl066M0CH8ylxm2MAgzKNIJt5HJ+1qgKfbgxOeZTos8
U8c8cKYGuzoOgaFy+S8oA+JdBBQ0YlVlQ5yEMtjUoTuXEYUes5RizBJTWYOsuZAO
lR/4HiKiJQWUWNEg89/KGYwtVOw9cefzsMkM8L0WVppoUSJbNRBZOo7CxijZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGM582E7sLLKIpU2eiKC1ctGYJNwwHwYDVR0j
BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5
RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw
NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4
YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz
M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF7IO235rlxuwJRbHrnxV9S3R2Kn56Rmv5cc
we56a32id5Hd7fJJitia/Uy6KULAI7QVF4Q5A8zZmXUm+m7RtYekIx2SYqh4vzXJ
qoepMrJHVwtNIRPUOYMoiytrYBgaUgd0XKMN6kZMnrxj1mFTVyktrW6uvADu/os+
Pg1dxbqHxpXFQV07PRHxA95G6A7zmPaaDVC1KkG0wc/hybCssTl6y8f/U3MwrdEN
6BaqWz/ufIGnwg/9gqz+86bJkYG6FRv7wzC7T2X04Qt0y/TXbeBAA/fy4PucHCsr
O8JB4/unVHlmZ5h3N6zSqDCCcvFqXNpopJ9lph1r7lfMoNcrmoY=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:14 2025 by rpki-client