This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
File:                     1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json)
Hash identifier:          eYHiwrUEgT5jP/TTyaokPb0zLFbg2OEJPxPqdRbBUJA=
Subject key identifier:   C0:AC:4F:F4:2C:98:25:6E:37:45:EC:A9:6C:4E:0F:4E:55:7B:28:64
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       439F5FCB1CC04BA8C27A6144602EA1C69F86D0DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
Manifest number:          0533
Signing time:             Fri 05 Dec 2025 21:41:31 +0000
Manifest this update:     Fri 05 Dec 2025 21:36:31 +0000
Manifest next update:     Tue 09 Dec 2025 05:37:31 +0000
Files and hashes:         1: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: kTRg5VWzA/woXO+nc54YqUj1OHro7jOG0YTwaTc42Oo=)
                          2: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: SoYj2/CQvnngSSgeQ/2h6CjbPD0PX7O3f0MfyUEw7yQ=)
                          3: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: jd6LmOWTW9h+pZpEVT+8YFnE7+vOf7HUJDd4WCtQWm0=)
                          4: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: Fow2FQnfsWM+t0AdvtL67zUS1huXa7y9vM3+TEZxD7M=)
                          5: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 1kbjcVz7NV7SFqtMY1gTY7M0GuY6igkJGp6NsdTqDPc=)
                          6: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: lS1RAb31GjYc1m7ta2BgMoEsUFuw8zYDY4GO22I3IUc=)
                          7: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: dVPU6JD2A84NVYrSKQ9v6ag+q7nJt0d3GPOdYg/vAzs=)
                          8: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: RHE/H4jgi7VVqpuDeS1Lw4L2TX/dlAnDmhmhk0OB6LQ=)
                          9: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: IM2twiGIKQqETGmIWQI3vAIIytZPeeD5wgctglA7Hpc=)
                          10: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: vN2suRuDQ8/GCQHEEEyC7GJFF4AF2Ux2vUSPEF0UgN4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9f:5f:cb:1c:c0:4b:a8:c2:7a:61:44:60:2e:a1:c6:9f:86:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Dec  5 21:36:31 2025 GMT
            Not After : Dec  9 05:37:31 2025 GMT
        Subject: CN=C0AC4FF42C98256E3745ECA96C4E0F4E557B2864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:4c:a8:a8:c0:74:60:2d:b9:5b:fd:ac:32:
                    87:a0:38:ef:7d:85:d5:97:0c:2a:4f:e4:26:8e:14:
                    4c:b6:0c:d2:df:4f:d2:d2:a0:70:b8:37:b9:1e:7d:
                    75:6c:8e:d5:d8:c4:00:5d:04:6e:25:82:b8:71:76:
                    39:c4:ed:13:1f:7d:6e:1b:b1:ac:e8:54:0e:9a:62:
                    82:c5:51:ff:8a:b8:7d:0e:80:bf:7c:cc:d4:12:64:
                    b8:8a:c0:10:5a:77:a1:9a:4d:4a:f9:75:8d:2c:1d:
                    1c:17:24:e6:b7:d1:53:49:bb:cf:4d:63:13:dc:d2:
                    08:9f:2f:d5:a5:19:28:33:77:e9:3e:81:8b:f9:4b:
                    6d:a7:51:b9:d2:06:41:b9:ed:ec:c8:0c:35:26:d8:
                    d2:67:3a:d8:18:bb:b6:60:47:6e:fb:3a:37:fe:d9:
                    d0:5c:46:0b:2f:4c:05:6a:9f:15:0b:ae:43:06:16:
                    1e:d0:d6:24:70:19:00:4d:e1:2d:81:bd:ec:c0:f4:
                    76:00:89:30:40:44:4a:5c:b0:dc:02:42:82:3a:ca:
                    68:09:a9:c6:ba:88:09:02:60:72:6f:72:2e:e1:0e:
                    13:8d:87:31:40:90:b6:da:35:72:0b:c9:70:1f:a4:
                    99:80:3c:9f:2a:fe:80:55:3d:31:2d:69:47:85:99:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AC:4F:F4:2C:98:25:6E:37:45:EC:A9:6C:4E:0F:4E:55:7B:28:64
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:52:7a:a7:23:b2:d7:ba:cf:5e:2c:b9:aa:31:97:d1:c2:54:
         30:10:cd:06:5e:16:fa:3c:2c:15:57:84:c3:0b:96:61:ba:41:
         f9:c8:4b:09:47:a5:ec:3b:eb:77:bf:5e:d6:4f:be:62:b0:f4:
         9e:2a:96:dd:52:69:3f:3c:de:a2:aa:43:5c:72:f8:20:10:6b:
         19:13:23:77:d9:b2:a5:c6:e7:3d:e7:6a:ba:74:e1:89:78:3c:
         1c:d5:42:82:c1:e0:9a:ef:19:60:11:97:49:72:0f:3a:61:83:
         0d:91:33:6d:7c:5b:59:3c:8b:a2:bb:ab:91:f4:54:1a:e0:4e:
         72:ec:45:a5:08:9b:e4:23:6d:40:f2:18:c2:c1:c6:a4:4b:60:
         2b:f9:75:b3:5c:a6:7b:95:57:a1:87:80:ce:97:35:63:f1:3b:
         fc:8a:3b:9b:1d:db:04:88:cf:f4:de:28:da:13:c6:05:a2:2b:
         86:40:4e:81:ae:38:25:be:b6:c6:7a:2b:79:7f:ba:58:f9:f8:
         29:d0:0f:74:89:88:41:d6:27:2b:6e:5a:50:f4:d0:b9:c8:db:
         3d:5f:2e:54:5c:ed:1c:01:fd:a5:01:75:94:e9:71:80:92:4f:
         b7:68:10:4f:cd:3b:67:da:28:2f:66:a8:62:f1:9c:9b:93:27:
         44:e9:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:54:26 2025 by rpki-client