This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
File:                     764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft (raw, json)
Hash identifier:          cwK4jbekAjuN4pPnW1UA+H+cgCSJIiV+Nh2WdkCbwq4=
Subject key identifier:   DF:83:B3:F8:A4:6F:12:09:53:CA:A3:E0:06:7C:3A:13:00:D8:3F:7D
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       394FB76E68AC98AB35ED5758E38080B7EA54DB5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
Manifest number:          0543
Signing time:             Wed 17 Dec 2025 11:12:10 +0000
Manifest this update:     Wed 17 Dec 2025 11:07:10 +0000
Manifest next update:     Sat 20 Dec 2025 13:09:10 +0000
Files and hashes:         1: 323430313a663938303a323030303a3a2f33362d3336203d3e203633383632.roa (hash: 2pZ6uFkAKxXYLAE9HtmsiFsHAr3GYPDr20QIIqwtmL0=)
                          2: 3130332e34392e33302e302f32342d3234203d3e203633383632.roa (hash: Zytgh6xk872eCWCODvRgqwCZiUirR+4sQkw++qo2eSI=)
                          3: 323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa (hash: vMFZ3J2IVHCkbQrjErXMN4qM62WgQCjGOgATugsFtb0=)
                          4: 323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa (hash: fDdIZ4P43rgAn2eW58sEJiSJIBnEytrfazd7HGt6WcE=)
                          5: 323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa (hash: M8k1ObpwWRLtpo6cotfacaJuetwePH7UVQJ67SzDIUk=)
                          6: 323430313a663938303a313030303a3a2f33362d3336203d3e203633383632.roa (hash: ZRSeKc4pMgl+FGQHx8mqpdUVwvZ/a1dodM6UIQdaa88=)
                          7: 3130332e34392e33302e302f32332d3233203d3e203633383632.roa (hash: Tgc1IbbEQhYrvRTCHCliK+0ORHrdqANdS7E500/DQ9M=)
                          8: 323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa (hash: OIXgMAkVr/N11Akj2gSI1RIkXDHXPy2DRGOsurzJVOo=)
                          9: 323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa (hash: RsZDfa4l/Ykdunatg9OGqKFYnr67kX/kc9LRRc5DAps=)
                          10: 323430313a663938303a3a2f33322d3332203d3e203633383632.roa (hash: vp7VR25cL+7Dj8J5Als0e0/zfWMWTajGC19u/9W7zjc=)
                          11: 323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa (hash: 0u0kW/z+IwveHT8952wWEDeMzwjeuOZR3r03FnvuCUk=)
                          12: 323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa (hash: ORRj6N+z+lWYq/tm4C40gunFOFz4fBOQOt4AnDlgOcU=)
                          13: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl (hash: gpe/WZrmqTSHDqsEsZqFVWLbN/JmKlN8zURvzwqwbPE=)
                          14: 3130332e34392e33312e302f32342d3234203d3e203633383632.roa (hash: qwHFJlzE75soHgkgF3RpDwO4DScSGg2bNwgpJLGwqV8=)
                          15: 323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa (hash: Iq/SBWkbL1WifsnbkuHlgUB3Ay9q9AsfpCUsgBLRWpg=)
                          16: 323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa (hash: PJfON3J1hibYxig1JJVo+LbXyiXk9NNpTQwuQ3g8s5A=)
                          17: 323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa (hash: BJzh6fi2j7EDPGFdArFNRS0CDexcva0kRaMPjrQlvKk=)
                          18: 3130332e34392e32392e302f32342d3234203d3e203633383632.roa (hash: 30F4ZCW17S7UiR04g4PJbkgorb4jv9z7nexloi8E1NQ=)
                          19: 323430313a663938303a633030303a3a2f33362d3336203d3e203633383632.roa (hash: gZ6EFD5pd+8gqNQ96WtmpwvO7RdgA9TqPZ0oZeX1RxE=)
                          20: 3130332e34392e32382e302f32332d3233203d3e203633383632.roa (hash: o40OEDlcfuYKgduOIU7wYZ/BDlWQXnYxeN2j94AR8Ow=)
                          21: 323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa (hash: 4RvKbxqsxmFphFFT0AR0YU3P7kO33nsvJL0cm7fON84=)
                          22: 323430313a663938303a3a2f33362d3336203d3e203633383632.roa (hash: HCKRR7Yvu8AkSEZO+RpqEPEhCQGAmhX74tzgagWiyVg=)
                          23: 3130332e34392e32382e302f32322d3232203d3e203633383632.roa (hash: j29Wbria+1pTAZNNhlMKdGisstrftTQc0GZrNCUupag=)
                          24: 323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa (hash: MvAl+VLsKwMPS7SAuBK6iH2yg75H3l7BSJCwZaIQZeA=)
                          25: 3130332e34392e32382e302f32342d3234203d3e203633383632.roa (hash: Qke1nNFSxZLmY9LyDaTEBEuRylh5toA4mPl9cPKxAU4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 13:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4f:b7:6e:68:ac:98:ab:35:ed:57:58:e3:80:80:b7:ea:54:db:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Dec 17 11:07:10 2025 GMT
            Not After : Dec 20 13:09:10 2025 GMT
        Subject: CN=DF83B3F8A46F120953CAA3E0067C3A1300D83F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:a1:c3:a0:2a:1d:82:24:59:e7:74:33:fd:
                    2f:27:2f:56:27:09:dd:ae:6a:4a:1f:c3:2e:e2:06:
                    49:26:33:f5:f6:d0:c5:1c:5d:8f:3a:08:d7:6c:a0:
                    dc:a5:5d:1b:8a:42:ad:8e:2f:40:80:ed:11:30:f5:
                    e3:2d:f8:e8:6a:98:86:92:61:79:bf:85:3d:33:bb:
                    3f:3d:c5:37:b0:20:7e:ac:5f:de:22:26:64:96:74:
                    45:e9:11:b3:33:d2:c9:fa:fd:bc:5a:d1:56:25:a0:
                    06:5f:8c:eb:83:47:2c:47:ac:0b:8a:32:2d:1d:b9:
                    6e:d8:14:3b:6a:6a:c5:6f:df:41:2d:c3:03:0e:a0:
                    92:ff:51:6e:4a:30:01:30:1f:35:e3:1f:01:b7:29:
                    b1:04:cf:5b:e5:9e:88:52:d8:08:97:8b:e1:41:23:
                    1c:98:cc:f0:74:15:ae:d5:ec:bc:43:ca:f7:30:dc:
                    ef:e6:7d:2b:5f:f7:ca:7f:f9:6f:e7:33:77:2e:50:
                    70:f6:af:25:ee:f1:d8:b3:1a:f2:b2:34:6e:73:95:
                    37:b3:0b:71:d2:d2:e9:7f:1c:bd:65:5a:a1:86:ad:
                    b0:f3:56:35:61:ba:77:16:37:1b:72:11:c2:92:59:
                    3e:fe:9a:e6:86:71:c6:0a:60:91:e2:a9:c5:4e:9a:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:83:B3:F8:A4:6F:12:09:53:CA:A3:E0:06:7C:3A:13:00:D8:3F:7D
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:42:11:08:de:ec:e9:9d:b4:39:70:42:e4:38:5a:51:a2:
         9c:e6:78:74:db:30:6b:89:30:1a:1c:71:fe:94:e0:fc:a9:db:
         bd:fc:ae:3b:b0:24:1e:5c:d1:9e:ad:11:18:79:45:98:f6:51:
         59:75:0e:84:09:1a:e4:b1:15:49:9e:68:66:20:be:d9:f9:86:
         6d:07:b5:13:d6:19:3a:6d:cf:76:4c:67:75:3f:99:05:53:6e:
         69:98:d5:cd:2d:e7:4e:d7:00:50:00:30:5e:50:7e:a3:ae:02:
         ff:47:d1:11:c3:29:70:88:cf:e4:31:ec:60:17:15:62:95:f5:
         84:da:6a:57:c2:b3:bb:35:2e:63:2b:08:66:a6:2f:1f:95:47:
         75:33:6a:eb:d3:14:a9:84:2f:3c:48:54:2c:15:d1:79:71:af:
         ab:66:e1:57:77:0a:73:59:36:3f:9e:e3:e1:34:3a:1f:78:d5:
         be:2d:87:0b:95:4e:d0:46:03:d2:c7:a3:f8:1d:cf:6b:56:58:
         4b:a5:b8:53:da:a8:8c:14:97:40:d1:44:91:fe:0e:68:2d:29:
         39:4d:47:32:21:60:64:a0:72:a7:d4:4a:4a:87:11:77:12:de:
         54:af:d4:12:93:04:1c:5d:1d:45:4d:f3:6d:82:4a:21:8c:3c:
         c9:f4:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:09:32 2025 by rpki-client