This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
File:                     764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft (raw, json)
Hash identifier:          VO3mDLJUphUU3p5gejBv2z6Jgf2Gi6s78lfMuhPqGg0=
Subject key identifier:   8A:10:49:13:10:C8:48:C3:3E:23:39:84:71:B7:3C:8E:FD:1E:1E:06
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       1D3E25D641568AE5B95BE4336C9B60ED837E178A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
Manifest number:          053E
Signing time:             Sat 06 Dec 2025 15:42:11 +0000
Manifest this update:     Sat 06 Dec 2025 15:37:11 +0000
Manifest next update:     Tue 09 Dec 2025 16:45:11 +0000
Files and hashes:         1: 3130332e34392e33302e302f32342d3234203d3e203633383632.roa (hash: Zytgh6xk872eCWCODvRgqwCZiUirR+4sQkw++qo2eSI=)
                          2: 3130332e34392e32382e302f32342d3234203d3e203633383632.roa (hash: Qke1nNFSxZLmY9LyDaTEBEuRylh5toA4mPl9cPKxAU4=)
                          3: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl (hash: 2l9EkGhDsaVmsjvUHeftlYZUJ1Ckrm6SwLMcDr8JYrk=)
                          4: 3130332e34392e32382e302f32332d3233203d3e203633383632.roa (hash: o40OEDlcfuYKgduOIU7wYZ/BDlWQXnYxeN2j94AR8Ow=)
                          5: 3130332e34392e32382e302f32322d3232203d3e203633383632.roa (hash: j29Wbria+1pTAZNNhlMKdGisstrftTQc0GZrNCUupag=)
                          6: 323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa (hash: PJfON3J1hibYxig1JJVo+LbXyiXk9NNpTQwuQ3g8s5A=)
                          7: 3130332e34392e33302e302f32332d3233203d3e203633383632.roa (hash: Tgc1IbbEQhYrvRTCHCliK+0ORHrdqANdS7E500/DQ9M=)
                          8: 323430313a663938303a633030303a3a2f33362d3336203d3e203633383632.roa (hash: gZ6EFD5pd+8gqNQ96WtmpwvO7RdgA9TqPZ0oZeX1RxE=)
                          9: 323430313a663938303a3a2f33322d3332203d3e203633383632.roa (hash: vp7VR25cL+7Dj8J5Als0e0/zfWMWTajGC19u/9W7zjc=)
                          10: 323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa (hash: fDdIZ4P43rgAn2eW58sEJiSJIBnEytrfazd7HGt6WcE=)
                          11: 323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa (hash: Iq/SBWkbL1WifsnbkuHlgUB3Ay9q9AsfpCUsgBLRWpg=)
                          12: 323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa (hash: ORRj6N+z+lWYq/tm4C40gunFOFz4fBOQOt4AnDlgOcU=)
                          13: 323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa (hash: 4RvKbxqsxmFphFFT0AR0YU3P7kO33nsvJL0cm7fON84=)
                          14: 3130332e34392e33312e302f32342d3234203d3e203633383632.roa (hash: qwHFJlzE75soHgkgF3RpDwO4DScSGg2bNwgpJLGwqV8=)
                          15: 323430313a663938303a323030303a3a2f33362d3336203d3e203633383632.roa (hash: 2pZ6uFkAKxXYLAE9HtmsiFsHAr3GYPDr20QIIqwtmL0=)
                          16: 323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa (hash: M8k1ObpwWRLtpo6cotfacaJuetwePH7UVQJ67SzDIUk=)
                          17: 323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa (hash: OIXgMAkVr/N11Akj2gSI1RIkXDHXPy2DRGOsurzJVOo=)
                          18: 323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa (hash: RsZDfa4l/Ykdunatg9OGqKFYnr67kX/kc9LRRc5DAps=)
                          19: 323430313a663938303a3a2f33362d3336203d3e203633383632.roa (hash: HCKRR7Yvu8AkSEZO+RpqEPEhCQGAmhX74tzgagWiyVg=)
                          20: 3130332e34392e32392e302f32342d3234203d3e203633383632.roa (hash: 30F4ZCW17S7UiR04g4PJbkgorb4jv9z7nexloi8E1NQ=)
                          21: 323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa (hash: MvAl+VLsKwMPS7SAuBK6iH2yg75H3l7BSJCwZaIQZeA=)
                          22: 323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa (hash: vMFZ3J2IVHCkbQrjErXMN4qM62WgQCjGOgATugsFtb0=)
                          23: 323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa (hash: BJzh6fi2j7EDPGFdArFNRS0CDexcva0kRaMPjrQlvKk=)
                          24: 323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa (hash: 0u0kW/z+IwveHT8952wWEDeMzwjeuOZR3r03FnvuCUk=)
                          25: 323430313a663938303a313030303a3a2f33362d3336203d3e203633383632.roa (hash: ZRSeKc4pMgl+FGQHx8mqpdUVwvZ/a1dodM6UIQdaa88=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3e:25:d6:41:56:8a:e5:b9:5b:e4:33:6c:9b:60:ed:83:7e:17:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Dec  6 15:37:11 2025 GMT
            Not After : Dec  9 16:45:11 2025 GMT
        Subject: CN=8A10491310C848C33E23398471B73C8EFD1E1E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:59:60:49:85:dc:74:01:85:be:54:69:c1:
                    a8:e7:fb:cc:64:ee:72:45:d4:f9:86:40:2d:6b:ab:
                    0e:85:89:8b:ce:f0:03:da:35:5b:72:34:95:29:b1:
                    75:74:c9:3a:4b:a9:87:0a:ee:e5:55:9b:4b:d8:1e:
                    c0:b0:36:fc:5d:7d:31:de:4f:e1:bf:97:96:45:c4:
                    df:38:c9:e1:e7:59:a1:4f:4e:0e:e3:24:a9:06:36:
                    50:44:e0:9a:09:95:b6:3c:14:59:0c:94:69:0f:7d:
                    d5:51:1d:77:37:c6:0b:89:00:bd:18:a2:73:2e:de:
                    b9:1d:49:3f:0c:34:ef:e2:f4:c0:07:9a:5d:2c:03:
                    4a:1a:21:5c:b0:50:c4:55:f6:8a:6d:c6:21:27:64:
                    b7:a2:d4:aa:27:d4:a6:3e:26:ea:7a:f4:60:bf:23:
                    c2:ef:34:8a:36:50:80:8b:89:bc:b4:2d:65:0f:5d:
                    1b:01:e0:89:44:cd:f7:7f:62:45:82:e4:0c:d0:bb:
                    a8:47:64:6e:59:94:2d:8f:0d:41:ef:65:10:b1:55:
                    83:4c:0c:26:d7:89:b1:33:9a:62:37:c1:65:b2:aa:
                    fb:fb:97:cc:eb:06:ba:4b:a8:e5:ec:b2:ad:12:1e:
                    63:6a:a2:2c:a3:06:9b:c0:eb:08:88:cb:ab:73:b5:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:49:13:10:C8:48:C3:3E:23:39:84:71:B7:3C:8E:FD:1E:1E:06
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:72:04:e6:f4:a8:69:51:0b:47:6c:f8:79:ab:7f:e9:0f:83:
         e7:67:78:28:26:ee:9b:5d:22:2f:8f:08:46:e3:5b:dd:89:d5:
         73:ec:13:98:16:d2:46:c3:a5:63:ad:12:48:dc:cc:57:0e:79:
         8f:71:f4:f2:5c:c4:10:e2:01:57:12:eb:fb:89:98:46:8d:41:
         b8:30:a9:27:87:8d:a2:57:f9:12:11:ac:67:bb:15:d4:64:c9:
         a4:56:3c:13:05:89:e3:d3:8a:40:49:dc:b1:66:de:12:45:ca:
         cb:4f:ad:16:bf:8d:c9:d3:32:3d:37:04:93:68:8d:8e:e2:20:
         6f:7d:22:56:5f:b9:12:54:d9:13:95:f6:d1:92:d3:bf:fa:be:
         66:0c:71:97:98:e1:fc:94:4d:a8:3b:ae:76:f0:fb:63:59:87:
         87:29:0d:a4:06:22:56:b3:8a:f9:6b:c1:29:ba:8b:8e:27:8a:
         2a:20:b2:cf:f9:cd:18:a0:09:f3:4d:b2:59:a5:9c:68:ae:e5:
         e8:4d:d7:4a:2a:5a:55:1e:e5:05:e4:7a:cd:53:8c:42:a1:93:
         88:92:6a:07:12:de:2d:91:19:eb:b0:20:60:05:7a:90:f8:72:
         9e:6c:70:db:f1:b1:a5:af:5b:6d:c9:4e:9c:6a:be:52:4f:a1:
         b7:ad:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:23:22 2025 by rpki-client