This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File:                     0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier:          wGnBe9IVNnQls6F15FB2bzlQVN3g7YFgiyAubiNJwOg=
Subject key identifier:   7D:CA:58:CF:55:29:6A:6D:75:A7:2C:BE:6F:ED:FD:5C:B9:FD:16:2D
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       508E74C91E8C63DCEB7DE1478005BE65A35D1694
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number:          0561
Signing time:             Sat 06 Dec 2025 21:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 20:55:54 +0000
Manifest next update:     Wed 10 Dec 2025 03:50:54 +0000
Files and hashes:         1: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=)
                          2: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=)
                          3: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=)
                          4: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=)
                          5: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=)
                          6: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=)
                          7: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: q771sC6zB33Oq6DfSEAJsw8hJxHKpM2mLAO8gMKqYO8=)
                          8: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=)
                          9: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=)
                          10: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=)
                          11: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=)
                          12: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8e:74:c9:1e:8c:63:dc:eb:7d:e1:47:80:05:be:65:a3:5d:16:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Dec  6 20:55:54 2025 GMT
            Not After : Dec 10 03:50:54 2025 GMT
        Subject: CN=7DCA58CF55296A6D75A72CBE6FEDFD5CB9FD162D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:15:8c:44:48:7f:a3:31:d0:4d:2e:aa:fe:
                    e7:a7:7b:e1:15:f5:f2:31:6b:15:59:d4:50:a8:e4:
                    46:24:c2:3f:0d:de:b4:d7:04:e5:64:6f:b2:2b:d1:
                    d1:35:cf:b1:87:ab:25:15:08:f9:7e:ea:27:95:81:
                    d7:15:c3:2a:c0:16:d7:65:55:e2:59:e4:a8:ae:60:
                    70:2e:39:84:c5:56:fe:86:91:f6:45:88:b6:52:9f:
                    1d:78:97:12:aa:05:90:7b:4b:d1:ad:ed:18:78:2d:
                    d5:09:72:d3:83:09:58:2d:b5:dd:4f:60:82:29:7e:
                    c4:3b:04:a5:30:c3:e0:fa:34:66:54:d0:6f:11:c6:
                    82:11:e5:02:eb:b6:a7:b9:49:98:eb:1d:b7:bb:1e:
                    a0:77:64:a9:61:fb:ce:cf:51:ef:ed:b7:43:34:8c:
                    6e:eb:f4:ea:01:cc:e0:5e:e2:49:c1:bc:ac:ab:30:
                    33:50:12:03:c1:87:54:90:20:d8:56:25:56:51:f4:
                    d0:c7:21:b8:61:32:db:8a:02:5a:4c:91:f2:b1:6e:
                    db:35:34:e8:61:bd:1d:7c:ac:8a:81:a0:98:80:78:
                    51:6f:a4:e8:c1:86:41:d5:cb:9c:ea:c8:39:90:2a:
                    93:14:83:15:e5:4c:7f:f4:94:95:75:69:b1:e1:e7:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CA:58:CF:55:29:6A:6D:75:A7:2C:BE:6F:ED:FD:5C:B9:FD:16:2D
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:e6:15:97:21:9d:79:65:19:84:c1:33:f4:3c:70:74:57:
         de:d6:33:e0:15:de:fb:04:2e:37:d3:e7:8a:d1:b3:e9:da:9a:
         33:f4:25:2a:7e:08:e3:c7:1d:1a:75:5b:d9:97:c2:d4:40:83:
         55:df:0c:9f:43:5a:48:be:18:3d:cb:2d:db:fb:72:ef:d7:e4:
         d2:33:20:a4:32:bc:34:c9:51:25:8d:eb:a3:a2:68:b8:78:98:
         99:e2:4d:4e:d3:e6:3d:2d:08:0f:10:58:b3:47:49:bb:a4:7a:
         63:05:86:79:0f:88:7e:b6:fd:b8:fe:81:8f:66:8a:61:1c:b0:
         18:96:22:ec:b6:97:32:e2:a4:28:d7:a4:09:6a:a4:0b:da:7a:
         01:25:f7:0f:67:ed:ce:ac:fb:59:b0:82:48:23:38:5b:ee:62:
         5f:6a:2a:cb:5f:7a:3a:69:d1:bf:e0:3c:11:30:12:01:94:11:
         ea:64:84:04:1a:27:98:93:45:59:97:55:50:bf:8f:4f:04:da:
         f9:d1:39:3a:6a:36:33:ae:f8:69:d6:3d:02:fa:9c:cd:2f:60:
         8b:23:89:df:f2:11:b9:f7:b4:01:b2:e8:97:46:57:92:6b:eb:
         fb:06:80:23:dd:38:da:ee:12:80:2a:c2:c9:31:23:88:b4:5f:
         36:ef:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:20:45 2025 by rpki-client