This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
File:                     116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json)
Hash identifier:          vapUxdk+wVvOBVs2gIYolf/lghgfAXNvJMM8U6WsLrE=
Subject key identifier:   4E:DC:B4:1A:64:2A:35:EA:A3:4A:5A:C7:77:4B:A4:E8:37:4F:E1:EF
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       21439BD2F88B97F264ABBE0BB9DDC09ABA126F48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
Manifest number:          053F
Signing time:             Sat 06 Dec 2025 13:30:05 +0000
Manifest this update:     Sat 06 Dec 2025 13:25:05 +0000
Manifest next update:     Tue 09 Dec 2025 18:35:05 +0000
Files and hashes:         1: 34332e3234372e32312e302f32342d3234203d3e20313331373830.roa (hash: 75jsZ2/RYGs14ieUtfuhtsNjuwyC8On82jjkJYD2UMY=)
                          2: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=)
                          3: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=)
                          4: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: 1x08KXdWQjNJ/AURc7+copvWBOFe5w45iZh/iDfWuE0=)
                          5: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=)
                          6: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=)
                          7: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=)
                          8: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=)
                          9: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: rkvfltc1XeXNlZR/3yH5i2rDhAOYYmSdXeT/IyFdjyk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:43:9b:d2:f8:8b:97:f2:64:ab:be:0b:b9:dd:c0:9a:ba:12:6f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Dec  6 13:25:05 2025 GMT
            Not After : Dec  9 18:35:05 2025 GMT
        Subject: CN=4EDCB41A642A35EAA34A5AC7774BA4E8374FE1EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:82:91:8a:9e:58:56:99:4c:0f:23:81:f5:
                    7e:c8:ff:72:66:87:d5:03:c8:4f:05:fa:06:de:77:
                    d8:78:dc:f8:1d:c5:27:3d:da:21:ad:36:d3:95:df:
                    1d:3b:a8:46:cf:e1:1f:29:ac:fd:dc:a6:9e:0d:1d:
                    5e:c5:32:03:cc:50:87:c5:2b:6e:3c:0c:78:47:7c:
                    74:be:7d:02:36:6e:70:0f:ed:50:2b:63:da:da:50:
                    86:fb:25:27:1d:0d:6e:7f:f8:25:c4:dc:53:b6:e2:
                    1f:9d:f0:ab:63:ea:da:be:d5:6d:f5:1c:8b:73:75:
                    33:aa:aa:a6:9b:c3:2e:27:97:ec:44:6a:2d:6a:3b:
                    fe:ce:4b:63:f7:fa:1e:54:d3:36:e1:92:12:06:42:
                    90:1f:4b:94:19:c2:89:c8:dd:0e:42:0c:68:40:fc:
                    52:f7:cd:09:71:e5:c5:d5:69:e1:b7:75:30:d7:21:
                    1a:2c:67:ca:d5:6e:0c:25:9a:36:16:af:3b:12:75:
                    f9:3d:04:b4:76:33:ab:27:b3:5a:f8:c0:4f:b6:ad:
                    61:d5:cc:d7:64:40:b3:fe:ea:e5:b9:25:f7:92:52:
                    93:c1:fb:18:f2:67:a1:69:97:02:b9:1e:3b:83:be:
                    6e:b1:6d:5d:78:cf:ad:86:f8:f5:21:21:d5:28:48:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DC:B4:1A:64:2A:35:EA:A3:4A:5A:C7:77:4B:A4:E8:37:4F:E1:EF
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:eb:3d:b6:4e:87:ef:02:e9:3c:92:bb:a0:ba:f9:ff:ed:
         85:6a:a0:0b:08:db:f4:68:10:31:6c:ca:0f:a9:4f:cd:da:26:
         aa:a7:ce:c0:6f:9f:6f:82:26:4c:0b:a4:6e:67:a4:0f:ef:af:
         53:20:f8:37:31:06:0d:c5:03:08:e7:b3:53:f7:5b:26:98:12:
         2a:b8:b5:56:eb:48:8a:c3:c0:c2:11:5d:16:ad:ea:d4:cc:68:
         97:a6:ed:48:40:c4:26:43:46:95:38:09:45:e4:ab:0b:c3:e3:
         5e:3f:29:41:16:71:aa:9d:62:89:92:bc:7c:bb:37:b7:f3:52:
         c5:25:db:a9:a1:00:8c:e4:21:fe:62:98:ba:b0:20:0a:cd:a1:
         8c:13:0b:96:4f:0a:fa:dc:09:cd:58:a9:c5:40:0d:ba:2c:4e:
         7b:ce:d9:76:f0:02:9a:a6:b8:15:bb:4d:2a:69:36:03:a3:6b:
         75:79:46:6b:c2:80:10:40:8f:fb:99:33:26:46:15:f7:d8:12:
         db:f6:23:20:f7:b9:ab:1e:f2:10:75:e7:20:93:da:84:be:fa:
         f5:00:a8:89:66:67:bb:b4:74:89:6e:77:34:4e:bd:78:98:6f:
         9a:8b:7c:29:d8:a1:bc:0b:08:5a:b5:5a:c3:08:45:8d:3e:79:
         15:e4:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:30 2025 by rpki-client