This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
File:                     F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json)
Hash identifier:          J4Xbyk+RkHUKdqG9+tSIbrx22w8wCKA/2pcBQ6ffjog=
Subject key identifier:   42:C6:0F:76:2C:60:35:77:9B:D2:5A:FB:DC:D0:7E:5A:D1:36:67:16
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       56B0A96FDFDAAF9917752517C40CC727D3A3CAAA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
Manifest number:          0543
Signing time:             Fri 05 Dec 2025 00:31:29 +0000
Manifest this update:     Fri 05 Dec 2025 00:26:29 +0000
Manifest next update:     Mon 08 Dec 2025 08:30:29 +0000
Files and hashes:         1: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: IGEWY2eHTKaYMtxRXqYJpKskrVH7Tr78Gf7J+C6rKG8=)
                          2: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: u07NQFdDkw9uQJyKvseE8BXy1l4340TGYboFy4isKRg=)
                          3: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: Zf0EByiShh8dDglTZ98S6dUW9rgXXq4zrxFB1Xam9vQ=)
                          4: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: M4ssaOvjHsdJP6LoJpiLBv94HULBEuZfCL5oS3yxuR0=)
                          5: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 1A57a+WSkaUEe/nNKsaDACTzujL/BWvYX5TZ+R8VoL8=)
                          6: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: InIenu/YRdZ+r+sG5SCyx4cnFek5Q1mbpz29x6bWyk8=)
                          7: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: QqkYw4dvuAxz/Z71BLxdsCFvca35TsWBzdDiFc7djzY=)
                          8: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: KpZING4byOb+kw62UnCHT9VpB7H105YwJJjgZg9mICg=)
                          9: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: Ju/vO7vCQQsoKWqaI5uCjlvfJIZ0F/Vpc0p/QWILZD4=)
                          10: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: zzz4sdR5gzKzpAbEJCRzN6BkviHvm/Eab9wuvzBGW3s=)
                          11: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: UQwmx7kfaHxkn2EDWo9d59K9BpIkWV4oYs+G0r7Y0tg=)
                          12: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: /ri40FDmSZx726w/lEZ1lnE+M3llFsHw0OIkUDVqH2Y=)
                          13: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: l2XgTKrEaZzJg/s+9XNrUPqB/jS99nk9vRMWjSJi3Ck=)
                          14: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: zlUSo08cC5dU1tahN2pFRIpVflwenezMlRGB/W6FAVg=)
                          15: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: zNkUcfseAFGChQlk9FTTSxxP9VLqeS6Xzt5hWG8FeNY=)
                          16: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: RTJdm4ux75KqUxTLd+HL3T2/W81Q6eNxAPEmBwe4d2I=)
                          17: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: U25XxYHsdDHg45kmjqy0PPmW/5GPYURDN/+SgVMDWdQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 08:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b0:a9:6f:df:da:af:99:17:75:25:17:c4:0c:c7:27:d3:a3:ca:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Dec  5 00:26:29 2025 GMT
            Not After : Dec  8 08:30:29 2025 GMT
        Subject: CN=42C60F762C6035779BD25AFBDCD07E5AD1366716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:dd:1a:b9:1c:24:28:0f:15:ad:91:9f:f5:
                    57:18:b5:48:4f:0c:1c:8e:45:66:b1:88:e9:4e:b2:
                    d0:40:21:0f:c9:2f:48:6a:76:52:bb:90:3f:01:31:
                    95:01:07:ef:bb:b5:fb:b8:9c:e8:84:f0:d8:06:55:
                    57:e3:54:fb:71:dd:40:1c:72:de:26:a5:9d:6d:67:
                    bf:45:5e:74:31:1f:57:d5:83:07:52:ae:d7:68:1f:
                    0a:09:81:e6:be:79:4f:8a:9a:f1:10:db:4d:20:91:
                    1d:51:6e:a9:a7:42:56:7a:92:29:44:77:06:8e:d6:
                    db:81:47:7a:4b:27:89:b1:e3:43:d5:2d:2d:4e:2e:
                    dc:2e:8b:42:14:8d:18:bb:1c:82:01:09:dd:18:49:
                    09:0a:59:31:8e:f2:e5:92:fd:3b:09:f7:eb:df:75:
                    9c:1c:7a:de:51:06:a2:c0:87:a5:15:ba:5a:51:1f:
                    08:bb:f7:c3:be:12:3f:95:2d:49:a7:ca:67:2d:1e:
                    09:3b:16:d1:fa:7e:c3:48:48:c3:c0:c5:1e:11:3c:
                    a4:15:29:37:62:c5:b8:ee:ac:50:60:cb:03:a3:c8:
                    f9:33:aa:26:ac:2e:f1:fa:44:07:d4:b0:49:f9:2a:
                    90:e5:5b:b0:d9:10:2b:51:55:8e:96:ba:67:b2:af:
                    d3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C6:0F:76:2C:60:35:77:9B:D2:5A:FB:DC:D0:7E:5A:D1:36:67:16
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:bf:2f:43:0d:78:62:23:1e:d0:38:34:ed:f3:89:14:c8:
         5c:f2:8e:42:86:16:ec:cf:dd:a8:aa:6d:73:a8:14:56:8e:b1:
         fb:93:73:93:61:37:12:2d:1e:0e:d2:d0:86:c2:ad:73:5b:83:
         bc:9a:cd:e5:3e:ec:4e:62:d5:31:aa:a0:04:6b:e8:2a:5e:10:
         a5:c7:16:e3:df:37:b2:af:d4:fc:05:00:9a:e5:07:01:d7:cd:
         be:f9:c2:16:75:77:89:fb:9b:de:16:8d:8e:21:a1:63:0f:a0:
         59:f4:db:ba:26:c6:9c:76:ba:69:e7:29:f5:43:d9:96:d5:d2:
         98:b0:5c:e8:b5:78:d5:84:37:2d:99:a8:6b:d2:78:6d:62:4f:
         eb:0a:25:34:1e:f6:40:54:d5:31:e5:43:b0:5a:91:d4:8e:cf:
         ab:65:2a:3b:b1:fa:ac:6c:03:1e:e8:0a:4b:c8:a5:23:b3:5d:
         59:fb:d9:68:23:6d:ec:cb:ca:ed:df:0d:1a:d9:57:b1:82:26:
         c3:ff:2a:73:da:68:3b:ac:21:e2:86:f7:c6:43:d7:bc:3e:c1:
         72:3f:7d:cc:1d:12:0f:b3:05:48:26:c0:f6:5d:c0:34:e4:4a:
         28:cb:28:1e:0c:cf:5e:a5:1b:cc:ee:e7:73:f7:70:32:13:b6:
         5d:79:03:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:37:34 2025 by rpki-client