This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft
File:                     01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json)
Hash identifier:          MZQl0FOJMXD01aXUEEhTrQbdmkR5XaP3xDehXMBHbb8=
Subject key identifier:   C5:D2:F2:F2:75:A6:DE:29:DC:36:D0:29:F2:34:5B:89:5C:C0:33:2C
Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90
Certificate issuer:       /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690
Certificate serial:       69FCB392B51D19C0A51A55A507598C88F22FC51B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft
Manifest number:          048D
Signing time:             Sat 06 Dec 2025 07:52:17 +0000
Manifest this update:     Sat 06 Dec 2025 07:47:17 +0000
Manifest next update:     Tue 09 Dec 2025 18:39:17 +0000
Files and hashes:         1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: x0J0SWYdQITQpgISzoI/wH0SDCf243P4/o0ZHJotSPU=)
                          2: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: R2EsZL3EHTwR2Z9PcnD2YUtpJgcuOuwa0FGzrtlopE8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl
                          rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fc:b3:92:b5:1d:19:c0:a5:1a:55:a5:07:59:8c:88:f2:2f:c5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690
        Validity
            Not Before: Dec  6 07:47:17 2025 GMT
            Not After : Dec  9 18:39:17 2025 GMT
        Subject: CN=C5D2F2F275A6DE29DC36D029F2345B895CC0332C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:45:fc:a0:d8:a0:94:5d:3e:5c:17:c0:44:
                    07:0d:41:b2:02:a6:7d:9f:c9:da:cb:1a:39:f4:f9:
                    fe:39:e9:53:51:2f:63:eb:9f:14:0f:b7:a4:da:09:
                    f4:8e:ee:88:f9:23:92:19:37:fe:0f:32:f2:6e:6c:
                    eb:46:94:a9:ee:f9:a0:ff:01:f1:00:48:e7:38:ee:
                    83:c3:f3:07:ed:10:d6:43:af:ed:63:d6:16:dd:19:
                    eb:01:5a:a9:02:93:f6:6c:db:19:bd:00:33:99:f2:
                    f3:cb:89:29:b4:0c:2d:92:af:2b:79:f1:6a:3f:fe:
                    96:cd:d4:79:28:5b:0b:ca:38:19:67:a6:62:63:31:
                    00:e5:ba:6c:c6:a0:0d:f5:cb:bf:80:35:b3:78:37:
                    1e:f9:e8:37:95:1e:49:6a:a4:46:96:9e:af:68:c9:
                    fb:26:96:3b:91:7c:1c:7f:31:82:90:6d:a0:34:df:
                    5a:a8:c8:31:27:26:ac:f7:a2:29:61:bd:44:41:98:
                    bc:d5:ca:4c:26:0e:6a:70:66:be:11:63:01:57:a3:
                    7c:e1:d8:83:4a:36:b0:08:7a:06:07:db:e6:01:31:
                    b2:af:dd:57:a8:3f:0a:43:1d:93:76:c3:dd:8b:38:
                    20:a2:80:c6:f3:8b:98:28:6e:59:a6:c6:0d:b0:7c:
                    23:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D2:F2:F2:75:A6:DE:29:DC:36:D0:29:F2:34:5B:89:5C:C0:33:2C
            X509v3 Authority Key Identifier:
                keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:d0:c0:38:3e:f7:0c:f5:ea:40:6e:45:d6:19:e9:c2:fb:
         ee:ef:ea:44:65:15:76:15:5c:99:44:c2:6d:f3:df:ee:ce:a0:
         5a:32:7d:56:ea:d4:6c:18:b6:37:58:18:db:49:b1:63:c1:9e:
         8d:42:74:51:64:af:97:c7:cb:cf:fe:62:b3:cf:1e:06:42:c3:
         69:c2:bc:6e:07:03:31:4d:29:8a:51:27:d5:d0:cc:b2:24:54:
         86:df:b7:5e:c5:5d:b5:9d:10:bf:b8:e8:da:aa:5b:f6:85:7a:
         46:63:fc:dd:cd:2f:d6:54:e0:df:28:61:56:15:f7:1a:d3:c8:
         11:4a:73:e8:aa:57:20:7d:b6:eb:2e:ed:be:2b:37:3f:09:69:
         86:72:b5:1b:37:6c:ac:47:a3:4f:37:aa:67:d0:83:5a:cb:9f:
         3d:c3:e4:d4:8c:09:69:e0:1e:b2:7b:89:7c:05:d8:e5:bf:1b:
         6a:d3:c5:5f:dc:b3:e4:0f:49:16:de:c3:96:93:b0:ef:a7:b7:
         58:70:dd:81:00:75:ca:8f:d4:69:a8:2d:50:3e:a4:87:b7:f4:
         07:05:48:27:b3:83:f8:ff:1f:b1:0e:df:36:03:35:04:e0:1a:
         6e:9e:37:c2:3b:2c:08:c9:1a:9b:a1:7b:e3:2a:a6:e8:d6:0e:
         cd:0d:d4:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUafyzkrUdGcClGlWlB1mMiPIvxRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE
NkI4QzY5MDAeFw0yNTEyMDYwNzQ3MTdaFw0yNTEyMDkxODM5MTdaMDMxMTAvBgNV
BAMTKEM1RDJGMkYyNzVBNkRFMjlEQzM2RDAyOUYyMzQ1Qjg5NUNDMDMzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlh0X8oNiglF0+XBfARAcNQbIC
pn2fydrLGjn0+f456VNRL2PrnxQPt6TaCfSO7oj5I5IZN/4PMvJubOtGlKnu+aD/
AfEASOc47oPD8wftENZDr+1j1hbdGesBWqkCk/Zs2xm9ADOZ8vPLiSm0DC2Sryt5
8Wo//pbN1HkoWwvKOBlnpmJjMQDlumzGoA31y7+ANbN4Nx756DeVHklqpEaWnq9o
yfsmljuRfBx/MYKQbaA031qoyDEnJqz3oilhvURBmLzVykwmDmpwZr4RYwFXo3zh
2INKNrAIegYH2+YBMbKv3VeoPwpDHZN2w92LOCCigMbzi5goblmmxg2wfCP1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxdLy8nWm3incNtAp8jRbiVzAMywwHwYDVR0j
BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB
NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4
QzY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj
YzQtOWI4ZmNkNWVkMmQyLzAvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFC
NjhENkI4QzY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAvt0MA4PvcM9epAbkXWGenC++7v6kRlFXYV
XJlEwm3z3+7OoFoyfVbq1GwYtjdYGNtJsWPBno1CdFFkr5fHy8/+YrPPHgZCw2nC
vG4HAzFNKYpRJ9XQzLIkVIbft17FXbWdEL+46NqqW/aFekZj/N3NL9ZU4N8oYVYV
9xrTyBFKc+iqVyB9tusu7b4rNz8JaYZytRs3bKxHo083qmfQg1rLnz3D5NSMCWng
HrJ7iXwF2OW/G2rTxV/cs+QPSRbew5aTsO+nt1hw3YEAdcqP1GmoLVA+pIe39AcF
SCezg/j/H7EO3zYDNQTgGm6eN8I7LAjJGpuhe+MqpujWDs0N1Bs=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:35:31 2025 by rpki-client