This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
File:                     084550E9619FF5ABD20864D9A6383053B59BF91E.mft (raw, json)
Hash identifier:          lEg9GSg1stEErHjwqw+XZRO4sNWZqfR0PdczIiNOpac=
Subject key identifier:   8A:E2:E7:E5:F8:1A:31:F1:3D:F7:4D:96:B2:25:32:3B:73:63:7D:9F
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       115F3FC3165B73B874094DAA3808B32B646C1926
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
Manifest number:          01A8
Signing time:             Fri 05 Dec 2025 04:51:29 +0000
Manifest this update:     Fri 05 Dec 2025 04:46:29 +0000
Manifest next update:     Mon 08 Dec 2025 12:08:29 +0000
Files and hashes:         1: 084550E9619FF5ABD20864D9A6383053B59BF91E.crl (hash: 6v3R66QRy6GR4lHr3G08f2yGlkFYTToKrbkapc93umc=)
                          2: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: 30/vZduG4RMn/faR6AR/rSQuPldnzAfrSZBQwzPgYYM=)
                          3: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: 5IMht0xKCCP0U9uwz1XPxOK7yxTeYdiQoJjjSz9Mxco=)
                          4: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: WAaSNwShiSZ85pEV29yBzPi/4z8AK1cN4rEfINPVYW8=)
                          5: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: YVfqjrZZKlyKKNROGIdcGYIh7CG+YxaGHiuctjc25lk=)
                          6: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: uo+i0GPa6EP/s8c5Ny4WiphUzVRwvU6LzzbkX7/CEoU=)
                          7: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: OQ224IMvAsB57i2ZLy8k+3izRu39/RIC634GB2DVf5Y=)
                          8: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: cjrcytx7Zuxa9AtgQ+afjEzYS+0m/7FLcfwrrJooW6c=)
                          9: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: GzXYpE71o4tlTZAt4Hyg0opydgJ4djQwIaGFzaYbjpM=)
                          10: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: QUmO+r1ZetkePDm99tDeZ2rTyu62swLem0hgSgkn7ss=)
                          11: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: 2v9wN44Uo9Cs+bu4eyE/wLGCms0fGUP+hH0Oe6hkTeI=)
                          12: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: RdnZzcveMI6OTZ2tqV917YFqNgnyHc224NISl6oJbLU=)
                          13: 3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa (hash: JSKYuA8fJ4y0Rjc8zV/6efFq5nxlIBAvEr6kwWaUKJw=)
                          14: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: bEZOujHilL/rXvF4OnLLVFp4nRZlUgFYRFmndeCTA1Y=)
                          15: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: VgDUrmnqScAuLKPWIBCNW2XKtjbn0edxx7HC7UhTNi4=)
                          16: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: +ZHf279OS2MHjAeCxjl0QBmwTayFhrDzO/892nI5F/c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 12:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5f:3f:c3:16:5b:73:b8:74:09:4d:aa:38:08:b3:2b:64:6c:19:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Dec  5 04:46:29 2025 GMT
            Not After : Dec  8 12:08:29 2025 GMT
        Subject: CN=8AE2E7E5F81A31F13DF74D96B225323B73637D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:db:70:68:cf:ee:95:8e:15:a1:47:dc:19:
                    e6:7b:ee:26:92:7e:2f:81:52:ce:e1:14:af:3b:da:
                    aa:4a:c1:07:3b:bb:6a:4a:38:dc:b3:3c:6d:ae:c9:
                    26:c9:84:da:70:e1:0c:89:bc:49:3c:c7:ab:13:9f:
                    0d:14:1a:3c:80:41:2b:c1:80:a7:94:40:66:58:85:
                    c6:ea:40:1f:07:0d:80:fb:ed:c0:78:a2:e6:65:2e:
                    a5:9e:7b:3a:0d:60:a2:e7:a7:b4:eb:24:d6:e8:88:
                    03:bd:dd:c0:5d:df:6d:da:d2:ff:70:14:66:31:47:
                    98:14:ba:a5:a7:0d:61:0e:6e:26:a2:4f:ad:5d:1c:
                    51:05:9c:f4:ab:53:2d:4a:40:c7:1c:2e:2a:2f:b5:
                    a8:82:8d:64:4f:48:94:f9:cb:c9:41:62:5a:ed:89:
                    65:0d:18:23:8d:a9:fa:dd:f0:ac:82:e2:6b:b4:da:
                    18:b7:1a:11:ee:69:5c:2a:47:0a:75:6d:46:c9:af:
                    d7:05:a3:5f:80:32:a3:61:76:3f:db:c2:bc:04:ac:
                    a0:72:0a:d5:08:9f:38:61:f9:06:8c:12:88:aa:47:
                    79:7a:73:5d:9e:ef:d8:37:48:7e:a9:2d:f7:1f:c8:
                    84:f4:e3:b9:5b:64:b6:00:a9:09:b1:13:70:b3:84:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E2:E7:E5:F8:1A:31:F1:3D:F7:4D:96:B2:25:32:3B:73:63:7D:9F
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d2:f1:d7:b0:36:08:44:a0:38:53:b2:51:f8:3f:e2:8e:32:
         d2:6c:24:b7:eb:85:17:29:9b:55:1a:49:93:2f:ea:02:6b:8a:
         bf:b3:2f:46:26:b9:a7:e1:06:1f:fb:f2:9b:f5:33:40:87:19:
         1c:f4:c5:88:3b:31:ca:52:3f:49:b9:96:1f:cf:bc:4d:8e:9c:
         b2:fb:07:a9:8d:c6:49:c0:5e:e2:d5:41:a0:83:1d:69:e3:e3:
         75:9f:22:eb:e1:81:e6:2c:40:17:08:65:ce:40:b3:2d:b2:15:
         e3:b9:ae:12:8a:88:41:61:f1:05:f8:1f:9d:42:30:6f:61:f0:
         fb:5d:91:8f:aa:0b:1a:d2:8c:5f:8d:c8:e4:95:62:2e:8c:68:
         b5:2e:78:49:22:95:f5:1a:7e:08:80:ef:78:2d:ff:bd:3c:07:
         cc:f3:99:ab:77:1c:a1:ab:32:67:f4:34:77:cc:aa:35:00:75:
         03:32:fb:e4:30:f4:54:b8:62:c3:f9:fb:c9:04:c2:d4:4e:8d:
         d7:55:11:ae:2a:14:9a:47:9f:ba:73:30:60:4a:b2:b1:73:b9:
         78:53:2e:63:ad:1c:5b:14:cc:8a:4a:6b:30:ad:a8:53:7e:ea:
         e9:6d:0e:19:c5:26:cc:44:e0:3e:0d:c5:6d:07:6f:4e:4a:c7:
         13:43:3d:ec
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEV8/wxZbc7h0CU2qOAizK2RsGSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC
NTlCRjkxRTAeFw0yNTEyMDUwNDQ2MjlaFw0yNTEyMDgxMjA4MjlaMDMxMTAvBgNV
BAMTKDhBRTJFN0U1RjgxQTMxRjEzREY3NEQ5NkIyMjUzMjNCNzM2MzdEOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjl9twaM/ulY4VoUfcGeZ77iaS
fi+BUs7hFK872qpKwQc7u2pKONyzPG2uySbJhNpw4QyJvEk8x6sTnw0UGjyAQSvB
gKeUQGZYhcbqQB8HDYD77cB4ouZlLqWeezoNYKLnp7TrJNboiAO93cBd323a0v9w
FGYxR5gUuqWnDWEObiaiT61dHFEFnPSrUy1KQMccLiovtaiCjWRPSJT5y8lBYlrt
iWUNGCONqfrd8KyC4mu02hi3GhHuaVwqRwp1bUbJr9cFo1+AMqNhdj/bwrwErKBy
CtUInzhh+QaMEoiqR3l6c12e79g3SH6pLfcfyIT047lbZLYAqQmxE3CzhKF/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiuLn5fgaMfE9902WsiUyO3NjfZ8wHwYDVR0j
BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx
OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC
RjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExNDE3YzAtMzdiYi00NDZkLTg3
ZjItZDgxODQxNzhjMTQ5LzAvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMw
NTNCNTlCRjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL3S8dewNghEoDhTslH4P+KOMtJsJLfrhRcp
m1UaSZMv6gJrir+zL0YmuafhBh/78pv1M0CHGRz0xYg7McpSP0m5lh/PvE2OnLL7
B6mNxknAXuLVQaCDHWnj43WfIuvhgeYsQBcIZc5Asy2yFeO5rhKKiEFh8QX4H51C
MG9h8PtdkY+qCxrSjF+NyOSVYi6MaLUueEkilfUafgiA73gt/708B8zzmat3HKGr
Mmf0NHfMqjUAdQMy++Qw9FS4YsP5+8kEwtROjddVEa4qFJpHn7pzMGBKsrFzuXhT
LmOtHFsUzIpKazCtqFN+6ultDhnFJsxE4D4NxW0Hb05KxxNDPew=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:46:57 2025 by rpki-client