This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
File:                     63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json)
Hash identifier:          pF8QgJq10CZ6g+KIUvSNzxnaLDUeyVnLze75R36qDcY=
Subject key identifier:   F0:25:BA:ED:F6:A1:60:54:34:B3:A0:D3:36:A6:0D:E0:A8:3F:EF:EB
Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
Certificate issuer:       /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Certificate serial:       3684BE121586EFD1040B2408B6011C25514AB7D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
Manifest number:          0533
Signing time:             Thu 04 Dec 2025 23:51:46 +0000
Manifest this update:     Thu 04 Dec 2025 23:46:46 +0000
Manifest next update:     Mon 08 Dec 2025 04:13:46 +0000
Files and hashes:         1: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: KII5650hF6mmxLQ/rbgTb8PaRw7N913WBuqCn/GKGRI=)
                          2: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=)
                          3: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: UVW9pjMMh6nTzzAse0pe198GDDypk+vSUVBxDpcZFG8=)
                          4: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: u8M+AWdKNJcPe69pQJS4+PYz1s5y2/GoagDltM/LR4g=)
                          5: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl
                          rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 04:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:84:be:12:15:86:ef:d1:04:0b:24:08:b6:01:1c:25:51:4a:b7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
        Validity
            Not Before: Dec  4 23:46:46 2025 GMT
            Not After : Dec  8 04:13:46 2025 GMT
        Subject: CN=F025BAEDF6A1605434B3A0D336A60DE0A83FEFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:fb:2a:0c:09:42:3a:7a:ca:31:e4:76:23:
                    50:f5:4e:3f:5a:b2:28:f6:ac:50:51:8f:3a:fa:e7:
                    07:25:46:dd:f9:8a:79:52:a0:db:4f:eb:89:b5:a2:
                    8f:c6:5d:b6:af:9d:61:30:d7:19:5f:b5:ce:58:53:
                    10:b2:af:ae:82:03:9a:58:42:dc:3d:7f:ae:fb:f7:
                    6b:77:3a:e3:5a:7f:0e:b4:65:ef:29:f0:9a:cf:97:
                    10:84:b2:ba:67:d1:80:17:32:5d:6d:c9:cf:0f:b8:
                    74:fe:db:2a:0a:84:94:29:1c:72:1e:c4:da:6a:ca:
                    26:9e:7b:9a:23:13:1b:c6:01:a3:f1:0a:61:e4:ff:
                    46:fa:0e:e0:7d:cc:f0:0e:5d:b7:20:7e:0e:69:ac:
                    c7:30:7c:82:74:c2:c9:36:14:da:40:a2:d7:83:e3:
                    c1:91:5d:ae:3b:42:95:1e:fe:c0:f3:20:a1:d4:8b:
                    fc:0c:cb:ae:41:3b:2a:fe:d6:aa:cd:04:15:aa:21:
                    8e:47:f8:cd:a0:69:ca:4b:6c:2d:2b:8b:42:a4:ab:
                    4f:d3:93:4e:33:1c:82:91:4e:bb:63:53:f0:7d:54:
                    44:aa:d7:81:49:2a:20:9a:29:3b:3a:55:44:61:6d:
                    cb:01:d3:d4:9a:e8:b2:21:3e:ab:09:f3:79:bb:f8:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:25:BA:ED:F6:A1:60:54:34:B3:A0:D3:36:A6:0D:E0:A8:3F:EF:EB
            X509v3 Authority Key Identifier:
                keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:9b:5f:a6:e5:d4:ac:63:a8:3f:4e:fd:bd:6d:96:25:15:
         96:8e:54:f1:8b:f9:a4:54:b3:91:ad:d4:62:e8:79:1e:6c:10:
         b0:74:f2:50:1f:9f:bc:b3:a6:6c:48:67:12:f4:a5:f2:51:93:
         db:db:e0:1a:c8:8b:d2:42:d8:e6:38:d2:a1:72:44:17:28:1d:
         7b:a6:c0:04:64:3f:a3:10:b5:c8:12:cc:eb:2c:d5:fb:b4:26:
         f6:b4:ef:77:41:ec:a0:4c:6c:20:41:b8:13:38:e1:21:01:0b:
         75:82:5f:fc:09:ff:0d:06:5a:71:4c:46:c1:46:11:a2:86:bb:
         62:bd:fb:a4:0b:64:39:80:d4:f1:77:b4:d6:45:44:da:35:49:
         48:a0:ba:94:25:5f:c6:9f:ba:a1:69:93:03:4a:8d:25:e5:8c:
         f0:d9:57:9c:cd:18:ce:ae:13:8e:35:41:90:eb:33:b8:47:57:
         32:a7:dc:5f:fd:24:35:87:7a:a2:9a:d0:00:74:2c:27:c7:08:
         97:7e:66:d0:f0:33:0e:e5:3f:41:3b:5f:f5:f6:30:ce:b1:24:
         3b:62:7b:dd:16:17:a8:98:9c:fa:e4:cd:70:3d:14:3c:22:14:
         83:0e:2a:e1:eb:40:84:9a:87:ff:0d:62:4e:7a:eb:ba:60:b6:
         c2:7a:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:00:52 2025 by rpki-client