This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
File:                     DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json)
Hash identifier:          XDbiED7GiEueg8vMIedy400pXh5+bc69ZJXE425y23Y=
Subject key identifier:   AC:FC:77:44:7D:B3:11:D2:B9:61:AE:20:AA:88:22:0F:D2:36:15:56
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Certificate issuer:       /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial:       7F913FFB3C3CD312FE3AB4433FC219FE3E54ADCD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
Manifest number:          052F
Signing time:             Sun 07 Dec 2025 01:00:42 +0000
Manifest this update:     Sun 07 Dec 2025 00:55:42 +0000
Manifest next update:     Wed 10 Dec 2025 05:49:42 +0000
Files and hashes:         1: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=)
                          2: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=)
                          3: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=)
                          4: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=)
                          5: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=)
                          6: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=)
                          7: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=)
                          8: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=)
                          9: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: NOZV+6lGct0OSgjI99XBR6L/g7oUV5xeckY/RiylgZM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
                          rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:91:3f:fb:3c:3c:d3:12:fe:3a:b4:43:3f:c2:19:fe:3e:54:ad:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
        Validity
            Not Before: Dec  7 00:55:42 2025 GMT
            Not After : Dec 10 05:49:42 2025 GMT
        Subject: CN=ACFC77447DB311D2B961AE20AA88220FD2361556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:f6:3a:86:6e:7a:2b:0a:77:b3:0a:4e:bb:
                    b1:b1:2d:c2:bd:a7:c7:93:25:6b:a1:a0:3a:07:a1:
                    ca:91:04:88:fd:9e:04:da:da:3d:f7:fb:54:cf:3e:
                    b6:53:ce:f9:23:71:df:96:55:54:7d:dc:58:22:66:
                    11:0d:5c:89:24:3d:ac:1d:2c:15:48:d1:08:59:64:
                    e5:79:53:4e:de:54:21:20:43:50:2f:4d:aa:0b:43:
                    fb:d4:77:e7:e2:b2:7a:68:ac:12:12:a6:63:aa:96:
                    1a:20:22:d9:93:e8:14:e7:6c:79:b9:21:26:83:47:
                    40:70:24:33:8d:93:d0:53:4c:0c:db:39:8b:e1:ae:
                    75:9a:cb:65:26:66:01:48:1a:cc:7a:d2:c7:41:88:
                    1e:27:59:db:80:e7:c3:f9:2f:0e:49:54:58:d5:7a:
                    ee:35:75:a6:07:4f:e7:e3:63:5d:04:2d:6c:16:42:
                    7b:7c:dd:f5:56:fb:10:ee:3e:80:b2:2c:23:5c:5f:
                    eb:ce:6b:43:5a:26:2d:78:6c:03:fa:4a:e3:d2:08:
                    ce:e4:fc:6e:b9:ae:26:52:80:55:a2:cf:7b:e8:5a:
                    63:89:b8:be:a9:bd:4e:08:ba:e3:d6:69:fb:e9:d0:
                    60:8e:90:87:55:cd:cd:65:a8:24:fd:cb:7f:2f:6a:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:77:44:7D:B3:11:D2:B9:61:AE:20:AA:88:22:0F:D2:36:15:56
            X509v3 Authority Key Identifier:
                keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:93:44:a3:61:60:05:ab:ef:9a:b6:1d:c1:25:71:f7:e9:09:
         d0:82:02:46:5b:96:2c:7f:81:4b:bf:ea:67:74:c0:10:31:48:
         87:13:d5:27:15:32:d6:eb:9c:d0:91:63:52:a0:99:b4:97:a0:
         07:6f:d3:6d:d4:53:8c:05:28:fb:17:77:ec:91:b8:ec:d4:34:
         e6:3e:1c:1e:20:b1:f0:69:18:55:d5:9d:a2:63:ad:93:1a:96:
         cf:00:a8:81:d3:a7:f6:f5:00:30:dd:c3:80:7b:01:22:a7:b2:
         00:9e:fa:d9:97:51:28:74:01:f8:08:52:e0:e8:3c:21:2f:81:
         77:cc:b7:a7:1b:74:ad:7a:a0:9d:17:60:11:73:41:6d:3c:cc:
         69:0a:0c:5d:bc:70:62:0e:39:88:81:4f:58:0d:29:ae:63:08:
         91:0d:9d:cc:f1:72:52:d1:96:6a:b0:01:23:c5:a3:e2:ae:ad:
         7a:94:89:33:de:36:db:8b:13:5e:45:91:11:68:42:78:46:b8:
         08:ef:9b:dc:80:11:12:ea:e7:86:4f:76:5c:8d:e3:92:7a:e9:
         26:2e:64:2a:4b:11:0f:85:29:2a:f3:2d:47:63:88:c1:a7:a3:
         40:81:37:23:62:7b:cb:90:ba:7f:9c:bc:98:ba:2e:de:e6:dc:
         55:81:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:24:04 2025 by rpki-client