This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
File:                     284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json)
Hash identifier:          QgboncERS/2FJ8JDhxsDtKNtEKDJFS59DI3njT0zAvE=
Subject key identifier:   0C:49:AE:10:90:41:A0:8C:F1:B6:AE:1D:6C:8C:38:EF:44:21:13:83
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       1AC7FCDD8632597759662262F11F32E88F8492A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
Manifest number:          0279
Signing time:             Tue 16 Dec 2025 14:31:47 +0000
Manifest this update:     Tue 16 Dec 2025 14:26:47 +0000
Manifest next update:     Fri 19 Dec 2025 21:44:47 +0000
Files and hashes:         1: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: xTc48z78x2hTWAz50fsj2u48rca6GyIeaspfgC6Ied0=)
                          2: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: 7j8WxhDjvG1oOHQGkGPPAheWgVjqTqJl2DR747eC/Z4=)
                          3: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: DY64pprFnHFOaGNLsgUuWKWN2nPg3FOgN/Io+biTvOM=)
                          4: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: Lbx56bi7U9t4V4gIX7m4fulkNS6DqtlvmzQW0U2Yss4=)
                          5: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE=)
                          6: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: 2JoT7M7m37m0xJyrGZ0XzlMJ4mVcLTVKVu699zp/2U0=)
                          7: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: BMaPZKd4S9fQAuwU5kc5O93/vGGp5sulKN1fvWKFFuE=)
                          8: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: vdRaqu+ifEWqE1r8nytgBjN36IR5VUDio5Qen7pybes=)
                          9: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: /selJRjYRY2RXdacberK6RXbNBqDD4h8KJuD+6tSmiM=)
                          10: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=)
                          11: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: rzmqH60uJRn3sGzkNJLLdHpbEepRCB0kAM+v2dcsYmc=)
                          12: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: 7Ra3Fe83WVldtrwmBn6CcKZZT+lK+aCd/JbT64/wrRw=)
                          13: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: XQn6RBqlg6RuaEoPTX1Jp1jRKOhAgtTrK3uAW566Uwk=)
                          14: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: LCHOag0uJb1cjVFsg2v6UKKoMu1dXnSpGeS35y1AH+w=)
                          15: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: vUuh6v5PPRzVvuwUZOwe6R6chuRFULbcu3aLCW2qA2Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
                          rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 21:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c7:fc:dd:86:32:59:77:59:66:22:62:f1:1f:32:e8:8f:84:92:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Dec 16 14:26:47 2025 GMT
            Not After : Dec 19 21:44:47 2025 GMT
        Subject: CN=0C49AE109041A08CF1B6AE1D6C8C38EF44211383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:cb:c7:1a:cf:85:b9:d9:bc:d7:46:22:d4:
                    29:7f:73:42:19:8c:b3:13:93:1e:19:6d:43:18:bc:
                    96:05:73:7d:d0:52:16:b1:74:f2:fb:a6:20:7a:7a:
                    3b:f3:dc:22:49:0f:3c:4d:69:45:eb:27:a4:e6:b7:
                    a2:15:2e:60:8b:e4:29:23:37:69:97:de:f3:07:bb:
                    34:f7:c1:05:52:a0:99:78:98:21:d8:02:ae:95:23:
                    51:01:39:eb:3c:4c:04:db:58:3d:29:23:61:bd:d8:
                    ef:ab:a0:c0:a5:d6:36:5f:51:c9:10:9b:92:94:0c:
                    b1:47:68:48:34:0d:d5:2d:16:df:a8:37:e6:12:a1:
                    6b:3d:b6:0f:13:0e:18:b8:c7:47:6b:d8:d5:9b:14:
                    06:d5:10:ce:ce:1b:68:7e:60:ba:f4:bc:51:ff:44:
                    90:7c:9e:48:bb:2e:4e:87:56:e4:cb:39:e8:59:91:
                    3d:87:17:c7:40:68:69:d2:04:7a:69:50:ec:10:86:
                    7e:f2:d0:da:4c:d7:16:e6:10:64:04:fe:20:a9:17:
                    29:87:7b:5a:d1:f8:eb:cc:7b:ca:f5:5a:aa:02:6d:
                    1d:3c:54:ec:b3:09:34:48:63:dd:d1:12:84:80:20:
                    60:db:b1:ef:c9:f4:82:6a:8d:40:a3:d5:1b:ee:54:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:49:AE:10:90:41:A0:8C:F1:B6:AE:1D:6C:8C:38:EF:44:21:13:83
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:a3:15:4f:89:36:32:a6:9b:29:d4:69:5e:c7:79:73:9b:
         85:45:a7:40:e1:4d:3f:0d:45:9a:b4:29:99:2f:c7:19:ba:3a:
         ea:2f:ab:02:23:b7:cd:37:48:11:04:80:54:3e:49:aa:68:12:
         23:b5:8f:07:a6:1d:72:6b:8b:38:da:a5:bc:e7:78:8a:30:51:
         a0:a1:c9:51:54:67:22:15:b7:2a:9d:d3:49:53:30:b6:52:73:
         fb:ba:b1:68:83:ce:2e:56:76:81:5a:dd:9a:a8:85:f8:16:3f:
         68:a1:a4:0a:43:4f:2a:6a:06:e2:3f:e8:08:cf:be:06:af:34:
         07:0d:13:d7:47:5c:86:2f:e3:04:91:28:89:e3:06:58:ff:62:
         25:fb:05:b4:8e:68:c6:95:b3:db:c6:42:46:76:57:51:e3:08:
         e7:28:3a:af:cf:cc:6e:ce:9c:dd:83:69:6e:42:f4:c0:94:8d:
         51:e0:81:0d:16:c9:b5:3b:04:10:bb:fe:38:32:a4:b8:82:d3:
         a5:03:5f:58:29:a3:05:73:9a:d4:b3:c0:6b:62:b9:27:af:55:
         08:c1:32:b2:ec:d1:b8:bd:48:80:e5:10:eb:f8:e8:c5:0f:74:
         1e:1b:ff:af:33:2c:73:84:e8:24:cf:de:6f:20:4f:1e:ef:67:
         e8:f0:9b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 18:01:02 2025 by rpki-client