This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
File:                     0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json)
Hash identifier:          anHaIYH82ry5dspz4Y38PMUREQFCXVRtyH2LL3keCBQ=
Subject key identifier:   E5:6F:3F:59:FC:F5:54:B7:EE:DB:60:D8:9F:38:B9:32:28:F2:B7:5E
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       468F329A53A7390ECFFD6912657CADC8D7E85E2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
Manifest number:          039D
Signing time:             Thu 04 Dec 2025 22:02:19 +0000
Manifest this update:     Thu 04 Dec 2025 21:57:19 +0000
Manifest next update:     Mon 08 Dec 2025 07:15:19 +0000
Files and hashes:         1: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: 3F5ryh384+w3GpvdHsyBJS1AxEbRZUnJ/gwprNobPkU=)
                          2: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: PwS8ZteZSgPMYr/+U7TBWB1NbbKeXLIctaDRv9tMXAw=)
                          3: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: AljrwxcXPRJV2CeaxgkjeFz1mPYn0NpdJRkpDNeohWs=)
                          4: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: oIc+IS9s67G8g+5SzlgzR3BCaCQBAUf5KRC7396lank=)
                          5: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: keDZ5dqo7QpwKbY9EEgBghaBvUKpvyvuxTWbyrg58Eo=)
                          6: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: fYJfmsjf+SULVX6dy88bE8cQRoUB/HUNHP8Mc9BU5Es=)
                          7: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: neHLBe/fEcPkBE3oSjIGkPPuzPFnKvLrnK1gADqMmBU=)
                          8: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: F5F4og+0ANkMp2eyG+y4uSqqLHGppY2rxvIFdOjz0YY=)
                          9: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: L9UqHBOT0KM8Y3HKq7TuZiV7NwWM18YFSbtkcApuAS0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 07:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8f:32:9a:53:a7:39:0e:cf:fd:69:12:65:7c:ad:c8:d7:e8:5e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Dec  4 21:57:19 2025 GMT
            Not After : Dec  8 07:15:19 2025 GMT
        Subject: CN=E56F3F59FCF554B7EEDB60D89F38B93228F2B75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:58:cd:11:0c:13:a0:69:cf:8c:30:2c:53:
                    13:59:fe:5b:fe:32:5d:96:28:d2:31:3f:d9:38:e6:
                    e9:1c:10:8d:a9:71:b7:7f:9b:a1:3d:50:74:ca:72:
                    ae:56:58:a2:e8:54:fc:59:4a:92:6c:39:b1:13:43:
                    13:ad:d1:07:8f:56:f8:bc:81:b8:72:03:8c:4c:24:
                    e7:4b:93:df:93:d3:24:9d:6e:9b:f3:5d:fb:9e:a8:
                    fa:f3:2e:32:d7:96:23:b8:62:c0:9a:ca:49:a8:be:
                    f5:f0:b4:1a:84:85:21:09:20:a1:58:25:bd:4a:c5:
                    06:54:15:04:fc:99:6d:43:28:ca:d7:e2:e7:9b:ab:
                    5a:30:7c:59:ae:c9:f2:27:10:5c:51:a2:8c:57:11:
                    c6:5c:92:65:2e:ef:c3:f3:24:1a:8c:43:2b:ef:47:
                    6a:08:5c:93:c6:bd:fa:32:6f:e8:bd:3f:79:3e:f1:
                    10:a5:9b:44:ef:4e:9c:d8:6e:e7:8b:06:17:bb:16:
                    82:de:e2:7e:c9:1e:84:e5:0d:95:6d:17:79:08:1f:
                    22:4b:b8:2c:cc:d7:c2:68:60:72:7c:92:de:a4:b8:
                    91:38:a3:36:20:66:b1:8a:f7:2e:b7:48:4d:af:17:
                    b3:16:bd:f4:36:01:72:07:a7:20:12:32:40:9e:b5:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:3F:59:FC:F5:54:B7:EE:DB:60:D8:9F:38:B9:32:28:F2:B7:5E
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:22:7b:20:26:5c:0f:8a:45:35:bf:11:3d:92:db:29:76:c3:
         57:ef:fb:64:b4:1b:24:5e:61:c0:db:18:35:89:83:ea:b3:65:
         4f:74:6f:d0:a2:3c:80:3c:44:17:73:94:5a:b5:af:a7:ed:99:
         bf:ae:63:95:0e:76:39:29:46:36:ec:b6:3d:c2:51:36:b3:8e:
         fd:2f:fc:27:fd:28:03:14:f0:99:56:85:66:a5:4f:10:80:08:
         79:1d:5d:a1:9b:83:e2:03:25:e8:da:fb:ab:c2:47:fb:18:76:
         87:17:6a:79:9f:10:5a:cd:71:88:0d:f3:30:97:f3:1f:c1:bc:
         b5:4a:d1:7d:b3:86:b6:89:55:42:c0:14:89:37:93:3b:23:5e:
         ce:62:f1:49:60:3f:b0:b8:ca:57:78:18:6f:5e:c8:b6:31:3b:
         bd:0c:0c:16:b4:ea:54:05:13:62:c2:fa:e4:3d:db:11:52:46:
         59:b9:46:5e:8c:ca:99:33:5a:de:f5:b6:3b:b4:b3:de:ac:89:
         97:a9:26:fd:2f:54:35:15:53:6c:2e:c8:3f:41:d7:99:04:10:
         ee:25:c2:75:8d:9a:5f:ff:b0:2a:fc:ac:48:5f:95:76:d0:a3:
         a4:c2:59:b7:90:1b:db:f0:f3:d5:b1:cb:81:3d:88:bb:87:82:
         2a:0d:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:15:28 2025 by rpki-client