This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft
File:                     80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json)
Hash identifier:          3R734WH9H0/ojtNFt7053Dz52RE7u/sCENAvl0jm7E0=
Subject key identifier:   09:E9:2D:7A:26:D7:57:6F:8F:E9:CF:0C:8B:60:40:53:43:77:72:54
Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
Certificate issuer:       /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
Certificate serial:       705A1324AE8C07C3DEB037D4591F3BFF4A317639
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft
Manifest number:          04FF
Signing time:             Sat 06 Dec 2025 01:30:06 +0000
Manifest this update:     Sat 06 Dec 2025 01:25:06 +0000
Manifest next update:     Tue 09 Dec 2025 05:00:06 +0000
Files and hashes:         1: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: zWk8nBtzJ5kCwr+alrHNTeusIWxyDqjAXquSFLRhyts=)
                          2: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: MnxsLBxnCm6F40OhhKQb/lu+z75TMPF3C+fnrBq75B0=)
                          3: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: oe71RDdtF+9+hBS9awBl7/UQgojTF+hgJs1azOC1AoI=)
                          4: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: WH82srfa1fHbTvQkryRY+/IYgX3wHeBdFBK97LFsmt8=)
                          5: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: jr0zhMaOjFRbvUw0rAJarRm1el624E3tGIRY/QTijIk=)
                          6: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: D+6vTrccYMAaEtpPFmF4eGIXkEsVbJklCAIq8OIMyf0=)
                          7: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: T654G+yCYm0pCAnHn6yDzDRECELS3m/BecmCxCSTOAo=)
                          8: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: YsPCY6UCv05oHfHFXQer5wdXjWe1w4PGTDeh2YhnWn4=)
                          9: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: 6qWlUeCLsff2Ezhc+I97fHgwx8eIfQT4fRqy3JTRAWk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl
                          rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5a:13:24:ae:8c:07:c3:de:b0:37:d4:59:1f:3b:ff:4a:31:76:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
        Validity
            Not Before: Dec  6 01:25:06 2025 GMT
            Not After : Dec  9 05:00:06 2025 GMT
        Subject: CN=09E92D7A26D7576F8FE9CF0C8B60405343777254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f7:a2:dd:7f:4f:54:04:d4:4c:ca:5c:1c:da:
                    c3:65:df:d3:1c:f5:76:af:65:a4:d4:9a:31:01:10:
                    c7:9a:19:21:af:6b:55:4b:1f:16:c7:99:ce:c7:fc:
                    e2:84:f5:e7:2f:1d:9e:21:ce:a0:d9:db:78:fb:47:
                    51:93:e6:40:92:00:21:ff:f3:33:1c:6d:85:1b:f6:
                    52:1e:4a:a2:4a:70:8f:36:77:eb:c7:ad:41:f3:50:
                    53:f2:83:c5:ab:a4:e2:c8:d9:d2:7d:c2:5c:09:1d:
                    70:22:02:45:84:51:05:f0:8a:2b:5e:29:f0:80:d7:
                    57:4f:bc:96:5d:0c:7c:b2:28:0b:6e:6f:60:fe:8e:
                    7c:6d:65:24:07:89:12:0b:56:a5:a5:0f:2d:6e:1b:
                    52:91:28:4a:e2:00:47:7e:d1:5a:d8:ce:93:53:47:
                    68:bc:b5:87:a1:14:6a:c4:e4:e2:87:7e:a9:ed:35:
                    f7:34:55:b4:e8:7e:b6:89:77:d9:b5:76:74:7e:16:
                    4f:ef:24:ca:15:b8:55:47:67:38:b6:11:01:9b:72:
                    42:86:90:8e:a6:e5:6f:94:d2:c3:4e:59:50:04:07:
                    ae:dd:33:3f:5b:56:0d:4f:38:04:ca:d3:ed:5c:c1:
                    02:67:a8:51:d9:ad:03:ab:c1:00:d5:7b:fb:84:05:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:2D:7A:26:D7:57:6F:8F:E9:CF:0C:8B:60:40:53:43:77:72:54
            X509v3 Authority Key Identifier:
                keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:96:2a:0b:37:0b:17:13:d2:f4:db:85:84:a3:65:a8:8e:fd:
         9b:ce:7f:cc:6a:b9:9a:5e:40:d2:1d:75:5a:40:e0:4c:98:28:
         2e:f2:f8:d3:11:2c:fd:ae:93:1d:0c:ba:ac:ef:80:fd:d6:47:
         87:eb:f6:a3:46:65:de:6c:ae:7a:d4:63:ef:9b:bd:d7:28:8f:
         82:ab:68:c2:d2:39:f0:d5:e1:95:27:07:4a:58:d2:70:db:28:
         04:c7:d3:c4:3e:ce:9e:65:ec:45:25:28:4b:47:be:76:ca:84:
         0e:06:0f:9f:8b:56:6d:d4:57:07:3c:95:d1:49:42:d9:18:00:
         6c:d3:34:6c:0f:10:87:ef:c5:d4:fc:2d:8a:8a:0b:64:b1:a4:
         0a:ec:61:ed:17:c7:40:1c:7d:7e:8b:90:21:e8:d2:7a:6d:03:
         5b:ba:cd:47:be:59:91:8e:3c:54:f5:80:df:f5:71:48:d9:36:
         ea:96:9a:c9:9d:87:bc:32:02:79:79:b1:24:42:d9:54:87:01:
         95:d8:b1:e8:41:90:92:e8:14:7f:db:b1:be:92:d1:1e:eb:d5:
         c8:27:fb:c0:31:bc:56:24:15:73:56:d2:88:a9:f1:08:79:47:
         83:2d:42:0b:81:5a:9b:62:4b:30:e5:43:f2:d2:e7:aa:30:cd:
         09:d8:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:16 2025 by rpki-client