This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
File:                     C00163880F235714759920507217F2A7D557C953.mft (raw, json)
Hash identifier:          H7/NTldWKTMTAbMrmFm6i1W9OornhcyUNaJ2uj5spQQ=
Subject key identifier:   86:9C:11:68:9D:21:9C:93:E0:C9:F6:EE:FD:C8:62:B5:4A:8C:D0:56
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       6EC9160209D0A822F1F87114B7A1EBD81B3F1918
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
Manifest number:          0543
Signing time:             Sun 07 Dec 2025 00:21:12 +0000
Manifest this update:     Sun 07 Dec 2025 00:16:12 +0000
Manifest next update:     Wed 10 Dec 2025 02:56:12 +0000
Files and hashes:         1: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: wJcVXH5kdnO3oVC250cjFRiURy0rH8CsrLKZhYlCnvE=)
                          2: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: 9gW/gDrS5M+meNB8DH240JCZZ/+dYKmLblxStXo0uQc=)
                          3: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: mISY0erp3ysDPa3O+17vQrQWnmbYh2F2NVUBefRVeig=)
                          4: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: ne4Fd9z4GMtggr+H/mTwmUbV1S7/FJjgjsGd2sQh0+E=)
                          5: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: 4tkvmHO2brVIZ3whhevsuoDJ/Kb5htbxnedOQ9re2sg=)
                          6: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: ExAeQuV2nwMk6MuMAQPtG+claobmvvbve+qtKVWxRzM=)
                          7: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: XOiKBhMpiojDMkAtgGNcSAtmHT5v9rhfXApeFJZLH2w=)
                          8: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: RMDQ4JU1W8jQ/y6PzJZSI8HHgybbgbJ49cw97ZP5E8k=)
                          9: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: xHN63AGHVhpLy6i5Ne/Rg1b8TEgYmsmsilFtTygXtok=)
                          10: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: rTOdy2cdmmm5QYorTFShkoD3ZBHt/J9THDepoiG1zQU=)
                          11: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: g6G0tGc+VbiXH94zgiJaavS68ToTcFl7b92TkAIdvw4=)
                          12: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: XSZGKE/S6Hn7twCZ3sUL7QvBv8/jTjIsBvikiErVDPQ=)
                          13: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g2oV0iGk+oSLBEAQ3+fcNmyGfdkZlXFUuvI/IByWsRg=)
                          14: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: WjUo8uQ6z2o8xHjo7VhYk2FONtSF96fbL4VpKiZUe3M=)
                          15: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: NQW7UwpMESN0U2eeb5sCy8+6MskrqZgb0v8mJ0QPgMY=)
                          16: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: oCRdMEaQb+0L+jLmpAQiC99Gb3FvgP0DAlKAkjWxSuo=)
                          17: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: fEyWQ5MFyToVUsb1qHQF70b1Re5EIhjysqGNFf3N2uE=)
                          18: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jv40inOqkP45tTFU+4fmcadEbXbs4EIc7qcUlk8q2LU=)
                          19: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: oKxubgVSq9KanfdFvoxAtxxPQZTjjUlhGrzvFIeghIM=)
                          20: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: oeZmr3dpPOSKqyrPruBZU1vvAe8Vo0KgbyY7tyhEXpI=)
                          21: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 2Y6D9qyT24i+mrDmXDYxZ/h+kMGeojU/2MwD0/st0XM=)
                          22: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: pKw5LGAwZ02j8bp/435WnbI3b3bMVBsuwWMCKuHmspo=)
                          23: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: YznKDs1CbxF08N3mJ1JGQ46Fgw+8Zoc4by7UrLF1FjE=)
                          24: C00163880F235714759920507217F2A7D557C953.crl (hash: vzeEPqMHKt6+mxhG4kB+Ha8ErJ/dJiC5fIQifjazEmI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c9:16:02:09:d0:a8:22:f1:f8:71:14:b7:a1:eb:d8:1b:3f:19:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Dec  7 00:16:12 2025 GMT
            Not After : Dec 10 02:56:12 2025 GMT
        Subject: CN=869C11689D219C93E0C9F6EEFDC862B54A8CD056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:a8:8a:d4:29:44:a9:fc:eb:97:6e:8a:38:
                    93:b8:4c:aa:30:61:9b:44:a9:ae:0c:7a:a8:88:56:
                    73:6e:e6:be:74:93:63:93:8f:e6:a2:d8:f4:42:64:
                    25:4c:5b:52:da:05:fb:a7:f0:ec:01:74:97:56:61:
                    2e:65:80:0d:94:11:b1:77:ab:27:74:6a:53:47:41:
                    e8:28:a3:da:07:e5:4a:bd:c4:7a:86:87:9b:d4:b7:
                    04:6a:97:9f:87:39:43:7b:1d:2e:10:27:d8:b5:bf:
                    84:92:64:39:61:26:24:32:cb:c8:10:72:6f:75:0f:
                    60:10:1b:0e:34:04:25:82:5a:51:70:0d:6b:31:27:
                    a2:f7:b3:4d:26:ca:69:34:68:90:20:d6:3d:69:31:
                    4f:78:01:46:c2:15:09:ee:7b:db:43:73:c6:43:88:
                    6e:8b:0b:28:2e:de:96:2b:8b:7a:7b:2b:b5:84:60:
                    2e:a4:97:17:ad:1d:39:11:f7:2e:a3:7f:ca:59:89:
                    18:ce:5e:10:08:50:ab:e7:2f:5d:e6:df:e3:60:0a:
                    fe:bf:34:8b:1c:0c:ad:b7:a2:44:f9:d8:15:75:96:
                    fc:ea:f3:10:54:c7:ae:d8:7c:ea:1f:70:58:1e:fe:
                    c4:52:1f:33:25:47:cd:98:30:cb:26:dd:5f:8b:19:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9C:11:68:9D:21:9C:93:E0:C9:F6:EE:FD:C8:62:B5:4A:8C:D0:56
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:22:70:f2:79:85:50:95:bc:cd:80:18:84:3c:a1:84:9c:a0:
         e4:f4:04:2e:8e:6c:73:f4:00:5a:a0:23:7f:ad:a1:c2:a9:c9:
         55:23:3e:0d:12:47:dc:64:fa:03:3a:97:f6:8d:f1:19:76:96:
         34:54:90:68:bd:d3:a5:a4:4d:eb:1d:69:71:87:a1:cb:f3:34:
         79:c2:c3:17:89:ff:a0:20:ab:f6:62:08:df:3a:0c:9c:e0:e8:
         55:c5:76:ee:20:da:2e:27:54:6e:1c:92:e3:11:a7:96:95:ef:
         c9:21:65:b5:20:88:96:75:1c:6a:18:68:8b:ca:83:73:69:35:
         3c:70:3b:77:47:52:57:5e:85:ab:d6:3e:af:01:84:03:d9:ec:
         26:88:da:4c:4b:a2:76:16:86:a9:f9:b6:fb:24:f8:70:5c:34:
         7a:c6:f4:d6:bf:6f:16:cd:24:ac:a1:f8:52:e2:15:58:89:90:
         2d:f2:4d:84:43:a3:0a:a8:68:11:ac:8d:9a:c9:0a:99:22:ba:
         73:00:a6:22:be:d1:b9:e6:5c:4d:d2:0a:03:bf:6d:d8:5c:af:
         81:9a:38:47:77:fb:a0:f2:8d:25:68:90:6f:5d:91:89:53:6d:
         8d:51:14:fb:f5:3f:08:ad:83:87:72:46:b0:4b:20:cc:ce:c0:
         61:78:03:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:26:25 2025 by rpki-client