This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
File:                     930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json)
Hash identifier:          sIkroiP1+dKDKmAxcJlH7n/uKfZVc3aiKk4iimrEArY=
Subject key identifier:   85:A6:04:49:0E:6D:71:3E:00:88:D7:B5:E9:94:E8:30:1A:C0:33:95
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       50AAEB150DB0A2CCE363F2E6180BE110F11297F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
Manifest number:          020A
Signing time:             Thu 18 Dec 2025 05:51:20 +0000
Manifest this update:     Thu 18 Dec 2025 05:46:20 +0000
Manifest next update:     Sun 21 Dec 2025 16:08:20 +0000
Files and hashes:         1: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 1Ap1USzQtzqwgDtQDrhH77MKkzf62RSPe2jHuhWF7VY=)
                          2: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: 0LRxbu/86kZstCrhrFM+xHSikcX960D6ea8IptSkGsE=)
                          3: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 1kY5e/tIJX114u746CW39QHTp2rzxidBD7y122Pd6Ew=)
                          4: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: 3Mqc4bpW2MlccFa1Ubf+/4bclFJ21AcG0i5KBo4oD48=)
                          5: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: QtiPgOKAP2zdJvR5FPFABfx4iIby7ldINKqgYGzNT04=)
                          6: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: /wrxjp3B8sDjBBLgEMDyVzCW0vguJGrqiiHoMYLvEDg=)
                          7: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q=)
                          8: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: KPO8Dur+z9GVaz2KZy/0xQJy9l93ayQwCwTcViUocP0=)
                          9: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: XOQFKUfDG7J0fbl+DTtQtPxTl6ii3+vzoE5o4zQO4bo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 08:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:aa:eb:15:0d:b0:a2:cc:e3:63:f2:e6:18:0b:e1:10:f1:12:97:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Dec 18 05:46:20 2025 GMT
            Not After : Dec 21 16:08:20 2025 GMT
        Subject: CN=85A604490E6D713E0088D7B5E994E8301AC03395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:5d:e7:6b:cb:30:b4:5b:de:1c:6c:da:3b:
                    33:b0:5b:70:c3:1b:3e:e5:c9:7b:6e:2d:91:39:e8:
                    c6:df:8b:01:87:9e:c5:db:29:14:57:e9:e7:bd:b9:
                    b6:41:b3:87:f9:82:ea:d5:0b:ee:b4:a7:4f:ed:d8:
                    af:73:36:fd:f4:eb:24:1b:8d:51:5c:66:4c:94:b0:
                    ad:d5:7f:91:b2:7b:fa:95:0a:f0:3d:42:f4:7d:d3:
                    e7:59:47:0f:a1:f5:a9:62:5e:f1:b1:83:be:a4:90:
                    ad:86:60:e9:f1:8b:6c:95:f0:0e:70:44:3d:4d:82:
                    e4:80:5e:2c:7e:3b:62:bf:e8:8c:02:9b:66:a2:44:
                    f3:fe:2f:5b:d4:ac:69:e7:11:b0:52:53:1a:b2:95:
                    78:40:d2:32:0d:32:ef:b2:04:f0:81:5d:27:fc:76:
                    52:bc:f0:28:78:68:77:32:88:85:e3:43:05:d0:65:
                    b2:c6:38:92:9f:e8:c5:fc:e8:dd:0f:94:d1:db:15:
                    ec:eb:56:e9:c0:56:c1:b0:44:a6:bc:59:26:67:78:
                    60:ed:0f:44:e6:fd:2f:f3:af:69:7c:60:23:33:d8:
                    6b:de:90:bb:d8:4e:45:db:47:10:2d:43:00:1b:02:
                    f9:83:d5:08:be:92:a5:19:4c:67:40:33:b5:c9:d2:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:04:49:0E:6D:71:3E:00:88:D7:B5:E9:94:E8:30:1A:C0:33:95
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:4d:9d:bc:dd:7c:3d:a9:9a:9e:f1:33:b9:d8:e6:e1:84:
         6a:78:be:e7:f1:f1:7d:bb:f0:72:a1:0d:b2:07:12:08:1f:43:
         57:60:50:6b:00:e4:6f:ee:d9:1b:72:1b:3a:37:20:50:36:30:
         cb:2d:f0:85:63:df:2e:19:b6:5a:3e:1a:09:2b:8d:54:88:fb:
         6f:40:0a:28:ef:6a:7c:79:3a:f4:84:41:0e:e8:ef:34:46:fa:
         72:bb:6c:df:4e:d3:70:5b:2d:d9:ae:00:9b:9b:1e:b4:67:f2:
         44:a6:af:b6:be:e6:a4:82:49:bf:22:72:9c:44:27:b0:b5:2f:
         b2:fc:6e:e0:5d:25:2c:88:e3:69:7b:49:4f:53:66:1b:c2:8b:
         34:17:0a:6f:e2:51:04:c1:f0:15:71:98:03:91:87:fe:65:07:
         ee:0c:cc:75:89:a0:44:9f:2b:6e:30:4a:b3:69:e8:73:10:f1:
         37:22:2e:e4:2b:2f:d8:f1:a1:47:95:8e:9c:45:ae:09:76:ca:
         62:a6:bf:47:78:af:98:cc:3b:96:87:de:a5:1e:94:23:92:ee:
         2b:7b:9f:68:83:35:54:63:6d:f7:65:74:0e:c2:61:3f:64:f3:
         fb:63:32:f7:1c:c2:f9:f3:00:01:44:7e:7a:eb:cc:08:2c:31:
         14:bd:65:19
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUKrrFQ2woszjY/LmGAvhEPESl/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4
MEIzOEE0NjAeFw0yNTEyMTgwNTQ2MjBaFw0yNTEyMjExNjA4MjBaMDMxMTAvBgNV
BAMTKDg1QTYwNDQ5MEU2RDcxM0UwMDg4RDdCNUU5OTRFODMwMUFDMDMzOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfF3na8swtFveHGzaOzOwW3DD
Gz7lyXtuLZE56MbfiwGHnsXbKRRX6ee9ubZBs4f5gurVC+60p0/t2K9zNv306yQb
jVFcZkyUsK3Vf5Gye/qVCvA9QvR90+dZRw+h9aliXvGxg76kkK2GYOnxi2yV8A5w
RD1NguSAXix+O2K/6IwCm2aiRPP+L1vUrGnnEbBSUxqylXhA0jINMu+yBPCBXSf8
dlK88Ch4aHcyiIXjQwXQZbLGOJKf6MX86N0PlNHbFezrVunAVsGwRKa8WSZneGDt
D0Tm/S/zr2l8YCMz2GvekLvYTkXbRxAtQwAbAvmD1Qi+kqUZTGdAM7XJ0vFBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhaYESQ5tcT4AiNe16ZToMBrAM5UwHwYDVR0j
BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4
NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz
OEE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2MjgwOWMtYmZiNi00ZmU3LThk
ZDYtY2E2MDIyY2RkNTQwLzAvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRB
OUM4MEIzOEE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJtGTZ283Xw9qZqe8TO52ObhhGp4vufx8X27
8HKhDbIHEggfQ1dgUGsA5G/u2RtyGzo3IFA2MMst8IVj3y4Ztlo+GgkrjVSI+29A
Cijvanx5OvSEQQ7o7zRG+nK7bN9O03BbLdmuAJubHrRn8kSmr7a+5qSCSb8icpxE
J7C1L7L8buBdJSyI42l7SU9TZhvCizQXCm/iUQTB8BVxmAORh/5lB+4MzHWJoESf
K24wSrNp6HMQ8TciLuQrL9jxoUeVjpxFrgl2ymKmv0d4r5jMO5aH3qUelCOS7it7
n2iDNVRjbfdldA7CYT9k8/tjMvccwvnzAAFEfnrrzAgsMRS9ZRk=
-----END CERTIFICATE-----
Generated at Thu Dec 18 07:54:43 2025 by rpki-client