This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
File:                     930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json)
Hash identifier:          Urws0vphpBMLnWL/UGLf4WjxJogVtbIU6j5zZSFxlVU=
Subject key identifier:   61:07:17:55:57:0E:0C:D0:77:F0:B4:E2:17:A3:55:9A:77:E5:65:1D
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       60BF13B94D770F91E4971FA4BED96DC79D4365AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
Manifest number:          0205
Signing time:             Sat 06 Dec 2025 13:41:20 +0000
Manifest this update:     Sat 06 Dec 2025 13:36:20 +0000
Manifest next update:     Tue 09 Dec 2025 18:16:20 +0000
Files and hashes:         1: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: KPO8Dur+z9GVaz2KZy/0xQJy9l93ayQwCwTcViUocP0=)
                          2: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q=)
                          3: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: XOQFKUfDG7J0fbl+DTtQtPxTl6ii3+vzoE5o4zQO4bo=)
                          4: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 1kY5e/tIJX114u746CW39QHTp2rzxidBD7y122Pd6Ew=)
                          5: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: 0LRxbu/86kZstCrhrFM+xHSikcX960D6ea8IptSkGsE=)
                          6: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: QtiPgOKAP2zdJvR5FPFABfx4iIby7ldINKqgYGzNT04=)
                          7: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: oFcSyRzqyCnNyP30UaMuKOz0zeDPfkz2F5zJi0S+Blw=)
                          8: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 1Ap1USzQtzqwgDtQDrhH77MKkzf62RSPe2jHuhWF7VY=)
                          9: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: 3Mqc4bpW2MlccFa1Ubf+/4bclFJ21AcG0i5KBo4oD48=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bf:13:b9:4d:77:0f:91:e4:97:1f:a4:be:d9:6d:c7:9d:43:65:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Dec  6 13:36:20 2025 GMT
            Not After : Dec  9 18:16:20 2025 GMT
        Subject: CN=61071755570E0CD077F0B4E217A3559A77E5651D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:7d:8e:a7:f7:56:91:93:01:7d:c2:0a:e5:
                    29:7d:a4:1a:6f:b8:56:fc:24:6e:64:5c:3b:0a:2e:
                    de:20:bd:2e:4a:82:7f:43:6c:c5:89:e7:12:8f:f2:
                    bd:d2:c5:82:8d:f8:7a:2b:61:73:0d:14:38:55:6d:
                    f0:31:c1:aa:a3:87:c7:de:ed:3a:f0:73:65:45:40:
                    da:90:cd:3e:03:0a:e6:28:22:16:f6:9e:7b:c1:f6:
                    14:93:dd:65:f3:34:ac:30:a4:0e:82:85:a1:af:ff:
                    0b:59:fb:dd:61:7b:07:cb:9a:0a:22:19:2f:d2:d2:
                    c0:f6:d1:af:fc:98:f1:41:b1:a5:f3:af:ef:75:73:
                    3d:cf:04:58:21:af:e8:1a:9b:39:db:b8:84:eb:6b:
                    b5:ec:95:d5:3a:5f:e1:68:cc:05:15:3b:d6:45:90:
                    f1:4f:97:5d:7f:6d:64:db:c0:a5:bf:6f:68:7a:37:
                    dc:11:1a:72:7e:00:e9:ec:1d:2f:f0:46:6a:90:6a:
                    ff:b1:ac:a6:81:00:34:75:03:86:bb:36:d3:88:fa:
                    08:6e:0d:68:a6:25:19:4b:7e:25:91:a0:71:87:fb:
                    e1:e5:05:6a:a3:01:b1:10:cd:15:df:04:28:5f:58:
                    43:73:b0:46:ec:5a:60:25:d1:4b:98:15:9f:94:d5:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:17:55:57:0E:0C:D0:77:F0:B4:E2:17:A3:55:9A:77:E5:65:1D
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a0:7b:a0:04:99:b5:0b:6a:53:05:83:95:ed:e1:0d:d5:6c:
         9d:05:32:5b:ff:dc:65:7b:5a:c4:79:50:61:f1:d8:36:91:a5:
         01:25:ca:cf:aa:53:52:43:01:5f:3f:f2:03:1f:8b:ff:6c:eb:
         58:36:46:60:0f:31:36:63:11:c8:33:d3:d0:bb:07:7c:e0:85:
         85:7a:0c:a4:53:66:36:6a:62:6c:a9:84:3e:7c:7a:f4:2a:67:
         69:4a:2f:d7:96:39:8f:92:fd:87:c5:53:3f:b9:24:08:74:76:
         38:1d:b8:4a:80:47:b6:7f:91:56:7d:82:bd:e1:b8:35:0a:01:
         a6:ef:f8:5b:06:ec:8e:88:1f:9d:8a:1e:68:bd:b3:19:5e:6a:
         15:6c:1c:cd:ef:5d:0e:0f:7c:bd:87:07:6f:85:16:f1:6d:ff:
         8d:86:c5:df:fc:a2:7f:8e:dc:f9:c7:5a:93:5a:d8:7f:93:ae:
         c6:e0:b8:65:04:a9:49:86:23:2a:d5:8c:ee:9b:5d:d4:f3:ad:
         2f:f3:c5:14:20:bb:f4:a0:d4:10:4a:83:b6:5b:94:7e:b7:e9:
         b3:3a:5a:a3:f7:a1:f1:5e:7f:71:6f:68:08:97:cf:40:4f:db:
         fa:90:4e:b0:0e:7c:55:2f:d6:17:85:99:2c:82:94:bd:b2:e2:
         f9:70:d4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:01:05 2025 by rpki-client