This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          r/Wynck9XtTPNNuJCX8Ssip+cKEwCgCkPFR1+lAYl+A=
Subject key identifier:   BF:42:2D:3A:A3:5F:1E:9C:44:73:7F:D3:B5:78:B8:21:BC:DD:01:BA
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       74D5C366456BE056740EF7361C4097D902334152
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          0533
Signing time:             Sat 06 Dec 2025 17:42:02 +0000
Manifest this update:     Sat 06 Dec 2025 17:37:02 +0000
Manifest next update:     Wed 10 Dec 2025 00:07:02 +0000
Files and hashes:         1: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: 5aSqM2G2yl80LesSPcdF7TAurA8t2nRlgTMy90PqfEI=)
                          2: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: KQGoiV9BbegSAyEwUGTDu3EKXx16FmPyMikvR+g+1xM=)
                          3: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: GRueTMA2O7baTL3L4l0x1m5orgjkTOBplI10xnIAWvE=)
                          4: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: 8hhOR4WCINakOuDn9ngdKAlBm2vVq/aSfVO70m35uwA=)
                          5: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: 6MeWYAWtNqzt67sAV06u6BArwq93v2nLiPhDZr8DwFc=)
                          6: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: QRbMpzKdAfgfaj6wVJQ8tKGh3zUVZXKDZTbjWChNsSM=)
                          7: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: Z0HkArdqIMJrBesbtTWXeTOTwVWpOh3aH8V39csunso=)
                          8: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: yJK4a8K11r+E+tJag+nY+8xsV5fpS89Sq9CzTcNXWcQ=)
                          9: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: zmOC4MzLeCe4EnSJNalyvbaCNFeP0ozxLCeO2SJisTk=)
                          10: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: IBqG3JTOb2BDjjHywaslInJ9v2wxZNaFPsj9QnGmFyU=)
                          11: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: pgKybEe1UDr8NMq8IDGfdGJ30yQQRx6GVXnTuNxgMuU=)
                          12: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: X7lH+ZABzDfLLUY93QifZSz4LLPKca9OeiY0/c7tpYs=)
                          13: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: 7SlCCBwvpXf5oNDVNUKjezl2ujoj3pY3VJsCEIji7gA=)
                          14: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: LXI9mNoX4MU73UV9+XQILK6lbIuNFPN8Km57asx93mE=)
                          15: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: y4LCjeHJUSobMj/KV8lbwGmURe5cadaNn3OVULBwa7M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d5:c3:66:45:6b:e0:56:74:0e:f7:36:1c:40:97:d9:02:33:41:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Dec  6 17:37:02 2025 GMT
            Not After : Dec 10 00:07:02 2025 GMT
        Subject: CN=BF422D3AA35F1E9C44737FD3B578B821BCDD01BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:d2:e6:26:85:9e:dd:e4:3a:2e:65:6c:a0:
                    42:a1:0f:e0:b9:43:c7:f6:55:f7:94:ab:09:a0:bd:
                    f9:7d:80:e6:ae:08:b1:f2:e0:45:aa:0f:d9:8e:42:
                    0c:9a:8f:d7:fc:86:9c:bf:cf:5b:c0:f3:44:65:25:
                    70:b4:b1:f7:bc:ed:08:f8:b5:24:8e:f2:c2:46:c3:
                    c7:0b:dd:0d:b1:26:59:d7:19:50:26:b5:ad:14:cc:
                    1e:89:96:34:29:53:23:43:c5:1e:db:49:75:d4:80:
                    b1:a5:09:9b:b6:4f:c7:50:61:12:c1:1b:40:b4:2e:
                    ea:69:8f:36:5f:36:c5:47:09:c9:df:b3:87:9b:d4:
                    8d:94:e0:ef:7f:e0:6a:aa:ad:eb:65:62:a6:7c:d9:
                    a9:23:be:29:5c:43:01:e7:93:a1:0d:e4:02:ab:cd:
                    78:dd:a5:38:a8:68:f3:f0:1a:bd:2a:c8:18:ef:02:
                    a3:14:31:0f:7f:f7:57:4c:b7:52:54:34:f3:e8:2d:
                    d8:68:62:02:78:2c:f5:97:b2:7e:f8:bf:dc:c4:14:
                    84:69:65:b7:cc:e9:69:75:bc:7d:d3:5d:48:d3:d7:
                    e7:87:f9:94:47:d1:20:51:4f:a1:2c:9f:d8:0e:1f:
                    be:80:74:e7:85:a7:ce:79:65:08:56:5d:16:19:0d:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:42:2D:3A:A3:5F:1E:9C:44:73:7F:D3:B5:78:B8:21:BC:DD:01:BA
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:ee:cb:7f:6e:2f:09:ad:6b:b2:23:e2:8e:84:e0:77:b8:c4:
         a3:ef:47:52:63:c0:19:00:c9:b7:d8:b0:11:67:70:22:0e:00:
         12:ea:1d:87:09:8c:18:ea:a7:61:6d:2b:ee:82:00:6a:86:23:
         1a:4b:12:bb:fb:7b:46:92:f5:df:63:1a:11:3c:20:00:87:60:
         b9:7d:64:02:17:56:af:5f:67:0b:9b:3f:08:1a:89:f1:6e:6c:
         de:78:0e:bd:14:be:af:32:90:7c:3f:6c:db:4a:cf:d3:33:06:
         6a:2b:79:dd:02:67:7f:92:8e:8c:c5:91:f5:d4:da:56:d1:ee:
         3b:4d:ac:5a:7a:85:84:9f:fd:e5:3b:90:6c:c4:ad:b6:11:53:
         21:02:0e:92:78:99:19:80:1d:6a:68:99:2e:d8:6f:05:29:da:
         53:0e:27:84:54:a8:5e:a4:22:27:a2:20:5f:2d:1d:3d:9b:25:
         1b:19:84:da:02:6e:9b:cc:3b:e6:33:93:df:5e:c6:6f:cd:62:
         40:35:f6:b7:33:7e:d6:e3:d5:a8:70:8d:fb:8d:9b:90:aa:fe:
         7a:93:f5:f5:9b:29:90:6c:b9:9e:82:dd:de:9b:de:ab:62:97:
         9f:02:ce:5a:c3:f7:66:4b:86:66:1b:14:32:3f:0b:84:73:55:
         7a:85:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:59:41 2025 by rpki-client