This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
File:                     019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft (raw, json)
Hash identifier:          NQTMRWvv9Wuu545ccd+N/F+PzCaOTa9G+eEgFBM/vEo=
Subject key identifier:   FF:E2:7D:86:1B:17:3F:F9:1E:D0:DE:CA:C8:F7:BC:A2:3D:74:FC:BF
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       57B95206D994F353895FC729DB4FF6F125198A92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
Manifest number:          0550
Signing time:             Sat 06 Dec 2025 23:20:04 +0000
Manifest this update:     Sat 06 Dec 2025 23:15:04 +0000
Manifest next update:     Wed 10 Dec 2025 02:16:04 +0000
Files and hashes:         1: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: Hf/g9MH3nDMxR780tzYPjt6Bwd/5JaVDRMU33qx+O9w=)
                          2: 3130332e31362e3133382e302f32342d3234203d3e20313430333839.roa (hash: AU/f1snUGaS/3h7ksZnzPZ+Fi8Wt1gev2S87CZUSgjU=)
                          3: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: zY/DTLT2/f8FyM693vCKNzl1QejUVfuC6YB6bL8UVVY=)
                          4: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: FFdVUfyBOgcCu6xdP2lWaBNlyM1ulBT3IMOjFrJjnnM=)
                          5: 019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl (hash: RL3sPlImNGPD4+2HLZR1EeA2yI7u6nOiUlJNnJWqjxk=)
                          6: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: RfB5Bc/1Kx8Z2GW8VP5Y8mOwfCQrXQkcjcDc/a780Z4=)
                          7: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: aipV7gSPPQMPuhlrSaPNdI8S0WHBDF5eYCWn7YcDp/A=)
                          8: 3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa (hash: qZyyqemZker5mLJct0Ssx2ZQrnylXGFblJRgWoAPLEk=)
                          9: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: UpwU5KmdRWmUbOHgdYL3vn70OYdWumBhyQiX8LxWO1k=)
                          10: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: LkPZiBIq7sZ1n7F+kqNTC/EhqsuXCtyoaFCBd4DVaZk=)
                          11: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: QKnDfI5JZwZIhQbf8UO2aLqMOetRSqXuRiirKlhDi1U=)
                          12: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: WW7MnkMbYSzZSz/FHUQYTbHWS6X3Dh2EHT3kv3qAo0o=)
                          13: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: gZN6IsaZZPJ9XhtVI/wgbUG7dHQ1llFNOV0uPk+EP3o=)
                          14: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: TF0wUy+dNaoOGoHOxxQXpCTB1A5mPRPhzdO0eyVTG9Y=)
                          15: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: k7mCh/V5YVLHeWfm4YNRz3kUy7wdS8SY2ttWOxrYovI=)
                          16: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: vlmpufcF63P9UR7JoXiLNhpqLKcvsNK2AmVHNn8AAME=)
                          17: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: Cx1Yk1fd+jf+e/EyVlgVZWrup8O7YeN3MJ/TbS+BKqs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b9:52:06:d9:94:f3:53:89:5f:c7:29:db:4f:f6:f1:25:19:8a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Dec  6 23:15:04 2025 GMT
            Not After : Dec 10 02:16:04 2025 GMT
        Subject: CN=FFE27D861B173FF91ED0DECAC8F7BCA23D74FCBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:14:c4:a2:ad:31:a1:91:35:9e:be:4c:22:
                    9a:3e:d9:c4:6e:af:69:a7:88:a2:25:68:08:62:28:
                    0c:30:44:88:f0:04:75:38:22:e8:88:e0:aa:da:1a:
                    91:cf:91:95:56:3c:3a:9c:36:1c:fe:69:ac:c3:1e:
                    86:69:3c:a6:58:26:3d:d0:ae:c3:aa:49:1e:83:ea:
                    e1:88:9f:39:82:d7:f1:42:f5:62:65:bb:97:27:06:
                    08:00:c9:f1:00:c4:38:07:08:8f:86:63:71:16:5f:
                    1c:15:c6:58:36:4c:ad:56:91:e2:1a:e5:c8:1a:b4:
                    7f:0b:dc:79:a8:71:49:6d:83:43:be:82:5f:89:df:
                    2f:a2:f2:50:eb:bc:95:a9:9a:d3:81:ab:ca:41:46:
                    08:46:7c:68:5f:c2:a3:91:65:16:d2:df:ce:3a:60:
                    b6:b5:81:67:cb:05:8c:5f:f2:68:25:f3:2c:26:70:
                    da:d8:fd:de:f2:f8:45:b7:3d:5e:60:0d:26:73:20:
                    49:ea:57:d5:13:63:27:4d:bb:23:71:80:fd:80:03:
                    b0:ce:af:73:7d:23:6f:97:ed:9c:02:81:7b:a5:cf:
                    f8:12:b1:09:cc:13:49:de:be:a3:13:9f:a0:7a:dc:
                    d0:7c:bd:5e:45:88:49:23:c7:a5:c2:42:e2:c4:59:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E2:7D:86:1B:17:3F:F9:1E:D0:DE:CA:C8:F7:BC:A2:3D:74:FC:BF
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:3f:80:1b:43:59:0a:b8:8c:88:c4:26:d0:66:7a:3f:da:
         41:c2:95:30:bc:2d:ab:ac:a1:66:ef:fa:60:d3:74:b0:39:6a:
         28:62:36:2e:9b:0e:70:d0:37:11:df:d1:d8:39:12:f3:bc:22:
         db:00:dd:80:be:58:48:64:a6:dc:13:27:2a:8b:bb:33:e3:66:
         d9:27:5e:c1:25:c6:6d:4b:09:f0:80:2f:f6:78:75:65:e5:f3:
         9a:ce:27:14:51:73:b0:e0:47:30:97:a2:da:fc:a2:da:a6:27:
         41:79:fd:0b:0d:9d:e0:a2:13:b3:55:8f:a3:c3:ae:43:62:f9:
         fd:e0:5d:92:be:93:5f:ed:0e:01:d7:d2:fb:47:b2:c4:49:80:
         c7:66:5f:cf:e9:07:e6:31:36:31:f2:f1:87:09:f2:90:7a:d7:
         57:7a:f8:95:bb:d8:74:b3:94:a8:33:7e:df:89:9d:55:16:81:
         71:11:e4:ec:bf:cc:65:2e:9e:b8:62:b4:11:8d:da:ec:ec:08:
         ac:bf:d0:8a:5c:97:1b:9d:7b:13:f1:4c:41:67:dd:a4:8b:65:
         6b:8f:fb:44:34:e6:5d:19:49:62:bf:8e:42:d5:75:8a:1a:ac:
         d7:25:0d:b7:1f:ec:9b:b1:ae:44:31:fe:b1:26:6f:40:dd:50:
         f9:59:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:44:46 2025 by rpki-client