This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
File:                     80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft (raw, json)
Hash identifier:          QeDr75PVg7LSHum5Wp6k463Zjw45T+sEkohKw4KEc64=
Subject key identifier:   F3:89:2A:51:B0:34:CA:41:18:31:72:0A:21:5F:2A:73:55:BC:43:E9
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       4B3CF20C02C684B637879C222B30D7652D8BA9E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
Manifest number:          0533
Signing time:             Sat 06 Dec 2025 05:21:34 +0000
Manifest this update:     Sat 06 Dec 2025 05:16:34 +0000
Manifest next update:     Tue 09 Dec 2025 09:25:34 +0000
Files and hashes:         1: 3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa (hash: r2sMVBIlcCozBKFBq0diWRJjeE6cRdUNaq5HifiiwWA=)
                          2: 3130332e3134312e32302e302f32342d3234203d3e20313338383837.roa (hash: zfEP/Pp+voTq+tnwh6zrXyttg/V3CtiXWPgzCewZNzw=)
                          3: 323430353a6334303a313030303a3a2f33362d3336203d3e20313338383837.roa (hash: Pkxhtzc/wMq1OgU/fO/ZVo996RxoRVPZUmYGZ2IhOu0=)
                          4: 323430353a6334303a3a2f33322d3332203d3e20313338383837.roa (hash: ruIZZO7QM8ImQmI2gqHbRwgzA5H9KzvEbmp6IKH6GiU=)
                          5: 323430353a6334303a3a2f33332d3333203d3e20313338383837.roa (hash: wp6HGRFsjrQsDDxYN+2VcMhnqzQCe6fyQbIqHpdg2Os=)
                          6: 3130332e3134312e32302e302f32332d3233203d3e20313338383837.roa (hash: lmx0XZquBskC7D+0GLv2mO10TyL75yCcIcmOAKJbJoQ=)
                          7: 323430353a6334303a343030303a3a2f33362d3336203d3e20313338383837.roa (hash: QJm/lblduNPd02BEuIg39qDUkH4IZEUKUU8ZLrF08QA=)
                          8: 80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl (hash: NMA/t22Z6382o4WSTkP7MQzyzqT2mWRqF+V7vxgWyYE=)
                          9: 323430353a6334303a663030303a3a2f34302d3430203d3e20313338383837.roa (hash: wQ5s1z2AdYlcJThfcBR2RUp7JW/nVYYistipQnAGWOk=)
                          10: 323430353a6334303a363030303a3a2f33362d3336203d3e20313338383837.roa (hash: 9Hphz4rTA2sQyZSSBKURj5EBn+fJ7avpUnADOEhDzkQ=)
                          11: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (hash: UDxgb+p/OheGc5Pu54zU2k+ER7Buis6ZE5oNXaOKTTA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 09:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3c:f2:0c:02:c6:84:b6:37:87:9c:22:2b:30:d7:65:2d:8b:a9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Dec  6 05:16:34 2025 GMT
            Not After : Dec  9 09:25:34 2025 GMT
        Subject: CN=F3892A51B034CA411831720A215F2A7355BC43E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:85:01:25:0c:27:e5:68:c3:cb:7c:5e:3b:
                    59:c7:27:31:90:15:1b:98:28:c1:54:a2:cc:96:17:
                    42:f9:9b:7a:1a:b7:44:2b:d4:38:73:be:cf:56:45:
                    df:78:ac:32:fe:cc:67:22:d6:ee:e4:37:e5:f4:b6:
                    77:19:1d:46:d1:8a:f5:48:c4:b6:b9:5c:75:ca:ec:
                    fa:6e:5c:ef:6b:2b:99:b1:f2:d5:10:42:1d:b1:1b:
                    1b:e3:f6:11:1a:d3:18:ca:41:55:c8:c6:d3:fb:63:
                    44:04:97:7f:0d:58:8e:e5:a9:43:bb:54:b4:58:53:
                    18:a6:c9:09:e7:19:5b:3c:20:b3:4d:15:c2:ee:3b:
                    58:81:c2:07:dd:1d:8e:75:e4:ff:e2:2c:74:e8:5a:
                    b3:b8:ea:c0:b3:80:31:0c:68:06:a3:55:38:84:3e:
                    f9:5e:9f:43:55:6d:70:5d:4b:03:78:73:87:3e:1e:
                    59:92:81:f7:b2:27:07:a2:99:d3:ab:cb:6f:88:07:
                    f6:7a:95:a1:12:92:4c:fa:04:b1:60:71:11:e3:17:
                    f9:83:40:c8:2a:11:9a:75:3d:6c:77:c1:3d:79:eb:
                    5d:7d:ce:20:10:af:3a:d0:9b:53:e2:1f:97:83:20:
                    4a:db:cd:86:db:b7:f3:e9:fb:db:fa:be:a9:90:97:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:89:2A:51:B0:34:CA:41:18:31:72:0A:21:5F:2A:73:55:BC:43:E9
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:05:81:34:a6:fd:54:57:c6:49:8b:b7:9f:70:e4:58:d8:cf:
         28:40:f2:72:24:be:eb:4f:02:7e:c6:cc:3d:ce:85:02:5a:63:
         f9:fb:e7:f6:ee:0c:0f:67:95:70:86:78:2b:3b:00:ac:30:62:
         3c:18:96:6c:6a:ed:51:db:df:8e:15:52:86:b1:f0:f5:91:bd:
         0e:7e:df:14:28:eb:96:04:7b:a0:f7:c9:34:4b:32:54:8d:20:
         de:d6:4e:b7:22:b3:23:be:0a:f3:89:af:2f:1a:c1:f7:d1:4f:
         f2:f2:78:8a:42:64:dc:dd:73:25:68:25:b4:03:44:a6:05:43:
         d3:57:97:3e:0f:35:56:71:04:4e:76:22:51:de:b8:31:11:6c:
         ab:67:97:1c:a7:3f:8e:b6:f6:f0:be:57:c5:18:16:b8:eb:50:
         ec:c5:91:ab:d9:15:c0:17:68:c4:bd:e6:63:36:02:55:62:31:
         50:d1:7f:24:46:16:37:53:3c:f7:db:8d:b6:da:26:fa:04:c7:
         c0:90:10:1f:f3:17:5a:c5:de:7b:65:17:74:d5:a2:cd:5f:07:
         23:b1:4d:ff:28:3a:99:bc:c7:40:e7:e1:41:44:27:7c:83:8a:
         eb:fb:37:cb:12:04:c1:34:00:6b:ff:a0:7b:cd:6d:f4:57:6e:
         6f:23:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:05:50 2025 by rpki-client