This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft
File:                     F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft (raw, json)
Hash identifier:          BD7Ai8uYrAXXzrj48v2z6A6Yw+SyhCJSGvz06S1UCw0=
Subject key identifier:   DE:D2:21:21:E7:C7:CE:7E:96:E2:D7:94:AD:4E:6D:0A:8B:B1:74:46
Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53
Certificate issuer:       /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53
Certificate serial:       71A7EFD3245A067560D6EDC7E81B72ACE3AD2656
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft
Manifest number:          053E
Signing time:             Tue 16 Dec 2025 18:31:38 +0000
Manifest this update:     Tue 16 Dec 2025 18:26:38 +0000
Manifest next update:     Fri 19 Dec 2025 22:04:38 +0000
Files and hashes:         1: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: RKs88Pa9U5kYqNiJBgdcINbl38riDMLK7OKBJbDZxoU=)
                          2: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: DmcCHOdkx3USZG6nT+Rc5blkIExAEZyaMmWiGcolYxw=)
                          3: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl (hash: YF4q6gueMIhWz0A/1QuZFwuMj73Lexgy/hsLN9Ugi1s=)
                          4: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o=)
                          5: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: mRC3mdea6qCpcytvftKPOZzFacOZPZuXTr1Zl+8d16Q=)
                          6: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys=)
                          7: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: Z5+uNWUf96970QClR9BPMdc27gS6j7yhVrlhFjZhEWY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl
                          rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 22:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a7:ef:d3:24:5a:06:75:60:d6:ed:c7:e8:1b:72:ac:e3:ad:26:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53
        Validity
            Not Before: Dec 16 18:26:38 2025 GMT
            Not After : Dec 19 22:04:38 2025 GMT
        Subject: CN=DED22121E7C7CE7E96E2D794AD4E6D0A8BB17446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:4d:04:7c:e0:76:d4:13:7a:df:0c:3e:f8:
                    a6:0c:2f:f7:6a:d8:a3:09:7a:cb:9a:94:02:71:77:
                    b9:95:b8:6e:50:50:2a:3c:01:d2:50:22:48:e2:5d:
                    41:c7:31:70:cf:d0:dd:77:19:e1:d2:8a:14:7d:bd:
                    ad:00:f9:a2:48:79:3f:82:ee:a2:db:c7:a7:db:f0:
                    55:77:59:53:ed:60:75:f8:dc:5f:23:98:53:73:7a:
                    7c:be:b1:5a:8a:a5:da:02:19:53:e8:a9:4d:39:12:
                    eb:45:38:64:41:64:9a:4e:5b:33:d0:6a:b0:ff:90:
                    6b:26:60:9f:fc:67:bd:63:1f:d4:8c:5f:5d:8e:71:
                    7b:d1:44:43:b6:06:70:91:53:74:7d:b0:f0:98:63:
                    18:e4:ea:24:42:45:a2:1e:ee:be:a5:f8:5e:f0:4a:
                    62:1b:d9:f2:0f:88:a2:7c:2a:b5:27:5b:07:48:d3:
                    b5:77:49:e2:3f:39:d1:7f:b8:7c:4c:b9:21:ef:28:
                    67:f6:da:bb:06:f4:31:93:2a:17:e4:93:37:33:85:
                    2a:97:f5:28:ab:6f:cf:ea:d4:f8:67:d9:b7:bc:12:
                    42:61:30:64:b1:3e:39:72:7b:52:3f:5d:e4:0d:e4:
                    de:11:86:bd:ee:f8:7e:d9:d2:3d:c7:f9:2e:2e:d1:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D2:21:21:E7:C7:CE:7E:96:E2:D7:94:AD:4E:6D:0A:8B:B1:74:46
            X509v3 Authority Key Identifier:
                keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f6:76:f0:61:34:6e:89:b7:49:87:85:ad:d9:91:87:2a:de:
         a8:4d:2d:fb:e3:c0:3d:f9:5a:e6:0f:01:c7:11:fc:76:d3:a9:
         9c:00:f2:55:c3:60:d4:78:d5:63:1c:61:4f:70:ba:d1:98:92:
         c7:9e:ab:d8:b0:60:a2:77:bd:6b:e5:de:ee:e7:4d:2b:d2:39:
         9d:20:46:60:fc:70:54:21:7f:26:9b:4f:5d:a1:b3:3b:75:05:
         65:89:94:8f:ff:c7:ad:f0:26:07:98:64:e3:b1:a0:ae:0b:57:
         e5:8d:d1:63:dd:6c:8c:20:1d:80:e9:ae:1b:d7:89:1f:16:ac:
         a3:c1:49:98:92:fc:2e:6a:1c:ee:17:c4:72:59:5b:96:86:52:
         0c:67:fd:1a:75:ac:94:ac:27:18:4a:10:6f:48:35:a5:b0:53:
         33:22:d3:e9:b9:ad:b5:0a:1e:aa:d0:ba:59:da:ec:67:65:91:
         88:4c:a9:c8:2b:55:ec:98:06:fe:0f:a8:89:07:4f:11:2b:78:
         50:52:c9:32:c5:f9:14:72:f1:41:07:dc:82:90:f3:d9:11:aa:
         ef:00:29:d5:2e:d9:27:30:58:04:78:67:40:1e:b4:e0:7e:5f:
         d2:14:96:59:97:da:e6:1c:d2:66:f4:7c:52:41:f2:a0:c3:4d:
         70:26:3e:c8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcafv0yRaBnVg1u3H6BtyrOOtJlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE
QTY2MkM1MzAeFw0yNTEyMTYxODI2MzhaFw0yNTEyMTkyMjA0MzhaMDMxMTAvBgNV
BAMTKERFRDIyMTIxRTdDN0NFN0U5NkUyRDc5NEFENEU2RDBBOEJCMTc0NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVE0EfOB21BN63ww++KYML/dq
2KMJesualAJxd7mVuG5QUCo8AdJQIkjiXUHHMXDP0N13GeHSihR9va0A+aJIeT+C
7qLbx6fb8FV3WVPtYHX43F8jmFNzeny+sVqKpdoCGVPoqU05EutFOGRBZJpOWzPQ
arD/kGsmYJ/8Z71jH9SMX12OcXvRREO2BnCRU3R9sPCYYxjk6iRCRaIe7r6l+F7w
SmIb2fIPiKJ8KrUnWwdI07V3SeI/OdF/uHxMuSHvKGf22rsG9DGTKhfkkzczhSqX
9Sirb8/q1Phn2be8EkJhMGSxPjlye1I/XeQN5N4Rhr3u+H7Z0j3H+S4u0YeXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3tIhIefHzn6W4teUrU5tCouxdEYwHwYDVR0j
BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx
OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2
MkM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw
YjEtNWJhZTlmODU3OTM3LzAvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUz
N0NEQTY2MkM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKL2dvBhNG6Jt0mHha3ZkYcq3qhNLfvjwD35
WuYPAccR/HbTqZwA8lXDYNR41WMcYU9wutGYkseeq9iwYKJ3vWvl3u7nTSvSOZ0g
RmD8cFQhfyabT12hszt1BWWJlI//x63wJgeYZOOxoK4LV+WN0WPdbIwgHYDprhvX
iR8WrKPBSZiS/C5qHO4XxHJZW5aGUgxn/Rp1rJSsJxhKEG9INaWwUzMi0+m5rbUK
HqrQulna7GdlkYhMqcgrVeyYBv4PqIkHTxEreFBSyTLF+RRy8UEH3IKQ89kRqu8A
KdUu2ScwWAR4Z0AetOB+X9IUllmX2uYc0mb0fFJB8qDDTXAmPsg=
-----END CERTIFICATE-----
Generated at Wed Dec 17 13:45:49 2025 by rpki-client