This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
File:                     798D703C19A93E4E19F716304D78F20AA3261B8A.mft (raw, json)
Hash identifier:          XqoPqzNKU/JarW4O767zmX16CzzsPPrSH2GNsE0rbOI=
Subject key identifier:   1E:CE:1B:67:96:8F:6B:24:88:DC:3A:AB:CF:9D:0F:9B:8E:E5:D2:EE
Authority key identifier: 79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A
Certificate issuer:       /CN=798D703C19A93E4E19F716304D78F20AA3261B8A
Certificate serial:       525727AF6DD86D474AD7D4EF6219497FFDA630C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
Manifest number:          0531
Signing time:             Sat 06 Dec 2025 10:41:58 +0000
Manifest this update:     Sat 06 Dec 2025 10:36:58 +0000
Manifest next update:     Tue 09 Dec 2025 18:19:58 +0000
Files and hashes:         1: 798D703C19A93E4E19F716304D78F20AA3261B8A.crl (hash: /upnNavUdhxqSpYCSG4MA00rVDS4ylAyP+kKyqj83Q4=)
                          2: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: JtI1jfgaZBEwCqyUB72ksPn3QargIoHZ6U4tHyErJjI=)
                          3: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: h+98Hl+FH7IDfemSrtBXhbDJo99hfIfndXfQe3JekOA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl
                          rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:27:af:6d:d8:6d:47:4a:d7:d4:ef:62:19:49:7f:fd:a6:30:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798D703C19A93E4E19F716304D78F20AA3261B8A
        Validity
            Not Before: Dec  6 10:36:58 2025 GMT
            Not After : Dec  9 18:19:58 2025 GMT
        Subject: CN=1ECE1B67968F6B2488DC3AABCF9D0F9B8EE5D2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:39:34:a4:bc:0e:cf:e2:64:1f:1e:18:1c:
                    2e:a0:d0:2a:81:ff:fb:77:f6:34:86:9b:8d:2b:54:
                    28:b8:c2:8e:92:6d:5e:d9:e5:9c:4d:8d:79:ac:4c:
                    f6:58:88:90:3f:4c:76:7d:59:89:9f:7d:50:2a:30:
                    fb:ce:77:8e:ff:b6:f2:c2:fd:58:d9:8c:60:39:bd:
                    57:89:53:9a:4b:cb:eb:c9:4d:cc:e6:f5:ef:66:b4:
                    cf:96:9f:19:5f:28:58:02:4a:fd:43:20:54:91:84:
                    86:2a:c1:b3:ea:ef:2f:f8:21:88:d3:9b:fa:63:b9:
                    49:75:c4:4b:22:71:40:0e:60:50:9d:e1:6a:99:40:
                    0a:2f:5e:43:d2:00:9b:6a:9e:41:64:c1:aa:8b:67:
                    e3:4d:25:12:bf:e1:8d:c5:79:61:f5:fe:46:df:17:
                    6b:9c:17:24:38:b8:60:50:94:4d:29:e2:cc:3e:b2:
                    18:9c:5d:f1:93:7d:ce:ef:2e:a8:40:fc:1b:6a:b1:
                    5d:41:4e:33:31:1b:cf:79:37:6b:ac:d0:56:6b:33:
                    9b:37:70:2b:bd:54:88:f5:ec:40:36:b6:9a:dc:9d:
                    88:58:c9:0e:52:2a:b2:92:9a:9c:2c:4c:61:5d:ac:
                    19:4e:e1:0a:9e:e1:53:c9:1d:e5:ba:e2:6c:9c:99:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CE:1B:67:96:8F:6B:24:88:DC:3A:AB:CF:9D:0F:9B:8E:E5:D2:EE
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:72:f1:ae:8d:4d:dc:d8:b3:18:73:98:b9:cf:e7:ad:96:
         f4:6b:a3:7e:0b:45:9f:c4:3e:1e:82:77:d4:fb:ee:f8:24:b8:
         07:c3:ff:3b:f7:be:58:40:3c:6a:42:c0:74:78:31:e6:dd:59:
         ad:fd:09:de:6f:5f:8f:c0:6d:97:d6:51:8e:b7:93:de:93:bf:
         b9:69:4f:0b:d0:69:e0:00:56:21:7f:71:ef:ac:a8:b5:15:48:
         4c:fc:7d:60:d1:9d:05:72:d4:9f:be:56:5d:52:a6:39:5e:3d:
         01:5a:67:4d:d5:a1:61:2a:aa:df:e2:f0:5c:1e:58:ac:4c:c4:
         cf:9e:20:82:de:87:58:e9:68:31:29:f4:87:b6:54:a4:c3:b4:
         16:f7:b4:70:44:8a:3b:e9:c3:da:9b:77:43:1e:0d:3f:30:2e:
         61:06:09:14:ea:2a:22:05:c3:2e:df:bc:bc:53:76:25:0e:9b:
         18:95:02:7e:b9:c3:92:3f:08:c1:26:d8:88:92:2c:ca:fb:b1:
         db:23:1d:37:30:e7:cd:37:6f:71:20:b8:a8:82:85:6b:c9:fa:
         9f:9b:21:4d:d8:55:f1:c2:ff:b3:bf:24:93:f4:30:d5:c9:b7:
         fe:32:7f:5f:1a:10:ca:76:c3:a3:f7:1b:b7:68:0d:81:a3:a6:
         ce:18:50:88
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUlcnr23YbUdK19TvYhlJf/2mMMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYyMEFB
MzI2MUI4QTAeFw0yNTEyMDYxMDM2NThaFw0yNTEyMDkxODE5NThaMDMxMTAvBgNV
BAMTKDFFQ0UxQjY3OTY4RjZCMjQ4OERDM0FBQkNGOUQwRjlCOEVFNUQyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27zk0pLwOz+JkHx4YHC6g0CqB
//t39jSGm40rVCi4wo6SbV7Z5ZxNjXmsTPZYiJA/THZ9WYmffVAqMPvOd47/tvLC
/VjZjGA5vVeJU5pLy+vJTczm9e9mtM+WnxlfKFgCSv1DIFSRhIYqwbPq7y/4IYjT
m/pjuUl1xEsicUAOYFCd4WqZQAovXkPSAJtqnkFkwaqLZ+NNJRK/4Y3FeWH1/kbf
F2ucFyQ4uGBQlE0p4sw+shicXfGTfc7vLqhA/BtqsV1BTjMxG895N2us0FZrM5s3
cCu9VIj17EA2tprcnYhYyQ5SKrKSmpwsTGFdrBlO4Qqe4VPJHeW64mycmfLXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHs4bZ5aPaySI3Dqrz50Pm47l0u4wHwYDVR0j
BBgwFoAUeY1wPBmpPk4Z9xYwTXjyCqMmG4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NmVjMzVlZC0wZjM2LTQzZDctYjUzNy0wNmRiMzE0YzkwZDUvMC83OThENzAzQzE5
QTkzRTRFMTlGNzE2MzA0RDc4RjIwQUEzMjYxQjhBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYyMEFBMzI2
MUI4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZlYzM1ZWQtMGYzNi00M2Q3LWI1
MzctMDZkYjMxNGM5MGQ1LzAvNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYy
MEFBMzI2MUI4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGnhcvGujU3c2LMYc5i5z+etlvRro34LRZ/E
Ph6Cd9T77vgkuAfD/zv3vlhAPGpCwHR4MebdWa39Cd5vX4/AbZfWUY63k96Tv7lp
TwvQaeAAViF/ce+sqLUVSEz8fWDRnQVy1J++Vl1SpjlePQFaZ03VoWEqqt/i8Fwe
WKxMxM+eIILeh1jpaDEp9Ie2VKTDtBb3tHBEijvpw9qbd0MeDT8wLmEGCRTqKiIF
wy7fvLxTdiUOmxiVAn65w5I/CMEm2IiSLMr7sdsjHTcw5803b3EguKiChWvJ+p+b
IU3YVfHC/7O/JJP0MNXJt/4yf18aEMp2w6P3G7doDYGjps4YUIg=
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:28:22 2025 by rpki-client