This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
File:                     5058CBC5AF21280546887DEF6CFA4341A8F99150.mft (raw, json)
Hash identifier:          mKmWOIA/TNi6kvuZ7PwGpSzVw+1+q6wAqD6j6l3Kngg=
Subject key identifier:   64:89:2B:8D:13:56:A5:95:98:95:19:B7:3B:7E:49:DA:76:F5:9C:12
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       1719D1090A67CC54017B4F71AF659BB3261C63FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
Manifest number:          0107
Signing time:             Sat 06 Dec 2025 09:32:06 +0000
Manifest this update:     Sat 06 Dec 2025 09:27:06 +0000
Manifest next update:     Tue 09 Dec 2025 17:20:06 +0000
Files and hashes:         1: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: qykkhhxHnO0ydNs5JBAQOA0f9BAZyPwR6KhTyOO68q8=)
                          2: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (hash: CEJ3yKIwnTpt+ImukVgRvxnWPT8Hth1fQgkKpGWcSEo=)
                          3: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: DCq8NWxNUdZYR2PU43lxvyiXQg84ScqhviiyUTDm8RE=)
                          4: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: /r/8FbAnrRY9+Q4m/2LANGmYkN67339eqGM2Pr09v38=)
                          5: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: sueljug0A0cLELzQ10q3SYM/qivmbpI6TdGOwm3lCaU=)
                          6: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: VB7muXOs/KUgbeY56FO085YD+k7/KBG+CVGoqwGS/LQ=)
                          7: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: xIwOhaK9F8GaMLO+48a1gHgLSh8/QXMa+ox/aPfD8ZE=)
                          8: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: f7FOJnMyBZ4XNlHdy991ZxwGJQehkmOcfk+LL3+U5Fs=)
                          9: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: Eh7tmqkuq57xlfobk4M7FLmYqi5AfrKI1DM6fiC6my0=)
                          10: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: BdFOwYWDeGnfKDAaGDA7BBj23j1cFiNFG1WQ7TDA43I=)
                          11: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: U7zsrHiqdt1Qo1B6xfxOyIpSIT6Eg44KAPPrNmLrIG4=)
                          12: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: 5psPknEmypZIRcV8YM/0X/lutsHgczkNWReWTG7yCJE=)
                          13: 5058CBC5AF21280546887DEF6CFA4341A8F99150.crl (hash: jOJUet734AjWSGUlNrtUfNH87W83E4Ps8HC/bEP3NoU=)
                          14: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: hEA8tWNHo/TIh0zdljEtCOyHV35vtVjy/xEF9Jp2eSk=)
                          15: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: oYNKTwfcxqyIB1OXRbrwMgJ3fSYv5LQtaFy8X3lU6Gg=)
                          16: 3135302e3132392e3139312e302f32342d3234203d3e203338313439.roa (hash: sg9h3bKYAlqGHJDMvyUj6H0/M1Aw0iaDSiX106si2NI=)
                          17: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: vVq7LUx06+oQEtVvYge1Q2+hkKlr27bVyXKL74EChRk=)
                          18: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: NITrN6jD7nr5oOwLkcfYoDWIPHvMh97xHgy4U3OmoE8=)
                          19: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 08dE8+5h5VM8IAQN0ml1YiJAjJEdE4Qbpafz+/inBuI=)
                          20: 3130332e332e3231342e302f32342d3234203d3e203338313439.roa (hash: 1FiHn4gIC4kH5MoP4rKX52q2L0AmuUmzqqq7XVdC5N0=)
                          21: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: f8b8ZEBPlEImYkbnkpmvkas1RzOl3JK/cPP6s/pxu7I=)
                          22: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (hash: tgGGslIm+JlwZ3B9SMFEH85qZqhmUeU8C5Oc+jwQtf0=)
                          23: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (hash: 31mkkj2+9HZK3DntlbInuHBDcdFSQRlGXD8Zmc4rUM0=)
                          24: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: +yojSrIhe0qfYYoNaS+bjIGGRqdco9vP3EvqLvXSniA=)
                          25: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: aHFMnyhh47UaoLaj5P570D9nqN6nQjfKB0KyJ10Bqlo=)
                          26: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: Axn8ERr+dCmvsiqqyuPKnJfBVVJriYKk4K22F1CTADk=)
                          27: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: q9iza0H2rtEt+ACiqvHrrsVLjS6bvi7IjiExCl+Gt50=)
                          28: 3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (hash: H5limOsnw+oXhtBdjEt0fmYaX6A1zxSuyCkqRKHAtzA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:19:d1:09:0a:67:cc:54:01:7b:4f:71:af:65:9b:b3:26:1c:63:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Dec  6 09:27:06 2025 GMT
            Not After : Dec  9 17:20:06 2025 GMT
        Subject: CN=64892B8D1356A595989519B73B7E49DA76F59C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:38:ba:74:3c:ee:6d:3c:b6:a3:7b:82:e9:33:
                    f2:01:a9:d6:05:de:d9:90:e3:c5:fc:c5:da:7a:2c:
                    60:ac:c8:a7:44:6e:b8:7b:0d:22:e8:66:7c:b5:23:
                    c9:a5:48:bc:c2:58:00:4e:82:f1:9d:22:29:99:8c:
                    ac:de:0e:52:2a:a4:45:69:29:38:ef:8d:b1:ed:6e:
                    ec:3f:43:ba:2b:ed:2a:2c:53:08:3e:ca:fa:32:e6:
                    30:d9:be:64:d7:93:71:14:1a:00:31:0c:bf:9e:0e:
                    4b:82:d2:2b:c3:ec:e4:73:e6:1b:cb:c5:4a:18:80:
                    9b:3c:c2:87:ed:f9:36:3d:72:ba:f2:b0:80:2a:f5:
                    3f:16:20:5d:67:fc:5e:36:e8:8b:85:eb:d6:ea:f9:
                    29:18:af:18:dc:19:0e:e7:eb:c1:6a:b3:e3:ae:8d:
                    06:16:33:32:8b:2c:86:67:4d:0d:e5:98:f5:0d:c8:
                    82:35:bb:42:4e:89:79:6e:15:87:f7:61:1f:e0:c5:
                    75:26:75:59:93:0a:71:76:29:07:6d:51:fe:7d:44:
                    11:a4:a2:0f:19:2c:81:da:b5:9c:88:38:78:b0:b3:
                    2e:cb:17:be:8f:5a:83:44:a2:ed:ec:07:b9:f6:d6:
                    0f:42:f5:46:cb:8b:40:75:60:0d:1b:9e:00:19:48:
                    c8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:89:2B:8D:13:56:A5:95:98:95:19:B7:3B:7E:49:DA:76:F5:9C:12
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ce:cb:5b:53:88:c1:6f:c8:c0:ee:bb:87:59:2a:4f:a5:a2:
         2b:89:09:f0:b3:4e:07:fc:2f:a1:9b:a2:ce:41:76:76:69:36:
         a5:10:91:e6:80:b7:fb:f2:37:bd:42:29:51:a0:2c:4e:98:2a:
         ed:2c:a3:b7:19:94:83:dd:54:f7:0c:9a:d1:e0:9f:78:29:f7:
         1a:c5:ab:28:1f:28:ca:c8:03:9c:18:bc:1f:21:90:b1:7e:90:
         6b:2d:47:e4:03:52:73:c6:89:e8:c4:18:38:b1:99:16:d1:1f:
         87:a2:3e:cd:66:4b:b7:87:e3:28:28:bd:a3:7f:fe:31:ed:69:
         d0:6c:87:81:d6:42:61:b4:aa:e7:14:30:b9:d4:9d:a0:f4:02:
         e1:ea:3a:bb:a9:5b:75:48:99:db:0b:d7:5d:9b:65:72:92:2f:
         2f:03:b6:fd:1b:79:67:34:f2:bb:ba:7f:6e:fe:4f:53:7c:5c:
         fc:38:c2:8d:6a:91:83:54:17:f1:76:63:d1:0b:c1:cc:73:b5:
         ec:8e:3d:e4:ce:d1:12:36:d4:b3:a4:a9:c9:b9:05:7c:f2:f8:
         e7:13:1b:d8:ac:f7:76:1b:06:cc:11:fc:ee:17:07:b3:a3:2e:
         5e:89:dd:17:58:ae:f5:09:d6:1c:9e:cc:99:99:8e:8a:45:a4:
         76:10:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:36:52 2025 by rpki-client