This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
File:                     C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json)
Hash identifier:          u2jgDgTf3DZiMq2RFFFWWIQBT2mPYP84kK/Orvo6ZkQ=
Subject key identifier:   6C:89:20:5F:08:C1:FE:30:0E:16:A9:8A:41:06:FA:BA:86:33:83:F3
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       29E07547915A9BDA3A0D2B08A18E8D2C43767496
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
Manifest number:          0397
Signing time:             Sat 06 Dec 2025 16:02:16 +0000
Manifest this update:     Sat 06 Dec 2025 15:57:16 +0000
Manifest next update:     Wed 10 Dec 2025 00:28:16 +0000
Files and hashes:         1: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: OxhA3uXfrHkYk9hpK8Kprlt50rQpJAHKf4/psbChj9g=)
                          2: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: q+4LJqnEtPR8u/O7vXDxEMWbUC+3pBdRVabjnpWaIW8=)
                          3: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: pMSHdCGU3wSWW64VJ8Q+XCnRMyb8p81kTgkpP+Gwk14=)
                          4: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=)
                          5: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: r1xG0EZ+diPvqjo3maUSgSdAXF/PbzNzYbElj3DkPms=)
                          6: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=)
                          7: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: Giz7os34qxdcaeyi2EtKcr2LS4LsMlTnJlV8pqSpEa4=)
                          8: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: YtgOnaLw1bxl1wUrgM2neAz8Qf57lo3CvBW85nMyhJg=)
                          9: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: TPAjUCjHJnWAtWeWIogMrgqyIk1DQzed8sLTl5HA/OY=)
                          10: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: YfbB3z09y4MNoTi1HjR4+z9IdxMYyBM89bj8p3WiTw4=)
                          11: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: TzoAuOSZ6mXbYFD7JpUog8X7cU+aL4pu97WqgSsQlww=)
                          12: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: f0QuTjuXU3+PMwtOvyLhhE3F7fk0wnPs64pd29FWWiY=)
                          13: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 8c4EuCrXR9USSkoSueUSWcZF3Vya08SYcqUOI9OfmOY=)
                          14: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: VEDwBMu7e2mzL/h9CHSnsP+W8nFPBXkEhV06ak5Sn4k=)
                          15: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: h34a36oOro4h82UzWlqmmFvXIQsUxyJPSi5+fu8agyc=)
                          16: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: cuspnEeRe5iuZinSazJ21NBeU9HRcaji1YURkZn0OJI=)
                          17: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: s1sd22aoOx7eVnGzzPZfaCEnUeLM+0ey0B/Ng0FNQzE=)
                          18: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=)
                          19: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: rKBd3FDglxAur6pNSQahm+4YOdXF+ndHaH2ghrjrs0c=)
                          20: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU=)
                          21: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=)
                          22: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: xUdwOu6GtGdzxItV3iA1A5hAD2Ey5dnmQ19p3DcRu10=)
                          23: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e0:75:47:91:5a:9b:da:3a:0d:2b:08:a1:8e:8d:2c:43:76:74:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec  6 15:57:16 2025 GMT
            Not After : Dec 10 00:28:16 2025 GMT
        Subject: CN=6C89205F08C1FE300E16A98A4106FABA863383F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:47:aa:13:c9:9b:6b:65:99:1d:0a:3d:be:
                    75:e8:85:8c:d3:c2:bf:51:6c:2a:9e:fb:fb:0f:e6:
                    25:36:4e:21:b5:ba:29:54:12:0b:ce:f8:d5:68:f3:
                    70:11:62:d2:08:bf:b3:a2:97:25:25:54:b6:d4:80:
                    f9:96:50:9d:6b:9a:ee:3b:99:44:b4:81:fe:a6:22:
                    87:ca:c9:0f:c6:a2:92:a3:40:7b:b7:2b:21:83:84:
                    94:04:2e:13:fd:73:58:8e:2d:4c:a2:c2:06:5d:db:
                    af:95:7d:98:76:99:b1:05:5e:48:6b:ac:84:b6:0e:
                    8d:35:9d:cd:e4:72:78:c9:da:67:67:87:ca:1d:74:
                    bd:3a:7a:0e:58:4e:b3:04:b0:19:44:53:b6:d1:30:
                    27:50:7c:98:26:ae:55:2b:ea:ed:83:9c:30:2e:07:
                    48:bc:ed:c0:ba:4f:f7:12:84:7f:ad:7f:ab:0e:a1:
                    a1:a2:ff:0a:7b:11:45:4d:01:ca:18:9d:c6:40:3d:
                    42:92:56:0b:0d:1d:be:7f:b5:16:ed:e5:ba:da:8c:
                    96:96:e4:7c:68:d8:27:9b:15:65:90:e4:09:c8:d0:
                    0e:53:18:55:49:e7:e8:ee:18:6b:c3:dd:70:67:61:
                    08:57:07:78:81:6e:dc:32:3b:7a:b6:d0:88:cd:90:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:89:20:5F:08:C1:FE:30:0E:16:A9:8A:41:06:FA:BA:86:33:83:F3
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:92:5e:8b:11:ef:46:a6:4e:54:c7:7e:b7:1e:94:d0:2e:c0:
         ce:cc:24:b6:5c:cf:b2:71:3a:0e:14:1f:3d:24:8e:43:9c:c4:
         71:ee:c6:94:e2:04:dd:cf:12:d7:1e:50:70:93:69:75:2f:45:
         3e:41:4a:53:57:d1:e6:62:8e:a5:83:b5:38:f1:be:54:86:23:
         df:46:e6:cd:50:7e:5b:64:1e:68:61:11:24:38:1b:8c:28:73:
         13:a3:f3:1e:1b:86:64:2a:59:18:a1:ac:1d:48:f9:f5:ab:19:
         60:2e:f5:a2:9c:e3:5b:fa:60:99:59:9b:8e:87:aa:9e:3f:ff:
         85:f6:04:2c:ac:0f:ab:02:ac:58:c0:fe:ce:91:21:61:e0:3e:
         62:3c:88:16:d7:62:18:a3:1f:a3:c0:f3:88:5b:24:39:db:0f:
         ae:ac:59:2b:cd:70:38:f5:a4:d4:d3:b6:05:30:dc:36:81:f0:
         ce:e5:11:0e:0d:eb:ad:c8:58:34:05:e8:0a:a9:83:11:96:38:
         0a:18:41:71:ff:36:7b:60:2d:39:72:bc:36:ea:55:bc:c4:3a:
         a8:c8:16:61:ab:4b:2c:cb:6d:c3:92:e1:66:70:18:e6:43:8a:
         41:29:72:e2:27:e4:4b:23:57:c4:89:43:33:49:b6:c9:54:a7:
         a4:c6:0b:fc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKeB1R5Fam9o6DSsIoY6NLEN2dJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE
MzhBQzI2RDAeFw0yNTEyMDYxNTU3MTZaFw0yNTEyMTAwMDI4MTZaMDMxMTAvBgNV
BAMTKDZDODkyMDVGMDhDMUZFMzAwRTE2QTk4QTQxMDZGQUJBODYzMzgzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcUeqE8mba2WZHQo9vnXohYzT
wr9RbCqe+/sP5iU2TiG1uilUEgvO+NVo83ARYtIIv7OilyUlVLbUgPmWUJ1rmu47
mUS0gf6mIofKyQ/GopKjQHu3KyGDhJQELhP9c1iOLUyiwgZd26+VfZh2mbEFXkhr
rIS2Do01nc3kcnjJ2mdnh8oddL06eg5YTrMEsBlEU7bRMCdQfJgmrlUr6u2DnDAu
B0i87cC6T/cShH+tf6sOoaGi/wp7EUVNAcoYncZAPUKSVgsNHb5/tRbt5brajJaW
5Hxo2CebFWWQ5AnI0A5TGFVJ5+juGGvD3XBnYQhXB3iBbtwyO3q20IjNkKoJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbIkgXwjB/jAOFqmKQQb6uoYzg/MwHwYDVR0j
BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2
QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB
QzI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl
OTctYzU1ZjY4ZTA1ODlhLzAvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0
MjlEMzhBQzI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHiSXosR70amTlTHfrcelNAuwM7MJLZcz7Jx
Og4UHz0kjkOcxHHuxpTiBN3PEtceUHCTaXUvRT5BSlNX0eZijqWDtTjxvlSGI99G
5s1QfltkHmhhESQ4G4wocxOj8x4bhmQqWRihrB1I+fWrGWAu9aKc41v6YJlZm46H
qp4//4X2BCysD6sCrFjA/s6RIWHgPmI8iBbXYhijH6PA84hbJDnbD66sWSvNcDj1
pNTTtgUw3DaB8M7lEQ4N663IWDQF6AqpgxGWOAoYQXH/NntgLTlyvDbqVbzEOqjI
FmGrSyzLbcOS4WZwGOZDikEpcuIn5EsjV8SJQzNJtslUp6TGC/w=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:49:40 2025 by rpki-client