This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
File:                     ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json)
Hash identifier:          d2XVKKqGQuk9SbJllAEaz+JeQtmjgP+Ib8kT3mj0DJI=
Subject key identifier:   9B:32:1D:8C:FF:07:69:1F:A1:7A:4C:B4:C9:8A:EE:DA:68:15:3A:9F
Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE
Certificate issuer:       /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
Certificate serial:       355BD95C25153D2037DAD404A817B13C77829530
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
Manifest number:          0309
Signing time:             Fri 05 Dec 2025 03:01:09 +0000
Manifest this update:     Fri 05 Dec 2025 02:56:09 +0000
Manifest next update:     Mon 08 Dec 2025 06:48:09 +0000
Files and hashes:         1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: tDZ0wFbDMKMfPTFB8lcMKBnzPbeN46mN61LlccX+yiY=)
                          2: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: EpJOG88xbz5xTPZJiFvs0YjAoKA95KRxn071hSPwEmU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl
                          rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 06:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5b:d9:5c:25:15:3d:20:37:da:d4:04:a8:17:b1:3c:77:82:95:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
        Validity
            Not Before: Dec  5 02:56:09 2025 GMT
            Not After : Dec  8 06:48:09 2025 GMT
        Subject: CN=9B321D8CFF07691FA17A4CB4C98AEEDA68153A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:5b:60:ad:fd:d5:b4:d4:c7:45:cb:9d:d4:
                    78:f5:2c:b6:fd:53:e2:b3:81:d7:26:7e:c1:45:53:
                    79:43:3b:08:33:1b:05:de:73:83:3c:be:67:1b:c0:
                    83:0b:8f:6a:08:28:87:c2:2f:fd:36:7c:e9:28:68:
                    5d:50:bd:97:6d:dd:9c:ba:04:71:0e:f5:b5:6a:fa:
                    55:b9:98:46:1a:7a:ee:20:86:e5:a5:4b:7b:93:c4:
                    88:ff:d9:f9:a7:a2:99:40:ab:84:86:8b:97:b7:85:
                    e3:0f:55:c6:25:c1:19:ac:c4:47:a1:14:b2:db:08:
                    c5:3d:80:df:91:d5:fd:a3:ea:b3:df:4b:ed:d1:2d:
                    fd:53:be:97:8e:10:89:e2:36:11:49:16:78:d9:fc:
                    b8:5c:58:2e:18:09:0c:f9:52:35:28:cb:02:7b:ea:
                    0b:70:c2:5a:82:fe:a2:63:e4:db:9a:51:55:3f:a5:
                    79:c8:c6:27:88:4c:e3:0b:c4:ab:06:d8:98:cf:08:
                    00:fe:43:39:2b:cb:8c:71:aa:69:cc:79:82:23:65:
                    64:7e:8d:a9:b3:09:db:51:68:21:d6:2e:86:38:41:
                    09:11:2c:be:1b:07:b8:80:a9:35:0f:2b:ed:68:f3:
                    91:5e:bc:c7:43:6e:a0:82:e5:76:ae:87:c8:5b:98:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:1D:8C:FF:07:69:1F:A1:7A:4C:B4:C9:8A:EE:DA:68:15:3A:9F
            X509v3 Authority Key Identifier:
                keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ab:b5:46:fc:ca:4f:fb:f7:b4:c9:b2:e8:a2:7c:0a:14:82:
         82:09:4f:ae:c1:92:4d:9f:a4:22:30:01:fa:1f:4c:80:47:78:
         0b:47:a5:a9:99:ec:86:14:01:6f:0d:99:53:cd:79:1f:b1:22:
         39:57:80:4b:17:de:31:1e:91:0c:7d:3a:5d:b2:fa:25:d7:85:
         0a:b4:d1:1f:f0:f3:e8:ec:20:f8:4a:64:76:b4:a9:ea:4a:46:
         4d:9b:bc:bb:6b:90:0d:de:05:6e:ad:15:a8:4a:f1:79:09:e2:
         84:17:b5:33:6d:50:dc:ee:a2:18:79:f2:fe:fd:1e:65:00:72:
         43:b1:c9:26:88:fc:49:1a:3e:00:c1:c0:db:33:e6:d9:a2:61:
         65:7c:cd:c6:4f:9f:2d:87:50:07:bc:d7:a2:9a:bb:51:40:2d:
         04:11:fc:90:91:4f:45:fa:00:76:82:7b:ec:1d:2f:ff:d4:e3:
         4c:a7:f7:d3:2a:07:37:d6:b7:15:d6:e5:1d:ee:f8:fc:4a:e6:
         32:d9:4c:45:47:06:60:94:85:2c:4a:40:ae:a6:6b:bb:0f:be:
         fc:03:31:5b:e2:49:d8:de:b8:07:20:94:9c:37:08:c8:60:98:
         9c:a0:04:a8:50:49:d1:ac:93:65:d6:0c:4c:46:d6:86:81:10:
         65:51:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:43 2025 by rpki-client