This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          J+BcWzPrFjZyAgOVFaxIBg2PssLoHmWNLk+tv4D1Mrs=
Subject key identifier:   D9:B5:B2:14:12:6F:5A:47:78:81:81:61:C8:22:5D:2D:A7:F2:75:63
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       36755DBBC79605257C0A88F9FE3E2A98CE5C5961
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          053B
Signing time:             Fri 05 Dec 2025 05:42:32 +0000
Manifest this update:     Fri 05 Dec 2025 05:37:32 +0000
Manifest next update:     Mon 08 Dec 2025 06:08:32 +0000
Files and hashes:         1: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
                          2: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
                          3: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
                          4: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: vbmWchGnPtDT0+bACIs0yGIJiv8uvSG1YaOtEx727Zg=)
                          5: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
                          6: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
                          7: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
                          8: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
                          9: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
                          10: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 06:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:75:5d:bb:c7:96:05:25:7c:0a:88:f9:fe:3e:2a:98:ce:5c:59:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Dec  5 05:37:32 2025 GMT
            Not After : Dec  8 06:08:32 2025 GMT
        Subject: CN=D9B5B214126F5A4778818161C8225D2DA7F27563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:52:4a:14:07:ed:22:bb:7d:70:42:22:76:
                    a7:42:36:c0:f7:8d:77:41:15:f9:0f:a6:47:0e:79:
                    87:3f:4c:cb:19:1d:f1:c8:ec:4c:42:f7:33:2f:a5:
                    6d:83:56:ef:56:a4:b6:01:6a:04:08:5c:67:c8:96:
                    b1:40:36:e1:6a:2a:6c:29:62:79:dc:5a:4c:70:97:
                    4f:44:58:11:04:1b:72:76:63:ca:18:e3:20:bc:3e:
                    6e:0c:7c:1c:04:57:05:1f:9a:ed:15:69:d7:96:2f:
                    93:fa:c1:da:44:a3:e5:dd:eb:65:48:eb:c0:48:f8:
                    28:69:da:bd:9a:5a:83:55:0e:67:58:34:96:8c:71:
                    c9:98:bb:be:47:bb:39:38:a9:a8:a0:e8:9c:50:48:
                    7a:49:f8:ee:35:58:df:f7:94:05:7b:e6:8c:d7:05:
                    53:c7:4d:a9:ee:81:db:69:97:b8:21:05:b8:b1:54:
                    29:93:7e:b1:ce:8b:48:9a:5d:71:65:06:6a:05:1e:
                    18:40:79:87:b8:65:9e:2c:9c:59:2a:1d:2a:b7:b9:
                    97:64:00:76:37:ff:a7:bd:cd:ad:8f:42:a3:59:47:
                    7c:01:7c:2d:52:a8:ba:14:25:9b:34:cc:96:c4:7f:
                    77:51:21:8e:88:ac:72:29:f5:8e:73:74:2f:f1:b8:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B5:B2:14:12:6F:5A:47:78:81:81:61:C8:22:5D:2D:A7:F2:75:63
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:85:53:5c:5f:81:f4:9c:3e:76:3b:c6:57:81:c2:02:31:74:
         87:c3:c3:aa:90:67:78:4e:e9:0b:59:47:18:52:b2:9e:d0:a5:
         72:19:53:84:2a:ef:e9:9e:3c:b9:0e:f7:19:49:7c:71:5e:18:
         2d:7a:89:30:7e:51:74:1c:8b:9a:50:4e:83:e6:bd:54:74:88:
         d4:5b:d8:92:b5:99:52:64:c4:38:00:9d:04:4d:74:41:2a:48:
         b9:b5:c8:8f:cb:25:69:c9:e6:0c:05:08:2e:03:21:a2:4c:fd:
         7b:2e:56:65:df:27:1d:fe:3b:0c:df:f2:ed:76:d3:a7:34:91:
         7c:47:bc:b1:6d:dd:fd:db:54:64:fa:be:60:73:f6:b6:72:bd:
         ee:3e:54:61:6c:cc:cc:8f:be:66:3b:e6:1e:b2:85:16:85:27:
         25:97:e3:6c:1e:fe:b3:2f:2a:0f:05:d8:ed:09:26:1d:a1:be:
         10:f7:c1:49:03:5d:44:4a:c3:ff:73:01:91:16:f1:82:1c:16:
         e2:ed:85:00:fd:d2:05:9d:1a:28:22:64:82:2b:9e:fd:f3:2b:
         ba:21:91:7e:1f:15:04:32:d9:65:2b:f5:b2:b1:b7:d0:d4:1f:
         d4:4f:0a:6f:75:55:2a:d3:e4:e4:3d:00:a1:b8:e7:fa:32:19:
         34:cc:19:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNnVdu8eWBSV8Coj5/j4qmM5cWWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB
RkU4QUEyQjAeFw0yNTEyMDUwNTM3MzJaFw0yNTEyMDgwNjA4MzJaMDMxMTAvBgNV
BAMTKEQ5QjVCMjE0MTI2RjVBNDc3ODgxODE2MUM4MjI1RDJEQTdGMjc1NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rVJKFAftIrt9cEIidqdCNsD3
jXdBFfkPpkcOeYc/TMsZHfHI7ExC9zMvpW2DVu9WpLYBagQIXGfIlrFANuFqKmwp
YnncWkxwl09EWBEEG3J2Y8oY4yC8Pm4MfBwEVwUfmu0VadeWL5P6wdpEo+Xd62VI
68BI+Chp2r2aWoNVDmdYNJaMccmYu75Huzk4qaig6JxQSHpJ+O41WN/3lAV75ozX
BVPHTanugdtpl7ghBbixVCmTfrHOi0iaXXFlBmoFHhhAeYe4ZZ4snFkqHSq3uZdk
AHY3/6e9za2PQqNZR3wBfC1SqLoUJZs0zJbEf3dRIY6IrHIp9Y5zdC/xuAOBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2bWyFBJvWkd4gYFhyCJdLafydWMwHwYDVR0j
BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB
NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4
QUEyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0
MjAtYTcxMWFjMjQzNTE5LzAvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNG
OTJBRkU4QUEyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFqFU1xfgfScPnY7xleBwgIxdIfDw6qQZ3hO
6QtZRxhSsp7QpXIZU4Qq7+mePLkO9xlJfHFeGC16iTB+UXQci5pQToPmvVR0iNRb
2JK1mVJkxDgAnQRNdEEqSLm1yI/LJWnJ5gwFCC4DIaJM/XsuVmXfJx3+Owzf8u12
06c0kXxHvLFt3f3bVGT6vmBz9rZyve4+VGFszMyPvmY75h6yhRaFJyWX42we/rMv
Kg8F2O0JJh2hvhD3wUkDXURKw/9zAZEW8YIcFuLthQD90gWdGigiZIIrnv3zK7oh
kX4fFQQy2WUr9bKxt9DUH9RPCm91VSrT5OQ9AKG45/oyGTTMGUQ=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:29 2025 by rpki-client