This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
File:                     03315D0E966A85B878EA9058B8CF03EAF2881889.mft (raw, json)
Hash identifier:          NZWTWD70b47JEd8MIgWc5cJ1AwWigJPIAVFFYLannhU=
Subject key identifier:   0E:02:01:40:1C:36:61:0C:84:28:0B:BF:33:04:12:82:14:23:C8:DD
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       2521786AF23CCB85BF40284379A4580398D9E2B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
Manifest number:          052C
Signing time:             Sat 06 Dec 2025 17:12:01 +0000
Manifest this update:     Sat 06 Dec 2025 17:07:01 +0000
Manifest next update:     Tue 09 Dec 2025 19:26:01 +0000
Files and hashes:         1: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: hoLbivleHtt89cCReqbvfZYyTkoCRfwcqA081C1+9Gw=)
                          2: 03315D0E966A85B878EA9058B8CF03EAF2881889.crl (hash: zNgwo+s/CjkCEvIRxRI73x82qxkMd9fXORns7+Edirg=)
                          3: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w=)
                          4: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: FQaLrXQaTAavmrBmVo9QPPvdOGdpfu5PAx/qFXOh+QY=)
                          5: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: DkpLk9wjtee+olEloYKtXa5HH1pKUw3+B87062+6qXc=)
                          6: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=)
                          7: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=)
                          8: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:21:78:6a:f2:3c:cb:85:bf:40:28:43:79:a4:58:03:98:d9:e2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Dec  6 17:07:01 2025 GMT
            Not After : Dec  9 19:26:01 2025 GMT
        Subject: CN=0E0201401C36610C84280BBF330412821423C8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:16:1b:d3:83:fb:e6:6a:e0:a3:ba:f2:b0:
                    f9:b8:9f:4f:b5:cf:12:c1:8e:35:c1:bb:5d:7f:c4:
                    bd:91:88:d4:66:6b:89:34:f3:08:37:37:48:53:67:
                    6d:c8:95:f2:9c:f8:00:35:1a:39:80:6a:a8:4c:e8:
                    f9:02:48:99:95:53:74:da:6a:28:73:58:d3:ca:53:
                    98:27:97:39:cb:1b:cf:0e:0b:7d:bb:3f:d3:bb:5d:
                    63:35:cc:e9:b8:28:6a:95:63:cb:8e:e9:ee:80:17:
                    bf:45:74:40:fb:d5:86:69:6e:c8:41:06:3d:fd:5f:
                    51:39:70:46:dc:83:08:81:2b:2b:e5:62:1b:8b:bf:
                    7e:63:c2:06:00:38:e6:55:d1:b3:95:18:07:41:0c:
                    94:c2:48:6e:5f:c4:dc:75:ca:f6:d3:e6:74:39:ca:
                    17:06:99:13:be:7f:5b:30:bb:65:ed:de:87:4f:90:
                    67:87:be:d0:2e:e2:3b:fb:45:53:59:bd:25:9d:fd:
                    af:9d:e0:ef:d6:2b:f1:ad:ed:6a:64:99:b0:b2:b3:
                    db:08:88:18:9d:cf:92:eb:e1:4e:65:31:3e:57:60:
                    a5:9f:15:26:fb:42:2a:e2:d7:8d:85:98:9f:d5:b9:
                    bb:5e:f6:7f:8a:de:3a:a4:f9:4d:cc:9d:6d:9e:f3:
                    05:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:02:01:40:1C:36:61:0C:84:28:0B:BF:33:04:12:82:14:23:C8:DD
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:76:d9:5c:98:28:77:0c:a8:f3:09:a5:94:c1:c2:78:7e:
         e1:51:8d:05:91:0c:59:b9:68:d2:19:d7:d4:1d:e6:3c:7c:a7:
         80:62:b0:5b:b9:a4:52:16:42:82:20:09:4f:da:30:04:77:2a:
         7e:c1:33:43:dc:23:bb:35:54:8f:a8:72:6b:96:0b:71:aa:fc:
         e0:ee:70:90:39:5a:1f:12:ec:bf:e0:50:fd:fa:d7:5e:d4:c5:
         56:1a:6d:17:28:1d:c6:8b:b0:be:18:7e:4f:97:6d:13:68:ae:
         64:2b:2b:b0:eb:2f:17:b0:94:18:ab:d2:b7:9d:59:87:19:30:
         f3:6a:26:b5:bc:06:4c:fe:4f:a5:7d:f2:d7:a0:76:6d:64:33:
         1d:96:50:30:fb:7c:84:64:5e:6f:e1:1b:73:3e:af:d7:04:09:
         56:3b:43:86:21:06:d4:89:75:53:6f:73:ef:78:30:86:ad:28:
         a1:cb:58:52:79:ce:d1:3c:92:4a:25:76:73:a4:0e:48:48:94:
         ce:84:69:44:ae:b9:c3:0a:fc:76:e2:65:d6:35:12:77:0f:05:
         f6:f3:05:b9:81:24:d5:52:ea:1f:08:4e:a3:30:5e:b8:2b:7a:
         ae:22:4a:7f:dc:f8:48:9c:a4:6b:5b:5c:ad:48:88:c2:54:f9:
         fb:8d:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:06 2025 by rpki-client