This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
File:                     780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft (raw, json)
Hash identifier:          Lqxafi7MMPbFUro6bqJdiQZpckZf0wAUIGq0HWldpnY=
Subject key identifier:   77:86:3A:F6:17:B7:9A:4E:ED:EB:F4:79:2A:DF:97:B7:F2:7F:68:4E
Authority key identifier: 78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9
Certificate issuer:       /CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9
Certificate serial:       029E2FC0974BAF13D2C608B1F726717C86A8DD93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
Manifest number:          0100
Signing time:             Wed 17 Dec 2025 19:22:01 +0000
Manifest this update:     Wed 17 Dec 2025 19:17:01 +0000
Manifest next update:     Sat 20 Dec 2025 20:20:01 +0000
Files and hashes:         1: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl (hash: r52pOaPCILkX5NwSR/MhzL7NkDxxXdwSdYxURV3SSUs=)
                          2: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: M+NRbpCUskaX1vYH/4jaIAMXTEk8snO9JlvCQ9TdRYk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl
                          rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 20:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9e:2f:c0:97:4b:af:13:d2:c6:08:b1:f7:26:71:7c:86:a8:dd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9
        Validity
            Not Before: Dec 17 19:17:01 2025 GMT
            Not After : Dec 20 20:20:01 2025 GMT
        Subject: CN=77863AF617B79A4EEDEBF4792ADF97B7F27F684E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:c6:04:ee:6b:7c:1f:e7:4e:11:76:31:df:
                    a6:99:c2:c8:26:40:c2:ec:2f:be:43:52:2e:89:7c:
                    d8:3a:4b:11:4e:91:f2:a7:d9:89:f2:cf:08:68:6d:
                    db:19:c3:13:03:fc:02:3e:6f:ff:7e:e3:c5:1d:bb:
                    1a:b4:57:a2:4f:28:b1:ce:ab:37:d0:56:e4:e9:3b:
                    0e:21:af:14:e1:83:11:e3:4e:ab:3d:2e:0e:ce:72:
                    65:a0:be:22:30:cc:0b:23:ab:b1:75:7e:4a:70:66:
                    b2:e2:bd:d0:f8:b6:a3:ab:63:b4:24:0f:51:98:84:
                    43:ba:f7:4d:0b:12:7b:70:37:36:01:80:86:d8:5b:
                    e9:69:33:65:fc:3c:1c:84:0c:62:d4:1e:9e:d0:49:
                    71:3d:1a:8b:6a:f2:a6:52:8d:7f:40:9c:b5:43:22:
                    69:12:df:a8:7d:41:7a:9f:45:74:60:dc:3e:bb:99:
                    aa:df:0f:11:82:0e:24:20:ed:32:b0:0e:a4:72:3a:
                    96:4e:df:59:e1:ff:9b:66:9c:20:4e:52:e6:8b:3b:
                    17:df:bf:8b:fd:fd:84:2f:bd:82:4d:61:93:82:0d:
                    ed:7d:64:c1:27:72:6f:38:fd:5b:3f:12:4a:6b:8e:
                    a6:8e:1f:b0:ac:1c:44:43:0d:aa:2d:06:67:52:a7:
                    29:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:3A:F6:17:B7:9A:4E:ED:EB:F4:79:2A:DF:97:B7:F2:7F:68:4E
            X509v3 Authority Key Identifier:
                keyid:78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:97:47:b1:b3:31:7f:5f:52:3e:48:69:11:e6:62:ec:cd:60:
         89:b4:7f:6a:4b:1c:0e:a4:4a:cb:61:6a:c3:31:97:59:55:ef:
         87:f7:0d:c9:70:71:0d:d9:3d:e7:84:bc:a8:ca:a8:a5:ad:04:
         51:cc:91:00:55:bd:40:92:5b:5b:7a:10:04:8d:2c:15:80:75:
         e0:91:c4:de:92:e0:87:4e:60:92:0e:d8:cb:e5:0a:50:f7:34:
         60:b0:2a:99:54:31:d4:01:3b:09:34:b1:71:51:bb:32:1d:f3:
         fe:28:43:17:45:f3:73:5a:02:04:98:97:60:c9:d1:c6:1f:17:
         67:8b:14:b6:a5:50:c3:90:49:45:e3:ef:c8:a9:63:fa:a4:37:
         0d:f4:25:1f:9d:47:8b:af:13:5c:a2:24:d2:08:59:64:9e:02:
         80:27:ae:77:04:b6:e4:ce:1e:a9:00:ea:08:3b:15:d2:e4:0e:
         96:ac:79:b5:8b:8f:db:73:4d:b8:ee:0d:13:8a:f5:cf:cd:15:
         d4:06:a7:d9:44:61:f1:6f:90:92:67:9f:04:0a:cd:a6:d6:8b:
         70:68:59:a1:2d:1b:ad:f8:90:8f:91:e0:db:2e:c2:e4:51:91:
         cd:8f:54:6e:c6:9a:5a:13:c0:42:2a:c7:16:b9:5f:31:39:1d:
         37:3f:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:49:47 2025 by rpki-client