This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
File:                     C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json)
Hash identifier:          o0jaWaDrPvOS8sSG1Cxj85LKgVtoBqqDUKDZB7CcW5E=
Subject key identifier:   2B:FD:4A:27:6F:A6:DF:43:80:91:E3:DD:18:0F:AB:3F:6D:F4:B2:FA
Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
Certificate issuer:       /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Certificate serial:       63F952BB9E94E50410EF4269638747CD471EBE75
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
Manifest number:          0269
Signing time:             Sat 06 Dec 2025 06:42:01 +0000
Manifest this update:     Sat 06 Dec 2025 06:37:01 +0000
Manifest next update:     Tue 09 Dec 2025 07:36:01 +0000
Files and hashes:         1: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=)
                          2: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: zBHSqAGm8xyQGuvhDFsXZ9yyXleru3jRRu8d3v6i8T0=)
                          3: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: +a0J/aEe/HBxQSyjFU8Jpy6sg/8IuKYftoVKqedXGVw=)
                          4: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
                          rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 07:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f9:52:bb:9e:94:e5:04:10:ef:42:69:63:87:47:cd:47:1e:be:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
        Validity
            Not Before: Dec  6 06:37:01 2025 GMT
            Not After : Dec  9 07:36:01 2025 GMT
        Subject: CN=2BFD4A276FA6DF438091E3DD180FAB3F6DF4B2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:a6:96:a6:fc:83:55:80:41:0a:99:66:30:
                    ca:92:a8:a1:d3:a8:70:cb:b0:bb:2a:0b:24:8a:3c:
                    ea:7c:cf:a6:23:8e:04:9c:ac:ce:bc:bd:97:58:28:
                    99:33:cf:91:a3:9b:93:73:a1:28:4f:f6:9f:80:85:
                    8c:e8:05:a7:d0:74:7b:86:da:28:e7:e3:83:29:ad:
                    12:46:8d:34:12:51:f8:3e:45:c2:c2:bd:bd:48:74:
                    50:58:89:68:24:a6:0c:56:32:6a:7c:b7:c3:17:9d:
                    83:93:77:51:b8:90:ce:19:ba:a3:29:39:0f:76:1c:
                    26:a7:19:7d:93:b7:4c:fb:ad:da:b4:93:e9:0d:7a:
                    e6:58:20:54:2f:eb:5c:21:76:ff:37:55:2e:35:b0:
                    65:49:6a:c1:7a:87:f7:2a:02:d3:5e:c5:13:e2:58:
                    c2:53:f8:de:1d:30:35:31:42:a4:19:87:20:4b:d0:
                    a4:c0:02:f6:17:50:e1:e6:4c:7c:a7:d5:f3:b5:d9:
                    54:ff:76:d6:39:95:f2:30:ae:52:bc:af:fc:bd:7b:
                    66:f0:00:73:f8:5b:62:08:33:89:7e:df:7b:9f:3d:
                    c1:3e:93:0c:31:8c:d7:3f:9d:43:67:c6:26:15:9b:
                    0f:05:53:5e:d8:99:76:94:a0:0f:95:69:ea:1f:eb:
                    1c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:4A:27:6F:A6:DF:43:80:91:E3:DD:18:0F:AB:3F:6D:F4:B2:FA
            X509v3 Authority Key Identifier:
                keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:62:ea:10:dd:eb:6f:14:95:0e:bd:6e:c7:c4:04:1f:b0:5c:
         1e:c4:a1:a4:30:4c:47:59:e3:cd:54:ea:e9:c4:42:cc:71:63:
         c0:d6:fd:f9:ba:0e:82:f1:f4:42:ad:50:71:4f:f7:42:bd:ef:
         99:f5:c5:01:a7:a2:8c:3f:77:2c:d5:5d:d8:a0:a8:6c:40:6e:
         f2:14:12:76:b0:91:2e:6a:78:bd:8f:96:57:da:69:d0:f2:b6:
         0b:ba:7b:e6:57:f3:76:f4:1d:ff:e7:e4:34:1a:34:dc:63:b0:
         95:db:fe:ec:a2:0c:71:47:48:b3:ad:0b:ab:09:87:1b:b0:e9:
         33:df:29:4e:8c:7f:3b:c7:93:36:de:cb:2a:b6:e7:72:eb:dd:
         91:03:32:1f:c2:f3:8f:61:a9:99:0c:a9:15:af:e2:06:24:c2:
         26:18:80:07:09:ce:d4:5c:4c:86:14:a2:79:31:b1:cf:cc:c9:
         43:2f:43:6d:22:05:ee:90:9f:b6:b1:0a:35:06:bd:83:68:53:
         03:67:32:ef:74:83:12:fc:75:24:2f:c0:e2:3b:58:64:f0:12:
         62:3c:01:da:5d:02:87:9c:6d:d6:9b:a1:06:03:89:0c:37:f1:
         50:28:d0:69:fe:f7:23:ec:34:a0:44:aa:c1:7e:d3:8b:5e:09:
         b4:e6:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:46 2025 by rpki-client