This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
File:                     0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json)
Hash identifier:          qA7bCPnCKMjKrXNhqO9hbI1uj4XckjJaEXqHMhZfIXw=
Subject key identifier:   13:13:1A:50:CB:05:CB:9C:47:BD:C8:4F:AD:B7:88:08:25:6D:1F:34
Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00
Certificate issuer:       /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
Certificate serial:       014E60EAD32449A2CCD8C7D30CD976B9973CCE46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
Manifest number:          0130
Signing time:             Thu 04 Dec 2025 21:20:02 +0000
Manifest this update:     Thu 04 Dec 2025 21:15:02 +0000
Manifest next update:     Mon 08 Dec 2025 07:16:02 +0000
Files and hashes:         1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: iRi7WR2YMgSSaoLuEHAeyKT1cRJSxhreHJrEUOACKF4=)
                          2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: 9thm8tqpKnT0hDlZkI8uSNs6DDGCpKXy22/dK1Jcd3M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl
                          rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 07:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4e:60:ea:d3:24:49:a2:cc:d8:c7:d3:0c:d9:76:b9:97:3c:ce:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
        Validity
            Not Before: Dec  4 21:15:02 2025 GMT
            Not After : Dec  8 07:16:02 2025 GMT
        Subject: CN=13131A50CB05CB9C47BDC84FADB78808256D1F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:cb:54:42:03:7b:06:34:59:13:03:83:14:
                    bd:18:34:e8:73:6d:e8:a0:ba:19:c4:e4:05:c8:92:
                    ab:86:95:3c:ac:1c:65:97:cd:a8:50:f1:df:d8:09:
                    11:af:e9:95:97:22:f3:d4:1c:ce:31:1b:0b:e7:a1:
                    fd:be:a9:9d:c1:79:c5:a8:c7:d0:b9:b8:a0:a5:54:
                    d9:48:f0:07:b1:31:bb:f8:6a:5c:c2:c8:5c:c8:ea:
                    7f:18:40:63:23:4b:a8:e8:a5:f8:fa:c1:67:d5:7f:
                    01:ad:d5:ef:3b:0d:20:a4:2d:bf:ec:db:63:d6:90:
                    09:ee:49:6f:84:3b:81:2e:37:5a:c2:73:ec:0c:86:
                    69:59:e4:47:4d:27:b4:a1:a1:88:63:6d:ad:ef:42:
                    ba:ac:1c:dd:fa:33:c9:02:08:f8:7b:9d:6c:7a:5f:
                    f0:e6:5d:bf:b5:48:da:91:56:41:0b:0c:d4:c4:12:
                    af:23:dc:18:43:88:f6:0d:d3:dd:b4:20:77:54:50:
                    25:01:32:33:64:e0:28:ab:08:c1:86:82:cd:6f:58:
                    b7:32:d1:fe:db:b1:bf:e0:61:d7:3b:0e:83:17:6c:
                    47:ba:9a:9e:77:da:2f:3b:2a:6a:c3:05:f5:ec:fd:
                    c5:16:84:e7:64:2d:a7:27:4a:34:c5:a7:fe:8b:a6:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:13:1A:50:CB:05:CB:9C:47:BD:C8:4F:AD:B7:88:08:25:6D:1F:34
            X509v3 Authority Key Identifier:
                keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:73:53:d1:e4:cb:d8:d2:a2:12:90:01:10:e6:96:8b:57:
         d8:90:dd:a9:77:a4:da:f8:99:18:94:d0:87:c5:72:a6:30:39:
         b1:a7:c5:2e:2c:d8:1a:30:2a:b0:4c:f8:e7:39:1d:bd:dd:3a:
         ab:98:78:10:8b:d8:d9:57:5e:4d:d9:a0:87:7e:37:56:73:8a:
         82:06:07:8a:8d:d5:82:af:3f:5e:72:9f:2f:a5:47:5f:c0:a8:
         cd:03:23:1c:b9:82:17:85:20:e6:1b:da:48:c3:59:42:93:14:
         96:e6:0e:9f:56:7f:3f:c0:d6:f6:7a:57:d2:cd:e6:44:eb:01:
         24:d1:15:41:a7:d1:8d:3f:12:17:8f:80:f7:b9:26:41:f5:70:
         13:42:78:e2:c3:c9:8c:b6:80:a5:ae:8c:ec:52:a6:d3:b2:90:
         64:cc:46:d9:59:ed:02:80:a4:b4:19:87:57:e1:a1:52:e0:80:
         4c:6c:b2:10:4f:00:b3:a8:8c:37:3d:ab:b3:9e:97:6b:3c:f5:
         b0:e0:84:90:0e:44:18:7f:19:c5:a9:2e:5f:a7:3a:7d:35:ea:
         0c:a0:3f:23:3b:e4:4a:44:95:d1:11:52:46:80:09:54:ef:13:
         04:b2:82:e6:30:44:8b:ea:ab:e0:b0:e6:75:55:5e:a9:56:2b:
         06:ea:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:00:14 2025 by rpki-client