This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
File:                     0310C64163DFFAE5A8F4065429C26B631D9834D9.mft (raw, json)
Hash identifier:          QW5Pw+2JoX95JO8efhjEfN648rTE8bj1Cn26w00pWIc=
Subject key identifier:   6E:F7:C9:08:67:C9:35:FB:11:73:8D:33:AA:A9:F2:AD:88:A2:68:CE
Authority key identifier: 03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9
Certificate issuer:       /CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
Certificate serial:       52D11DB2320041E07F2F5D133B2B5E389DB2DC0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
Manifest number:          01E4
Signing time:             Fri 05 Dec 2025 09:10:40 +0000
Manifest this update:     Fri 05 Dec 2025 09:05:40 +0000
Manifest next update:     Mon 08 Dec 2025 19:24:40 +0000
Files and hashes:         1: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: 1b3dsqoL7b6hua66g4HGVJQW4XuIdLfcQQvDgZALsus=)
                          2: 0310C64163DFFAE5A8F4065429C26B631D9834D9.crl (hash: o6uc9jpCTyGvwGStoxoB+0WkPMi8jqZNB0npeCoJkFA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl
                          rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 19:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d1:1d:b2:32:00:41:e0:7f:2f:5d:13:3b:2b:5e:38:9d:b2:dc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
        Validity
            Not Before: Dec  5 09:05:40 2025 GMT
            Not After : Dec  8 19:24:40 2025 GMT
        Subject: CN=6EF7C90867C935FB11738D33AAA9F2AD88A268CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:51:d4:0e:8f:0b:b8:44:c0:f1:c7:f1:ea:a9:
                    55:01:3c:f8:95:50:57:cf:0a:5d:c1:5f:3c:a6:91:
                    be:0a:af:57:c0:6f:7e:23:e1:69:14:28:94:92:cd:
                    d7:c3:5f:4c:fe:d8:89:38:9a:fe:0f:08:77:d4:d7:
                    1f:44:63:4e:6c:17:4b:94:5a:0a:a4:b8:d9:47:3a:
                    04:14:f8:ed:83:2b:66:12:52:2f:d6:11:1b:ff:f1:
                    83:b0:62:36:87:ba:57:54:38:7e:f7:93:20:29:20:
                    7f:3a:a9:55:8e:00:f6:f4:ef:49:84:5e:8c:79:11:
                    a1:e1:eb:26:bf:f0:b9:45:4d:07:cf:8f:8d:a6:9d:
                    7d:bd:fd:9f:f5:93:d7:dd:19:6f:5c:a7:cd:61:63:
                    44:dd:d8:6e:45:9e:c1:f8:5b:81:ab:74:68:b9:cc:
                    79:75:35:b4:4b:6f:85:09:36:00:0e:9b:da:1a:f7:
                    67:0e:d1:4c:1d:4f:0f:c5:b7:50:9c:c4:3b:a7:ef:
                    75:7e:81:d9:43:3d:0a:52:87:17:82:be:60:8e:30:
                    e4:7c:e4:58:16:d9:0c:73:7d:65:7f:6a:52:43:2a:
                    4f:0a:57:c0:75:23:e1:78:63:58:3d:5b:a7:cc:f3:
                    09:86:ca:bc:c9:29:84:95:da:13:95:54:3b:6d:d4:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F7:C9:08:67:C9:35:FB:11:73:8D:33:AA:A9:F2:AD:88:A2:68:CE
            X509v3 Authority Key Identifier:
                keyid:03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:2b:be:b4:6d:b0:9a:66:c3:78:11:a5:ea:2e:83:2a:c5:
         3c:88:17:3e:e1:22:bf:57:b6:0f:9e:6c:6c:e9:e6:11:0b:6c:
         58:05:7e:bb:ab:74:42:9b:eb:d7:2c:41:0c:68:3a:fa:c7:05:
         76:77:f6:05:7e:f1:ae:e6:a1:58:59:4c:59:4a:52:91:3c:55:
         61:20:0b:49:8a:8d:3b:5d:4a:13:96:78:0e:6e:1e:9b:8b:4b:
         7f:68:14:36:f0:68:07:a6:05:b7:9c:1a:74:59:f2:a0:c0:54:
         df:34:f5:7c:f3:e1:b0:fb:32:38:b6:8c:b7:7a:d0:4b:c6:2c:
         18:e5:b6:3c:7a:03:1c:98:3b:83:c4:bc:ce:cd:5e:40:93:21:
         e7:81:5e:88:5b:ef:d3:79:77:7d:4b:bd:c6:18:2d:0e:ac:d2:
         e4:1b:ac:9f:17:fe:63:8d:d0:27:7e:a2:38:1a:15:eb:0a:cc:
         11:6b:4d:d8:79:6c:a0:1b:90:92:8b:8e:16:c2:18:08:96:08:
         a7:a2:54:71:d3:90:dd:af:22:55:c6:0d:7f:2b:fd:3c:ef:15:
         bb:9d:4f:df:97:9c:98:3a:67:21:03:86:0d:5f:c2:de:10:c5:
         30:9e:54:55:e7:6b:53:e5:2d:a2:41:aa:26:99:9c:8c:ba:4d:
         b8:cf:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:55 2025 by rpki-client