This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft
File:                     7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft (raw, json)
Hash identifier:          g3eC7scvpTxAY4bkmX0GtGo2txemegC1HUXH3VZkijY=
Subject key identifier:   C2:C8:AD:0F:97:12:8F:2B:94:4B:14:2E:B8:1D:D1:59:FC:9D:D3:08
Authority key identifier: 73:00:28:3D:3A:4E:DE:40:59:18:6C:C1:66:00:ED:DC:CB:AC:0E:02
Certificate issuer:       /CN=7300283D3A4EDE4059186CC16600EDDCCBAC0E02
Certificate serial:       466839930EDCC1B58F7CD84B27C83E5B6D59F30A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft
Manifest number:          023B
Signing time:             Fri 05 Dec 2025 16:31:25 +0000
Manifest this update:     Fri 05 Dec 2025 16:26:25 +0000
Manifest next update:     Mon 08 Dec 2025 23:07:25 +0000
Files and hashes:         1: 7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl (hash: 4WG+VmebAQ+FMXgj36mFl6Ge7JiYkuh+0qktW1jXtpM=)
                          2: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: xJxKPYOAWnai2gI40yrMS82i27ILu85OM8m3rrjh+EI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl
                          rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:68:39:93:0e:dc:c1:b5:8f:7c:d8:4b:27:c8:3e:5b:6d:59:f3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7300283D3A4EDE4059186CC16600EDDCCBAC0E02
        Validity
            Not Before: Dec  5 16:26:25 2025 GMT
            Not After : Dec  8 23:07:25 2025 GMT
        Subject: CN=C2C8AD0F97128F2B944B142EB81DD159FC9DD308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:c4:2d:f4:d4:d4:a9:b0:88:cb:3b:70:28:
                    3c:c2:20:0a:bc:37:5f:9e:fa:72:c7:1b:1d:84:79:
                    98:35:fe:f4:80:bb:a9:3f:ef:7d:2f:56:b0:10:c8:
                    3d:86:61:4e:bb:0c:54:e2:4d:7d:7f:81:45:d9:21:
                    32:2b:af:7d:59:85:71:41:a3:15:51:6a:e1:a4:1f:
                    77:d8:e7:35:79:80:44:dd:e2:1a:bb:c9:85:42:16:
                    ee:2c:c8:4a:d6:cf:0a:08:18:8e:89:b1:b6:82:59:
                    09:89:6d:c2:35:7a:99:9a:39:d2:6f:26:48:0d:aa:
                    d7:42:c1:f9:b5:75:9b:4c:90:af:4c:0c:ea:a9:e5:
                    1c:a1:3d:a5:fd:a2:a0:20:b7:ed:7a:f3:5d:ac:07:
                    ce:a1:4f:54:c6:c4:67:5f:9c:97:65:1d:95:21:7a:
                    38:ed:aa:cd:aa:9b:bf:bc:4a:14:f9:0b:c6:00:f5:
                    6b:04:4b:2d:93:ce:3b:78:d8:53:46:ec:75:e9:8c:
                    b8:4c:93:e6:d8:ba:eb:21:8c:60:85:0a:bf:ad:31:
                    84:6a:2b:92:0c:7a:b0:79:be:33:e6:3d:1f:a9:78:
                    ec:59:c4:6e:a9:fe:79:b2:0b:1b:2e:f8:1c:85:f2:
                    c7:6a:aa:08:60:f3:83:b4:ab:5a:ca:2d:28:6d:b6:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C8:AD:0F:97:12:8F:2B:94:4B:14:2E:B8:1D:D1:59:FC:9D:D3:08
            X509v3 Authority Key Identifier:
                keyid:73:00:28:3D:3A:4E:DE:40:59:18:6C:C1:66:00:ED:DC:CB:AC:0E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:53:41:f0:b1:aa:e6:35:82:f2:2c:ea:c0:eb:27:e7:35:
         1f:d7:c6:38:7c:e5:11:e2:73:fa:32:f6:4e:25:5a:a2:1b:97:
         e7:cb:47:d6:a9:91:a2:94:55:2d:7c:15:7a:7d:c0:f1:a5:4c:
         7d:8d:93:91:3d:57:83:10:8f:cf:2d:55:3d:48:9a:18:7f:6f:
         ca:0d:e6:ef:c4:4d:f0:02:2a:4f:48:41:1d:ef:57:3e:18:d1:
         ca:8b:c5:1d:b3:3b:4b:8a:02:3f:21:3e:5a:7e:96:0d:23:31:
         c2:c2:d3:67:0c:ca:e2:67:b2:99:d6:7c:3a:78:c7:9d:0a:ac:
         f8:de:2d:d0:6c:a4:3c:8e:a4:f2:f8:1d:3a:4f:bd:0b:71:09:
         39:78:59:2f:fa:cd:f4:90:c8:6f:07:30:77:38:4d:b6:cf:a9:
         61:ab:6e:bb:41:83:a9:4e:ec:97:eb:1c:1a:f4:e2:29:c7:fd:
         6f:78:22:30:d9:f7:f1:ad:0a:7d:c9:e6:2c:0c:1f:bc:70:72:
         48:27:b0:04:5f:d8:68:73:f2:13:d2:97:03:46:b6:fe:49:e3:
         2f:1b:ca:4f:e1:dc:a6:81:30:08:55:e8:5b:4d:93:4a:9d:f7:
         e9:c5:7b:a9:0f:07:92:2b:72:ce:b7:c0:3a:13:07:32:4b:fa:
         78:4d:28:69
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURmg5kw7cwbWPfNhLJ8g+W21Z8wowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMwMDI4M0QzQTRFREU0MDU5MTg2Q0MxNjYwMEVEREND
QkFDMEUwMjAeFw0yNTEyMDUxNjI2MjVaFw0yNTEyMDgyMzA3MjVaMDMxMTAvBgNV
BAMTKEMyQzhBRDBGOTcxMjhGMkI5NDRCMTQyRUI4MUREMTU5RkM5REQzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5cQt9NTUqbCIyztwKDzCIAq8
N1+e+nLHGx2EeZg1/vSAu6k/730vVrAQyD2GYU67DFTiTX1/gUXZITIrr31ZhXFB
oxVRauGkH3fY5zV5gETd4hq7yYVCFu4syErWzwoIGI6JsbaCWQmJbcI1epmaOdJv
JkgNqtdCwfm1dZtMkK9MDOqp5RyhPaX9oqAgt+16812sB86hT1TGxGdfnJdlHZUh
ejjtqs2qm7+8ShT5C8YA9WsESy2Tzjt42FNG7HXpjLhMk+bYuushjGCFCr+tMYRq
K5IMerB5vjPmPR+peOxZxG6p/nmyCxsu+ByF8sdqqghg84O0q1rKLShttphdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwsitD5cSjyuUSxQuuB3RWfyd0wgwHwYDVR0j
BBgwFoAUcwAoPTpO3kBZGGzBZgDt3MusDgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZjY0NDBmNi02ZjVhLTRmNGItYTU5Ny1lNzRiNTQzZTc4NWIvMC83MzAwMjgzRDNB
NEVERTQwNTkxODZDQzE2NjAwRUREQ0NCQUMwRTAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzMwMDI4M0QzQTRFREU0MDU5MTg2Q0MxNjYwMEVERENDQkFD
MEUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY2NDQwZjYtNmY1YS00ZjRiLWE1
OTctZTc0YjU0M2U3ODViLzAvNzMwMDI4M0QzQTRFREU0MDU5MTg2Q0MxNjYwMEVE
RENDQkFDMEUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKpAU0HwsarmNYLyLOrA6yfnNR/Xxjh85RHi
c/oy9k4lWqIbl+fLR9apkaKUVS18FXp9wPGlTH2Nk5E9V4MQj88tVT1Imhh/b8oN
5u/ETfACKk9IQR3vVz4Y0cqLxR2zO0uKAj8hPlp+lg0jMcLC02cMyuJnspnWfDp4
x50KrPjeLdBspDyOpPL4HTpPvQtxCTl4WS/6zfSQyG8HMHc4TbbPqWGrbrtBg6lO
7JfrHBr04inH/W94IjDZ9/GtCn3J5iwMH7xwckgnsARf2Ghz8hPSlwNGtv5J4y8b
yk/h3KaBMAhV6FtNk0qd9+nFe6kPB5Ircs63wDoTBzJL+nhNKGk=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:43:15 2025 by rpki-client