This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
File:                     13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json)
Hash identifier:          X+FIj2irQ+HGdt13tEvAT3EvnJoZBhLlYBzLowU/OXo=
Subject key identifier:   C3:71:73:DB:C7:26:F2:1D:90:ED:50:22:08:68:B9:3E:F7:39:4E:B6
Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79
Certificate issuer:       /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479
Certificate serial:       5C68434416119556E3041AFA6460CA3ECCD71572
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
Manifest number:          0213
Signing time:             Fri 05 Dec 2025 19:21:20 +0000
Manifest this update:     Fri 05 Dec 2025 19:16:20 +0000
Manifest next update:     Tue 09 Dec 2025 06:36:20 +0000
Files and hashes:         1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=)
                          2: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: VftF6l0gY5mbxj9hqJl1vD6cNn/QlcANiiSOlOZ7qGY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl
                          rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:68:43:44:16:11:95:56:e3:04:1a:fa:64:60:ca:3e:cc:d7:15:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479
        Validity
            Not Before: Dec  5 19:16:20 2025 GMT
            Not After : Dec  9 06:36:20 2025 GMT
        Subject: CN=C37173DBC726F21D90ED50220868B93EF7394EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:04:cb:14:6e:37:c7:14:77:f9:11:65:36:
                    3e:28:66:97:78:40:67:3b:aa:c9:8c:0e:03:31:a4:
                    3a:ac:d7:0b:0a:1f:62:97:71:8a:67:d3:d1:41:28:
                    47:94:45:7f:e6:6a:03:04:fa:e7:53:99:c4:39:5c:
                    6f:89:f8:63:79:76:95:c1:f2:9b:ce:08:94:73:e9:
                    de:22:11:94:35:76:f3:4a:f1:08:0e:af:e5:c0:84:
                    71:36:e4:be:25:18:23:39:8f:d0:5a:04:e9:44:8c:
                    7f:e2:e0:aa:28:f5:84:94:cb:e7:8f:48:76:44:f8:
                    5a:ac:2b:da:ab:40:aa:4e:39:32:f3:74:e9:e2:ef:
                    0b:47:0d:fe:19:15:08:ce:67:7f:a3:52:25:e8:a5:
                    fb:83:6f:fd:23:12:ba:d0:6b:2c:5e:81:d9:db:b1:
                    7b:90:bf:34:c1:0f:58:3c:5b:e7:cf:27:3b:55:79:
                    66:78:04:06:ad:4c:5b:15:25:5d:aa:f8:67:52:1a:
                    5d:5d:95:f6:f9:02:93:d8:ca:62:43:d1:4c:4d:6b:
                    68:69:3c:e9:6c:60:dc:bd:3d:c0:bb:e2:2a:86:f6:
                    6d:b4:21:cd:99:bb:73:22:1a:e5:be:59:5b:7e:0c:
                    2e:64:51:d3:d7:fc:ff:77:7b:b1:f6:f6:87:83:b5:
                    93:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:73:DB:C7:26:F2:1D:90:ED:50:22:08:68:B9:3E:F7:39:4E:B6
            X509v3 Authority Key Identifier:
                keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:73:a1:a1:93:9b:39:af:f8:8d:69:ca:ad:fc:39:72:06:71:
         2a:19:1f:cd:f9:a7:71:87:63:5c:80:4b:61:3b:8a:5b:7d:75:
         6b:5f:a2:63:fd:06:a5:cb:75:ba:d5:e3:73:43:d3:3e:c0:f0:
         54:e9:03:4f:0a:13:86:6d:7e:ab:69:b3:81:81:26:16:0b:be:
         db:36:c0:2b:d1:1e:20:e3:69:bb:ae:70:f6:61:27:48:5d:f8:
         bd:b4:13:23:bd:0c:fc:2a:45:86:e7:94:4f:d6:9a:f2:67:b4:
         eb:27:97:a5:63:61:c8:86:fc:ce:d4:ba:15:af:44:10:79:43:
         82:3d:b3:df:e2:ff:a7:8b:f4:f1:df:d0:e0:89:b5:6b:51:f3:
         79:ae:98:55:fd:06:4c:98:d9:e3:df:d6:7a:c2:cb:f7:95:ea:
         45:40:87:b1:c4:4f:5b:f7:c1:46:a4:35:0e:3f:33:19:95:3b:
         3c:94:2b:59:7b:26:4a:ba:5b:76:4a:2a:39:ec:a5:f3:02:e2:
         8e:04:12:db:1c:f5:d0:78:47:1b:97:04:e6:99:c3:cc:ac:19:
         18:4a:ac:e4:7b:7d:3e:e7:bf:33:8d:d9:a4:b4:15:f8:7b:c5:
         e9:ad:38:b1:bd:d2:20:7d:4c:11:ac:46:dd:05:93:04:ae:94:
         a8:df:68:25
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXGhDRBYRlVbjBBr6ZGDKPszXFXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF
NUE1QTQ3OTAeFw0yNTEyMDUxOTE2MjBaFw0yNTEyMDkwNjM2MjBaMDMxMTAvBgNV
BAMTKEMzNzE3M0RCQzcyNkYyMUQ5MEVENTAyMjA4NjhCOTNFRjczOTRFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbbQTLFG43xxR3+RFlNj4oZpd4
QGc7qsmMDgMxpDqs1wsKH2KXcYpn09FBKEeURX/magME+udTmcQ5XG+J+GN5dpXB
8pvOCJRz6d4iEZQ1dvNK8QgOr+XAhHE25L4lGCM5j9BaBOlEjH/i4Koo9YSUy+eP
SHZE+FqsK9qrQKpOOTLzdOni7wtHDf4ZFQjOZ3+jUiXopfuDb/0jErrQayxegdnb
sXuQvzTBD1g8W+fPJztVeWZ4BAatTFsVJV2q+GdSGl1dlfb5ApPYymJD0UxNa2hp
POlsYNy9PcC74iqG9m20Ic2Zu3MiGuW+WVt+DC5kUdPX/P93e7H29oeDtZM5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUw3Fz28cm8h2Q7VAiCGi5Pvc5TrYwHwYDVR0j
BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1
QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1
QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw
NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx
QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGJzoaGTmzmv+I1pyq38OXIGcSoZH835p3GH
Y1yAS2E7ilt9dWtfomP9BqXLdbrV43ND0z7A8FTpA08KE4Ztfqtps4GBJhYLvts2
wCvRHiDjabuucPZhJ0hd+L20EyO9DPwqRYbnlE/WmvJntOsnl6VjYciG/M7UuhWv
RBB5Q4I9s9/i/6eL9PHf0OCJtWtR83mumFX9BkyY2ePf1nrCy/eV6kVAh7HET1v3
wUakNQ4/MxmVOzyUK1l7Jkq6W3ZKKjnspfMC4o4EEtsc9dB4RxuXBOaZw8ysGRhK
rOR7fT7nvzON2aS0Ffh7xemtOLG90iB9TBGsRt0FkwSulKjfaCU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 08:19:29 2025 by rpki-client