This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
File:                     C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json)
Hash identifier:          awI9ah7K8tX24K4A5Xx4Sqf5edoNUiOqPWkZdOMnlbo=
Subject key identifier:   3C:C7:14:6F:99:F9:91:1E:A0:0E:34:5E:0E:DA:41:8D:4D:BF:6A:91
Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
Certificate issuer:       /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Certificate serial:       0123B3BA261875DD37C1CF3A00516C791A2C0038
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
Manifest number:          01CB
Signing time:             Sat 06 Dec 2025 04:21:03 +0000
Manifest this update:     Sat 06 Dec 2025 04:16:03 +0000
Manifest next update:     Tue 09 Dec 2025 11:51:03 +0000
Files and hashes:         1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: SPILoD0YuDgHkCG/UcROiBKV6NuzifUgiPor6w8kdtI=)
                          2: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: S9UuPsKTIGvifIPxQy8ZlYWwWsHLXVY3Eub1xczcr6g=)
                          3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: EANS/BbBSV3D2lqyFzIlb0gYJ6M3G6ZH8tGtZE5xhF4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
                          rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 11:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:23:b3:ba:26:18:75:dd:37:c1:cf:3a:00:51:6c:79:1a:2c:00:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
        Validity
            Not Before: Dec  6 04:16:03 2025 GMT
            Not After : Dec  9 11:51:03 2025 GMT
        Subject: CN=3CC7146F99F9911EA00E345E0EDA418D4DBF6A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:74:a5:2b:a9:69:59:48:5c:46:93:63:18:
                    35:77:67:c6:83:a6:5f:65:6b:53:0e:74:58:2f:85:
                    66:01:da:b8:97:6b:c7:3d:44:e8:0e:ee:31:45:47:
                    c8:31:90:33:09:39:20:ce:98:d9:29:99:8c:7b:1d:
                    7b:96:5e:0c:08:7e:24:05:1d:7f:07:d2:1d:6d:ba:
                    4d:fb:b2:a7:e8:6c:8c:96:1c:c6:a1:6f:66:9f:58:
                    0d:75:69:98:cd:3a:d1:c2:cf:c6:bc:b8:08:1f:ab:
                    5f:6a:93:e4:fe:b5:36:71:38:da:11:db:ec:69:a8:
                    e6:b4:2a:8f:4f:6f:3f:fc:46:a7:3b:66:54:5a:9f:
                    17:63:53:0d:6b:52:86:4d:e2:aa:47:b7:64:f2:e6:
                    1f:e4:78:94:6c:6f:d9:50:86:12:f6:b2:15:64:fc:
                    44:86:a3:b8:93:53:4f:ba:6f:02:9e:c0:81:00:01:
                    c7:3c:70:68:80:e4:5c:01:97:0c:7a:83:54:be:88:
                    1c:1d:24:16:eb:a3:48:18:66:be:e3:2d:82:2c:fa:
                    b7:89:4f:74:1c:18:67:ce:25:32:5a:81:cc:c3:f5:
                    3a:b2:7d:91:77:3c:a5:2b:58:4e:7f:e0:b4:52:45:
                    bc:0f:49:1b:eb:cf:27:ce:44:aa:a5:f2:47:98:ad:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C7:14:6F:99:F9:91:1E:A0:0E:34:5E:0E:DA:41:8D:4D:BF:6A:91
            X509v3 Authority Key Identifier:
                keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:b8:c9:dd:46:da:a1:21:3f:45:25:1e:6b:8c:36:d3:e6:
         94:3c:9c:5f:1e:1a:9d:6e:ba:ad:ee:c8:7e:d1:11:ae:db:e9:
         12:72:7b:ec:6a:6d:03:0f:a7:f1:f9:c9:01:9e:e0:32:98:38:
         a7:23:53:f5:d1:ed:02:f7:ec:f0:d2:e2:94:48:a9:30:ee:db:
         b0:61:b1:ec:01:3a:bc:85:b0:19:09:ce:a4:67:69:52:59:61:
         55:55:1b:78:f7:12:f2:2f:af:88:f6:34:aa:fe:ea:f4:13:d2:
         4c:f2:a3:8b:1b:4d:64:49:92:04:eb:ff:eb:a7:82:f7:8c:9f:
         97:9a:47:61:18:13:88:62:b3:45:0a:5a:5d:9f:7c:69:bb:dc:
         fd:17:06:96:df:19:47:4f:70:68:df:68:75:83:30:93:87:a6:
         b1:53:c9:17:e9:d2:70:03:c0:00:43:8a:99:59:f3:d7:fc:a4:
         e8:60:ca:e6:22:c5:b6:d8:94:28:22:42:80:72:34:11:5e:01:
         27:d7:b1:8a:45:1a:c1:9d:d4:31:2e:d5:7c:dd:c7:24:fd:76:
         ec:3f:be:07:42:19:39:e8:a5:9c:61:ab:cf:ea:36:83:57:54:
         e2:45:fc:47:c9:6f:ba:01:ba:e5:f8:ff:25:75:24:dc:70:2e:
         5a:a8:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:58:46 2025 by rpki-client