This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft
File:                     2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json)
Hash identifier:          V20h7GFiB91WUYh0Lt1B7Zyo/b/5ow2H2BNTHHrP1Lg=
Subject key identifier:   42:3D:6E:31:D5:5C:13:D8:35:A1:A7:92:60:A3:5A:82:88:1A:E1:C6
Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30
Certificate issuer:       /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030
Certificate serial:       49ECC990187A5FA873DEC1B5188E14BEFC0A3CCF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft
Manifest number:          0260
Signing time:             Sat 06 Dec 2025 23:20:05 +0000
Manifest this update:     Sat 06 Dec 2025 23:15:05 +0000
Manifest next update:     Wed 10 Dec 2025 04:19:05 +0000
Files and hashes:         1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: sQsn4PovbzUNZ0gge+k1DPwVrTRkVrtLllULfw1fxfk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl
                          rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ec:c9:90:18:7a:5f:a8:73:de:c1:b5:18:8e:14:be:fc:0a:3c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030
        Validity
            Not Before: Dec  6 23:15:05 2025 GMT
            Not After : Dec 10 04:19:05 2025 GMT
        Subject: CN=423D6E31D55C13D835A1A79260A35A82881AE1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:ed:3f:f7:fb:87:23:68:5c:8d:f9:5f:55:
                    09:0f:c4:0d:6e:33:23:89:ee:d3:02:53:79:4b:1b:
                    6d:f9:79:b4:a2:eb:66:35:01:75:8d:10:ac:1a:80:
                    cd:84:52:6c:83:5f:55:99:3b:1f:8d:68:3a:e3:8a:
                    44:f8:a8:a7:5d:8a:0f:1a:1a:83:c3:e6:48:2b:76:
                    e8:fb:bb:b5:0d:f3:bb:75:1d:3f:98:a1:97:9d:ce:
                    20:26:86:31:ab:2f:54:6f:29:0d:31:ce:b8:96:17:
                    cf:f3:87:dc:66:68:56:74:d5:93:5a:1f:1e:bd:31:
                    bb:6f:11:b0:57:5a:e9:31:ee:15:52:1a:9e:cc:0d:
                    39:09:9b:96:8c:fe:89:01:93:c9:23:c1:bf:22:c8:
                    8e:7f:9f:96:98:22:74:62:07:79:91:0b:83:04:28:
                    85:b6:62:d1:d6:e6:2f:ff:8c:fb:b9:44:9d:f5:f4:
                    18:64:91:a1:e3:36:d0:b4:f5:50:94:57:8b:e0:ea:
                    36:71:b1:89:01:bd:f1:48:dc:da:fc:ff:89:e1:93:
                    d2:93:00:25:78:08:25:d0:cb:a4:e1:21:30:9c:8b:
                    bc:a6:63:d5:87:76:48:75:e9:b8:86:b0:da:1f:d5:
                    57:95:a2:e1:5e:89:d7:0d:96:0c:f7:1c:cd:a7:c3:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3D:6E:31:D5:5C:13:D8:35:A1:A7:92:60:A3:5A:82:88:1A:E1:C6
            X509v3 Authority Key Identifier:
                keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:bb:21:c1:fe:b1:b3:8f:16:86:74:3b:c7:ff:93:42:ed:
         02:f4:1e:d5:8f:61:c5:d1:31:65:d7:8a:98:a7:c6:98:73:26:
         c7:a5:9a:64:54:09:73:6d:fa:1f:15:f9:5f:14:47:d9:6b:ae:
         db:9f:55:15:49:1f:06:12:44:24:ef:03:4a:47:c7:f2:9a:88:
         5d:33:94:9e:d7:69:ae:db:c9:49:cd:e7:0d:d3:8a:a3:0d:54:
         08:44:20:18:93:25:ce:f9:26:60:1c:19:fd:91:44:96:a2:e0:
         69:d1:78:8e:16:14:28:44:c1:57:23:b9:87:81:7a:ba:96:02:
         4b:03:73:b1:9b:e8:52:13:ec:f5:57:a4:d5:f2:21:0c:36:31:
         57:c6:43:57:67:ef:e9:75:68:d9:41:b4:2e:3d:5a:10:09:1d:
         29:b1:e7:f7:54:43:63:f5:36:59:7b:22:ca:8e:9a:25:fc:53:
         d4:70:73:ca:44:9f:f6:1c:69:07:8b:09:65:8d:4c:42:fc:cf:
         ba:03:cb:75:fd:0f:24:d3:40:46:cd:1a:39:11:42:6c:34:08:
         48:46:89:87:df:d7:81:9d:4e:d6:88:e7:91:a9:c8:a1:ac:58:
         59:4c:8c:0f:45:a8:48:9a:62:0b:2d:43:76:dc:16:00:0a:02:
         3c:43:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:22:33 2025 by rpki-client