This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
File:                     3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json)
Hash identifier:          i3987Ggpn1wSXajI/ZGPtf1mW0D5VlxK49s/wGxpLEI=
Subject key identifier:   62:AB:A0:E9:34:EA:07:7E:A3:F4:F7:72:41:19:1E:8C:74:6C:E6:87
Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36
Certificate issuer:       /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836
Certificate serial:       171EEB78D98CB2AACC354070A545E9B0D791B6AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
Manifest number:          03DA
Signing time:             Fri 05 Dec 2025 17:42:18 +0000
Manifest this update:     Fri 05 Dec 2025 17:37:18 +0000
Manifest next update:     Mon 08 Dec 2025 22:01:18 +0000
Files and hashes:         1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=)
                          2: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: ZJPy3z4qUrbcJislcEs75Gnzo1m9fTNOZj5dcip+eG0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl
                          rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1e:eb:78:d9:8c:b2:aa:cc:35:40:70:a5:45:e9:b0:d7:91:b6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836
        Validity
            Not Before: Dec  5 17:37:18 2025 GMT
            Not After : Dec  8 22:01:18 2025 GMT
        Subject: CN=62ABA0E934EA077EA3F4F77241191E8C746CE687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:23:6d:bd:3e:73:74:86:9d:ea:6e:8b:9b:
                    e5:a4:55:d8:d6:1e:3d:86:d0:1e:46:d1:60:d8:3e:
                    8c:24:f1:ab:c4:23:97:d6:5b:4d:ba:f7:a4:69:a6:
                    31:1b:1b:04:78:0d:5a:a1:da:85:86:14:5a:48:22:
                    0f:d7:8f:5c:66:75:d0:d6:27:16:b3:c6:2e:0a:34:
                    c9:32:09:94:69:bf:43:92:82:47:ef:46:ec:8d:7e:
                    70:99:60:9e:25:09:79:af:9b:0b:04:78:f8:9c:61:
                    b7:e3:e4:87:c4:44:f1:3e:45:8b:78:09:6b:8a:19:
                    b1:7b:38:55:cc:bb:52:ce:8b:1f:d9:98:7b:1b:55:
                    32:7e:5c:03:b1:2f:3e:8b:ec:bc:df:5f:de:9a:a0:
                    c0:dd:00:07:ec:8f:71:13:39:48:d0:04:d9:25:c5:
                    7e:56:9c:0b:c3:a9:c7:9e:f1:e0:7e:ea:7a:a0:0d:
                    a3:8b:05:52:7f:93:de:3c:01:08:2a:a5:64:cb:15:
                    84:c2:26:23:d3:9d:ad:6c:65:c1:45:de:9f:97:c7:
                    77:24:03:fe:7e:38:ca:72:92:aa:fd:53:30:30:ac:
                    83:f5:0d:3d:3b:51:eb:12:3d:dd:f0:77:06:06:c1:
                    3d:68:cc:26:22:1a:5f:09:44:6c:2f:7a:1d:45:f8:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AB:A0:E9:34:EA:07:7E:A3:F4:F7:72:41:19:1E:8C:74:6C:E6:87
            X509v3 Authority Key Identifier:
                keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:82:82:c3:b1:d8:ab:16:16:b5:16:a5:a1:cc:d1:27:29:10:
         ad:16:fe:e7:e8:70:cb:14:f5:ef:1a:fd:f6:4c:2f:27:62:f0:
         e8:6e:ff:15:d0:26:9f:b9:fd:f2:7b:08:45:fe:f6:e9:b5:4b:
         b2:23:a6:30:f1:d8:21:19:15:c2:48:97:7b:7d:89:e9:e7:97:
         e9:07:ee:d5:4b:5e:e9:89:16:c1:b6:c7:1b:d1:56:8e:46:33:
         0f:15:cc:74:7b:2d:06:cb:61:22:b1:7f:99:20:e8:5e:8d:1a:
         8d:af:6f:16:4f:b5:77:92:9e:b7:05:11:96:44:02:d4:94:5a:
         06:99:7c:85:1d:e9:d4:c3:8f:5e:a0:6a:54:50:7e:ab:57:be:
         4b:b5:b9:30:e6:0e:c5:51:5c:49:0c:47:1d:ef:60:73:f9:9b:
         df:9f:b4:55:6e:f9:23:10:53:12:df:54:97:bc:5d:22:db:35:
         f0:86:54:ff:22:fd:f3:d6:65:ac:9c:d0:31:99:ff:ce:4b:9c:
         3d:34:04:8c:42:c4:60:4c:2b:88:5f:c2:8e:0d:43:3d:ec:78:
         80:8f:4b:ab:b7:95:e5:fd:f8:21:26:9a:7b:25:ef:fd:d2:40:
         7d:7d:9f:43:84:15:8c:68:48:7b:f3:4a:05:fa:d8:35:de:00:
         11:70:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:22:57 2025 by rpki-client