This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft
File:                     7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft (raw, json)
Hash identifier:          cjH+1qohuqXoiGoe256suRb5vpapgL+QnskQUJfO9OA=
Subject key identifier:   D0:2E:DD:2D:14:AA:22:0C:1D:54:20:5C:8F:50:44:80:E6:24:E1:0F
Authority key identifier: 73:00:28:3D:3A:4E:DE:40:59:18:6C:C1:66:00:ED:DC:CB:AC:0E:02
Certificate issuer:       /CN=7300283D3A4EDE4059186CC16600EDDCCBAC0E02
Certificate serial:       265E603FB8462656B9BC31325A5AE4D1AB0BA456
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft
Manifest number:          023F
Signing time:             Sun 14 Dec 2025 20:11:27 +0000
Manifest this update:     Sun 14 Dec 2025 20:06:27 +0000
Manifest next update:     Thu 18 Dec 2025 05:57:27 +0000
Files and hashes:         1: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: xJxKPYOAWnai2gI40yrMS82i27ILu85OM8m3rrjh+EI=)
                          2: 7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl (hash: ik2ky4SXJeSyIsamzn6A0RUa/s57NMKXSEHC2n9ax7c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl
                          rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 05:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5e:60:3f:b8:46:26:56:b9:bc:31:32:5a:5a:e4:d1:ab:0b:a4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7300283D3A4EDE4059186CC16600EDDCCBAC0E02
        Validity
            Not Before: Dec 14 20:06:27 2025 GMT
            Not After : Dec 18 05:57:27 2025 GMT
        Subject: CN=D02EDD2D14AA220C1D54205C8F504480E624E10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:b2:9c:8e:c0:47:7d:f0:13:60:1a:78:f4:
                    1b:05:22:ec:55:99:44:80:d5:33:a4:58:e2:2c:14:
                    34:7a:14:c6:76:3f:19:c1:67:65:cf:e7:b4:69:58:
                    bb:5e:0b:10:f9:70:93:d3:01:67:97:f6:c8:fc:61:
                    8f:b4:13:77:e7:98:95:12:36:df:3b:98:c0:2c:b6:
                    33:37:14:2f:60:c6:54:20:7f:d9:f2:a8:95:34:8e:
                    2b:ff:61:13:82:1b:24:47:20:c9:5b:57:bb:a4:33:
                    68:3e:bc:f3:32:91:07:17:76:e2:33:4f:02:75:7c:
                    78:ab:02:59:15:17:fb:84:22:38:6d:e1:8f:03:7c:
                    58:a3:b9:1d:c4:9d:19:e0:1b:ac:37:5d:33:b8:48:
                    e4:0a:25:17:f1:d3:0d:7c:1a:d8:d4:86:bb:e7:b5:
                    85:5b:d0:ed:8b:c8:83:67:c0:58:17:2f:00:d9:d1:
                    70:09:e0:47:cd:1f:54:94:46:1b:5f:22:67:bb:a8:
                    b9:9b:78:1b:27:7b:88:c8:b7:12:29:6f:bb:af:a6:
                    42:b2:19:26:fd:ce:4d:63:09:5f:b6:e6:cd:6d:30:
                    5f:6e:ef:72:02:82:18:a5:60:db:e9:d1:e4:37:be:
                    e1:dc:79:7d:77:c4:18:8a:22:54:03:81:69:52:6e:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2E:DD:2D:14:AA:22:0C:1D:54:20:5C:8F:50:44:80:E6:24:E1:0F
            X509v3 Authority Key Identifier:
                keyid:73:00:28:3D:3A:4E:DE:40:59:18:6C:C1:66:00:ED:DC:CB:AC:0E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a7:3a:6c:c9:e7:ab:56:17:c4:77:40:1f:c0:99:0c:17:5e:
         f8:22:cc:80:e4:0d:fc:26:77:35:36:f3:51:99:d0:21:6f:67:
         1b:f1:6a:7d:8b:ef:f5:94:14:03:d5:67:db:a5:76:19:c9:d6:
         32:15:7d:bb:41:c8:1f:ca:d7:27:25:eb:0a:2e:c5:28:ed:72:
         2c:b6:36:d0:16:02:a2:1d:eb:4e:4d:8b:29:2f:a2:fc:14:2d:
         de:17:74:98:30:a3:5e:79:56:47:91:57:d3:55:2e:43:e7:1e:
         46:39:55:dc:24:18:17:bb:1c:65:7a:c6:0b:32:fb:d6:82:b9:
         89:d9:d4:98:13:71:66:d1:83:13:aa:02:b2:db:78:11:51:cf:
         3c:77:a5:fb:3b:b7:d6:59:4d:35:70:b0:19:ca:a7:3b:47:48:
         6c:38:2c:36:50:d0:04:61:9b:e7:c4:0b:5b:4b:c9:75:e7:81:
         0a:33:7b:ec:b3:fc:7b:0e:26:1c:2a:50:f1:1b:20:c6:f2:2e:
         b5:24:0b:ca:ca:51:ab:18:1c:e9:08:8e:72:1a:bb:e3:10:c0:
         be:f9:f3:b2:68:2d:18:76:8e:36:d0:44:e6:67:c6:cc:a6:11:
         d7:c7:fe:fe:15:37:3f:b0:eb:ae:58:79:5b:5f:79:c3:ba:0f:
         19:dd:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 01:10:19 2025 by rpki-client