This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
File:                     3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json)
Hash identifier:          Qa7DCrifcmi8P9xh7jUE3aHpTLAsjXiYYVcopkEDCtM=
Subject key identifier:   92:EC:08:78:8C:50:DF:F9:BA:21:66:83:08:88:0A:A4:86:0B:17:42
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Certificate issuer:       /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial:       3AEDB3CBC02F7537085CF848E118569A67AEFF64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
Manifest number:          01E0
Signing time:             Sat 13 Dec 2025 16:50:44 +0000
Manifest this update:     Sat 13 Dec 2025 16:45:44 +0000
Manifest next update:     Wed 17 Dec 2025 01:31:44 +0000
Files and hashes:         1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=)
                          2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: 9H02pQHTLpCZI4t06L+t8QzsyKs5ACMz+Hbvzcz5z1s=)
                          3: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
                          rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 13:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ed:b3:cb:c0:2f:75:37:08:5c:f8:48:e1:18:56:9a:67:ae:ff:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
        Validity
            Not Before: Dec 13 16:45:44 2025 GMT
            Not After : Dec 17 01:31:44 2025 GMT
        Subject: CN=92EC08788C50DFF9BA21668308880AA4860B1742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:4a:17:b2:d4:e2:97:83:56:5b:1b:8a:13:
                    d8:15:ce:26:e1:79:ae:a4:14:a1:00:fb:4b:1b:e6:
                    a6:d8:4b:9f:9a:5d:24:a0:b9:75:da:c8:87:c8:ed:
                    d4:40:4a:66:40:6c:b1:34:8e:4f:ea:ba:e0:9d:f6:
                    25:65:7a:54:80:ff:59:e7:03:a2:15:4d:d7:88:32:
                    ac:12:1d:21:e8:f3:30:5c:2e:a4:be:a1:7a:a6:db:
                    91:42:b9:0c:b5:bd:da:d3:51:18:11:8f:92:c2:51:
                    95:19:ba:13:0a:6e:45:66:3c:aa:40:15:f6:e8:a0:
                    54:e2:ab:ec:a9:1f:6a:19:a2:39:88:d4:a4:47:ab:
                    bb:4d:f8:db:28:2d:29:eb:ea:ce:53:46:49:cb:af:
                    79:b8:69:e1:a3:87:65:0f:4d:8a:09:5b:8f:38:1c:
                    1d:54:2c:de:eb:b7:a4:eb:c4:aa:4f:bd:7b:e0:17:
                    6c:8c:d6:9d:a1:98:b1:a9:5e:2c:2a:2c:f2:21:b3:
                    26:c5:32:e3:ab:ad:60:ff:a4:c5:ec:cc:7e:27:a4:
                    06:3e:51:64:a7:e9:52:ec:2b:ca:9d:62:43:c5:6b:
                    ff:0d:34:6d:45:91:0c:09:eb:9a:7b:73:1a:b6:9a:
                    51:72:58:79:2b:19:01:7d:5e:aa:62:f8:9b:42:c8:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EC:08:78:8C:50:DF:F9:BA:21:66:83:08:88:0A:A4:86:0B:17:42
            X509v3 Authority Key Identifier:
                keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:84:69:7c:92:6e:da:81:fa:e5:de:b8:f3:7b:c2:11:a3:bc:
         b1:be:a5:67:c3:c7:33:04:23:0d:92:37:e4:86:85:46:da:c6:
         96:f4:c0:88:d3:1a:31:d7:8d:81:dc:c1:1e:67:d1:2a:2b:53:
         0a:d4:79:c4:73:b5:6e:09:98:fb:7e:72:58:1d:36:24:12:3b:
         05:df:4a:90:2d:ec:95:13:93:e0:69:34:1e:b8:10:51:4b:22:
         77:8c:5f:18:4b:4b:63:20:b7:14:64:41:42:ce:9f:2d:b2:5b:
         c0:0a:67:82:0b:58:4f:30:ec:42:78:6b:b6:2b:c7:a8:09:d7:
         4d:52:5a:9e:36:82:05:e4:e2:84:a7:7c:5b:da:4a:22:df:67:
         85:b0:92:1b:c4:85:80:4f:5b:20:8b:17:75:96:c1:b6:cd:28:
         00:b9:03:9a:2a:9a:7a:54:c6:16:ba:c4:b3:7b:2d:ad:dc:4d:
         5e:11:8d:9e:44:7d:8b:08:26:a6:25:2d:e5:0b:fa:55:df:fa:
         7d:12:9c:7b:11:31:d7:33:8d:72:d0:4d:02:97:a9:96:e4:f8:
         1e:68:20:db:4b:1d:69:bf:65:00:ab:e2:0a:9d:0b:94:c5:e1:
         53:c3:6a:8a:5e:f7:e8:73:ca:30:8a:d6:80:23:95:6b:5b:b3:
         36:a0:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:51:03 2025 by rpki-client