This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
File:                     13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json)
Hash identifier:          OeeewGzExlehqeLwkQw/zqIeOYhARfDfM6AwXmbi/SQ=
Subject key identifier:   DE:DE:AA:25:65:5A:E3:DE:9D:D9:D2:E2:95:E4:93:AD:B3:9F:A8:5F
Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
Certificate issuer:       /CN=13697C4A24DCE77089F778CD506D620711B4472B
Certificate serial:       179DBA0C4EC77ED5A5B72757EDCE816DBC1B766A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
Manifest number:          0378
Signing time:             Mon 01 Dec 2025 18:00:51 +0000
Manifest this update:     Mon 01 Dec 2025 17:55:51 +0000
Manifest next update:     Thu 04 Dec 2025 23:03:51 +0000
Files and hashes:         1: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: z8SiNmSQZoeivn4D0nJbpNuNEHST/FILH3X+hwxtGs8=)
                          2: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: OaYN9F7Ro7W56q+ls2T1VHXeadTTjgnnYsVEGgZUhRE=)
                          3: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: ao6jBDhZ5nyavD0BBMcIBlug6CiZKzNCOPIYJqPFbKA=)
                          4: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: cgQmKFRKJxdktyV9rczfIpoHQDdH6UPgKR9KvlttEAM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
                          rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 23:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9d:ba:0c:4e:c7:7e:d5:a5:b7:27:57:ed:ce:81:6d:bc:1b:76:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B
        Validity
            Not Before: Dec  1 17:55:51 2025 GMT
            Not After : Dec  4 23:03:51 2025 GMT
        Subject: CN=DEDEAA25655AE3DE9DD9D2E295E493ADB39FA85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:9f:19:8a:75:c8:71:6c:63:34:5e:4a:88:
                    c9:81:67:db:ad:fc:43:ea:fe:72:0f:20:90:d7:0a:
                    66:cf:92:ef:88:e6:80:6e:14:bf:b4:92:78:63:14:
                    76:f5:57:f3:62:f0:5d:fc:d5:d2:8a:1d:c6:89:68:
                    9a:31:31:15:ae:07:0f:7c:fa:55:04:a0:f2:c2:63:
                    ac:05:87:e8:b9:92:56:d8:cc:4f:d7:90:92:76:16:
                    75:e3:f9:18:18:6f:6f:8a:89:52:03:0b:e2:cd:4f:
                    90:b4:e1:5a:68:f7:33:09:c9:2b:62:32:a9:a3:7c:
                    c9:0c:82:13:f3:3e:26:27:72:83:23:63:6b:7e:ee:
                    48:e2:3b:c3:3d:c3:da:b3:08:98:c5:bc:e8:50:dd:
                    9a:50:e5:78:31:b9:26:7b:e6:35:11:c3:75:ae:19:
                    4f:df:ab:2d:cc:4e:54:d6:d3:a8:d2:47:80:e7:da:
                    41:f0:0c:6f:31:03:6f:30:9e:13:39:55:ac:e6:58:
                    b4:55:75:ec:5a:ea:dc:58:c2:13:a2:78:69:b9:06:
                    78:21:2c:86:4b:c6:ab:d5:5c:6d:19:a9:f2:07:7c:
                    7e:95:08:62:21:f4:85:d8:d5:10:af:4c:9f:af:a8:
                    10:66:52:1b:49:9b:8c:00:51:62:99:4e:28:ea:d7:
                    ae:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DE:AA:25:65:5A:E3:DE:9D:D9:D2:E2:95:E4:93:AD:B3:9F:A8:5F
            X509v3 Authority Key Identifier:
                keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:84:06:b8:4a:f2:aa:14:81:b5:8a:5f:62:19:5a:e9:3b:
         3e:69:2f:00:95:e9:f7:e2:8a:41:cb:48:7c:d4:f6:59:9d:d9:
         e3:61:96:05:c6:49:69:d8:42:ed:ae:67:42:96:c5:1a:98:e8:
         fe:4a:09:bb:51:86:95:7b:ac:db:43:3c:95:48:7b:26:f7:03:
         f3:b6:c3:60:d4:ca:b8:9b:22:8c:bb:a6:b1:11:b9:46:13:f6:
         fb:d2:b1:06:1c:6f:57:f1:ba:83:72:6c:8c:23:e5:b8:9b:71:
         71:6c:7f:45:ed:63:1d:49:d7:66:04:0b:43:9a:9c:90:bd:f0:
         70:8a:bd:7d:fd:a8:16:43:c9:18:c1:f5:a0:f9:0f:e9:e6:38:
         ee:60:6a:23:82:82:b4:1c:70:78:ea:7b:3b:98:dc:e2:3d:13:
         72:6c:c9:79:0b:e8:4d:c3:16:a4:3c:45:56:fd:f9:b1:0e:2b:
         d9:63:29:32:3a:08:ef:cb:7d:e1:ff:3f:06:f1:48:8b:b7:2e:
         4f:33:fb:09:da:f8:65:8e:fe:81:b1:bc:94:72:b7:8d:28:ac:
         9a:f5:ef:cc:97:d1:9e:f2:6a:db:5d:69:7e:a7:63:52:fd:3e:
         66:81:48:7d:be:b1:57:02:ef:19:12:d8:48:f9:4d:29:5e:75:
         d0:32:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:33 2025 by rpki-client