This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
File:                     C69451771D2C519C2269EA17115B3E600E9CF809.mft (raw, json)
Hash identifier:          fi8WkBvkkCXttMkzfeH3dgI2QE+82nDMxS0eM4GmlVc=
Subject key identifier:   78:86:AB:3D:2A:62:A7:23:67:C5:76:DD:9D:84:74:3D:CA:FC:19:E0
Authority key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09
Certificate issuer:       /CN=C69451771D2C519C2269EA17115B3E600E9CF809
Certificate serial:       0F65E9805EB699DC1926561E0E4226F4A5374B75
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
Manifest number:          CC
Signing time:             Thu 18 Dec 2025 09:02:28 +0000
Manifest this update:     Thu 18 Dec 2025 08:57:28 +0000
Manifest next update:     Sun 21 Dec 2025 12:14:28 +0000
Files and hashes:         1: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: HyQIrSfaVLasp8fH2cuEU5XU64FY/TlMBq7lyZFmW5w=)
                          2: C69451771D2C519C2269EA17115B3E600E9CF809.crl (hash: XPZl/w0rvDDfgZonvpxZh4lJmmiFH8/WRQPn9ckDNvc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl
                          rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 12:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:65:e9:80:5e:b6:99:dc:19:26:56:1e:0e:42:26:f4:a5:37:4b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69451771D2C519C2269EA17115B3E600E9CF809
        Validity
            Not Before: Dec 18 08:57:28 2025 GMT
            Not After : Dec 21 12:14:28 2025 GMT
        Subject: CN=7886AB3D2A62A72367C576DD9D84743DCAFC19E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:46:0d:98:82:0a:a2:74:5e:e4:9c:50:48:
                    63:8d:08:f1:9f:d4:3a:eb:21:3a:ba:10:31:91:4c:
                    ac:ff:c5:8e:87:7d:fc:3f:75:f4:83:0f:5a:b2:c3:
                    c5:66:d3:22:90:31:ad:64:46:21:89:bf:da:d9:7c:
                    02:2a:39:d3:1c:4b:22:17:fd:1b:ac:47:4f:9e:5b:
                    e9:a3:98:fb:3e:31:ba:b1:eb:99:47:15:68:25:ec:
                    36:b0:33:4a:2e:4e:89:cd:5b:e6:7d:d9:b6:08:c5:
                    72:5d:f4:ff:93:09:5f:c3:99:41:5d:bb:47:fd:bc:
                    0a:32:2f:ee:7c:d3:7e:82:0f:bd:3d:63:39:16:1e:
                    8c:5e:24:aa:38:e0:c4:c8:a3:f6:f0:71:10:e3:17:
                    54:98:20:98:cd:e0:e3:56:34:aa:27:19:fa:de:3c:
                    c7:41:ad:9b:f4:97:65:76:b0:4b:3a:1b:fb:24:9e:
                    03:34:dc:0e:4d:f5:40:01:19:61:09:39:a9:06:81:
                    ca:04:4b:87:22:21:5d:72:d7:f6:77:c1:82:91:c6:
                    cb:78:69:0b:99:fc:ca:bf:ba:3f:d7:e3:11:1e:7c:
                    db:24:7a:85:f6:39:f8:04:74:53:ab:bf:a3:bd:bc:
                    21:52:74:4e:24:4a:cc:e4:89:fa:b9:6e:1a:f9:77:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:AB:3D:2A:62:A7:23:67:C5:76:DD:9D:84:74:3D:CA:FC:19:E0
            X509v3 Authority Key Identifier:
                keyid:C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:c0:7f:5e:db:9e:ea:68:40:7d:9a:b7:62:3b:da:29:cd:
         41:fd:1e:e7:1f:b5:de:47:5e:5c:b1:d2:68:4b:67:b2:5b:e9:
         c3:92:2d:72:75:1c:0f:99:6d:54:5f:05:14:f1:b7:09:4e:e3:
         cc:a1:c6:80:cf:d3:2c:63:d1:81:53:9c:94:59:ee:07:41:00:
         f5:e1:a6:a0:56:78:a6:a4:e2:3d:48:79:2f:97:03:57:8f:9d:
         ea:5b:2a:b1:8c:90:33:a1:98:e2:76:6a:da:bb:b0:80:0c:5d:
         74:1f:d2:82:2a:5f:93:12:1b:1c:b2:42:02:8b:6b:5d:6e:4d:
         12:a6:77:92:ad:22:fd:51:3d:3c:12:5c:e2:a1:26:43:32:e8:
         dd:0c:a3:fe:12:b1:4d:00:97:19:e1:a0:57:7b:4a:17:af:1b:
         b0:3a:c5:67:ae:27:b9:b5:7f:f9:f2:94:27:cf:d2:bb:3c:18:
         81:13:4f:d7:08:4e:d6:cc:ab:3e:42:e4:84:63:e7:ef:f5:7d:
         2f:1b:59:34:e5:8f:67:65:b3:2d:a1:9a:da:ac:7f:fb:30:3d:
         e3:93:b0:16:bb:dc:90:76:f2:a7:fd:d0:94:16:a4:ff:c8:fd:
         1f:ab:cc:76:b2:59:29:fe:14:d1:0b:7f:d6:3e:bd:09:b1:a3:
         f3:f4:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:09:20 2025 by rpki-client