This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/73D30A13FBA67782025971B109550DC3C504AC05.mft
File:                     73D30A13FBA67782025971B109550DC3C504AC05.mft (raw, json)
Hash identifier:          1mux2/mDteBI4o/sG1DyEgxSm2uflPEzLBagMg4Zfn4=
Subject key identifier:   E2:66:A2:9C:DA:DB:99:92:6E:87:96:CB:9E:CF:01:8D:15:DA:6B:68
Authority key identifier: 73:D3:0A:13:FB:A6:77:82:02:59:71:B1:09:55:0D:C3:C5:04:AC:05
Certificate issuer:       /CN=73D30A13FBA67782025971B109550DC3C504AC05
Certificate serial:       201A9C524E6E60546BCFA4C604048455DB83AF55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73D30A13FBA67782025971B109550DC3C504AC05.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/73D30A13FBA67782025971B109550DC3C504AC05.mft
Manifest number:          0233
Signing time:             Tue 16 Dec 2025 16:31:55 +0000
Manifest this update:     Tue 16 Dec 2025 16:26:55 +0000
Manifest next update:     Sat 20 Dec 2025 03:38:55 +0000
Files and hashes:         1: 3130332e3138312e3235342e302f32332d3234203d3e20313431313435.roa (hash: XWruzgQVSQBN04mR23ZtNlXm9MvZJofKndkY8DIzNM8=)
                          2: 73D30A13FBA67782025971B109550DC3C504AC05.crl (hash: NtLf9Lo66nr6wV6jkYW6cVjOiA6HWxykC4tjm5nn4DY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/73D30A13FBA67782025971B109550DC3C504AC05.crl
                          rsync://repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/73D30A13FBA67782025971B109550DC3C504AC05.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73D30A13FBA67782025971B109550DC3C504AC05.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 03:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:9c:52:4e:6e:60:54:6b:cf:a4:c6:04:04:84:55:db:83:af:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D30A13FBA67782025971B109550DC3C504AC05
        Validity
            Not Before: Dec 16 16:26:55 2025 GMT
            Not After : Dec 20 03:38:55 2025 GMT
        Subject: CN=E266A29CDADB99926E8796CB9ECF018D15DA6B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:50:de:a6:06:68:e9:ec:b9:6a:68:60:f3:
                    a2:a3:97:2f:e4:cb:e5:7d:5d:dd:1c:9f:ee:ad:fa:
                    d8:60:07:6d:b9:a8:02:b1:d4:ef:22:b8:46:b2:1f:
                    13:43:25:4e:8c:0a:c4:e3:20:97:0a:0d:50:e0:1a:
                    62:23:83:f9:1a:8a:be:f4:13:f0:ee:1d:ee:0d:50:
                    9c:98:be:cd:4a:79:b5:21:f7:86:4e:04:90:c8:1e:
                    41:36:79:bb:c2:b8:13:94:6f:07:37:0e:90:4c:6e:
                    5f:eb:d3:03:78:b0:58:92:11:ae:5f:dc:02:6a:b9:
                    16:d1:8c:d3:86:64:c1:85:ae:7f:97:a0:a8:73:ce:
                    ec:68:9c:a3:8c:f9:26:e6:94:8e:12:38:c7:11:35:
                    5a:17:85:e4:61:8c:1a:8d:f9:dd:b7:3c:40:27:ff:
                    fb:4f:ea:bb:88:17:fe:b3:6e:6d:f0:0b:ec:86:7d:
                    9f:14:13:0e:9f:9e:f4:79:0d:57:22:a0:54:03:b5:
                    22:c5:c9:10:3c:8b:17:50:46:fb:93:e9:0c:1f:13:
                    31:b0:92:54:5b:e2:0e:de:62:ea:80:6d:d3:18:81:
                    27:9d:35:da:9b:27:88:57:d6:40:e3:17:97:0f:e2:
                    1c:ce:ef:b3:79:24:64:bb:ca:92:e5:d3:53:49:d2:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:66:A2:9C:DA:DB:99:92:6E:87:96:CB:9E:CF:01:8D:15:DA:6B:68
            X509v3 Authority Key Identifier:
                keyid:73:D3:0A:13:FB:A6:77:82:02:59:71:B1:09:55:0D:C3:C5:04:AC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/73D30A13FBA67782025971B109550DC3C504AC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73D30A13FBA67782025971B109550DC3C504AC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/73D30A13FBA67782025971B109550DC3C504AC05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:66:db:bb:d9:f8:26:72:3b:e0:00:74:24:9d:df:0f:8a:
         6b:db:58:cf:0c:58:54:2a:e9:b8:5d:48:a7:02:d9:4a:6a:17:
         fb:b0:d4:86:dd:53:6a:bc:fe:c1:bf:82:4e:9f:5e:27:1a:a7:
         68:85:32:39:fa:a0:b4:8f:fd:b2:6c:79:4c:d9:b6:86:35:3a:
         90:f0:ad:ac:37:9d:8b:8f:56:8f:4e:3b:99:16:91:3d:c0:7d:
         b2:0b:1c:7e:be:7b:04:09:bb:38:ef:85:74:1f:63:8c:92:c9:
         7d:e6:cd:ed:bf:87:09:82:2b:d7:2d:09:b1:f0:6a:2f:fe:aa:
         a4:24:48:d8:02:ad:d5:10:a9:75:a0:8d:9e:82:3d:7a:c0:f6:
         4e:5d:78:22:83:a2:b4:7a:e4:98:14:6b:27:20:d8:0e:90:40:
         6b:7d:05:db:02:f5:0f:55:ac:97:25:4b:e5:30:ae:12:66:de:
         bf:25:76:39:42:9d:ab:1d:4c:f0:53:2d:eb:40:4b:2f:df:5b:
         c5:e0:82:71:bb:df:6e:2f:7d:51:a4:47:e9:9b:ae:1a:55:4e:
         a8:c4:fa:48:d8:67:c4:b6:a0:af:ab:e8:af:4d:40:da:00:54:
         3f:af:dc:11:84:6a:33:51:92:59:74:43:7c:5d:c0:e8:81:a7:
         10:43:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 11:21:19 2025 by rpki-client