This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
File:                     780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft (raw, json)
Hash identifier:          SRnQqntUQmpIbwl2mmD/jQcXSPnU7wwb3Z4dKn689HM=
Subject key identifier:   D2:87:33:D2:CF:42:F8:50:0C:40:A8:FC:00:15:A8:25:10:32:2D:06
Authority key identifier: 78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9
Certificate issuer:       /CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9
Certificate serial:       7545838AE09B7137135DEF87D6F2A45328EF851F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
Manifest number:          0101
Signing time:             Fri 19 Dec 2025 20:22:30 +0000
Manifest this update:     Fri 19 Dec 2025 20:17:30 +0000
Manifest next update:     Tue 23 Dec 2025 03:20:30 +0000
Files and hashes:         1: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: M+NRbpCUskaX1vYH/4jaIAMXTEk8snO9JlvCQ9TdRYk=)
                          2: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl (hash: 1UCxzG0SGADFGuwEj3dxrYbXueOftkAu8XeHntjX/fk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl
                          rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 03:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:45:83:8a:e0:9b:71:37:13:5d:ef:87:d6:f2:a4:53:28:ef:85:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9
        Validity
            Not Before: Dec 19 20:17:30 2025 GMT
            Not After : Dec 23 03:20:30 2025 GMT
        Subject: CN=D28733D2CF42F8500C40A8FC0015A82510322D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ce:c6:e7:94:bd:98:80:07:64:97:06:a9:41:
                    9e:3c:83:15:b1:a6:d9:b6:95:89:fc:12:ae:26:cf:
                    0a:7b:29:e2:f0:3a:2f:24:df:ea:7e:62:4a:d0:6e:
                    b9:2d:b8:c0:9f:0c:9b:84:e2:ec:0e:f6:8b:a3:78:
                    1c:ae:ce:46:6b:9c:74:a6:06:b7:66:3b:9b:57:9c:
                    29:27:c8:87:14:41:dd:cd:41:b0:0a:9a:a5:64:bf:
                    14:77:b3:bb:45:e7:2b:c1:91:bb:80:50:6e:c4:3d:
                    ea:66:c4:c3:a8:98:81:d4:78:e3:a3:f0:4a:ad:4f:
                    c9:f6:48:c8:04:40:d9:0f:b5:92:d1:5a:fc:fe:09:
                    8f:68:23:16:b5:be:b4:22:4a:8b:15:e8:27:44:d1:
                    f3:25:7c:37:34:f9:2d:db:16:de:22:a6:2a:aa:fe:
                    c2:21:44:5c:8f:5e:ef:3d:54:92:9b:01:e1:04:47:
                    3c:6a:f6:4f:71:0d:f0:61:f9:36:2b:3a:8d:ab:8b:
                    c9:00:5f:b6:71:08:dd:bc:1f:12:3d:7d:d4:58:13:
                    84:92:cf:eb:01:d6:ed:39:80:c8:df:5b:d0:bd:65:
                    30:83:c3:08:1c:e4:6a:0c:40:f1:36:c7:c1:44:dc:
                    97:e7:cd:f6:86:ce:5f:ea:2d:d9:e9:72:88:d8:f9:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:87:33:D2:CF:42:F8:50:0C:40:A8:FC:00:15:A8:25:10:32:2D:06
            X509v3 Authority Key Identifier:
                keyid:78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3d:96:b8:3e:ca:71:e5:5d:0c:9e:b0:25:d2:2f:8b:31:50:
         4b:02:4d:63:f6:10:46:f1:3a:6a:7d:5d:3e:89:02:2a:5b:70:
         3e:cd:0d:b9:e8:92:1d:ca:10:22:e1:e4:fb:33:7a:76:65:79:
         33:1b:65:5a:05:59:1a:ba:14:4d:ef:1e:52:61:db:cd:e2:f2:
         bf:da:7f:2f:0c:77:f0:6d:57:2d:5c:11:18:18:1a:ca:f0:2a:
         2a:5a:a8:42:55:ff:f2:7a:8d:32:8a:21:71:98:fc:5d:90:d3:
         ca:f9:8f:2e:34:0f:3b:b8:b6:b3:6b:e6:2d:29:77:b8:3d:d8:
         6c:7b:0a:66:98:c6:4b:5d:b7:28:43:c7:77:53:fc:d6:03:d8:
         eb:4f:45:99:0c:e7:43:c6:49:24:a1:e8:26:45:15:9e:2d:06:
         29:90:1b:27:16:4f:6c:e0:e2:7f:88:2d:98:65:18:9b:bd:89:
         50:0b:67:a7:e7:c4:c8:3e:43:4d:2a:11:f7:73:fc:8f:4c:ab:
         79:26:93:77:e6:29:17:a3:9c:27:24:e8:bd:34:77:43:3d:fe:
         62:28:41:35:b6:4a:9c:93:c9:cb:e7:c3:08:78:27:92:9a:4c:
         12:8c:a1:05:a9:05:6a:d7:d5:a7:ac:f9:86:b8:cc:13:3f:c8:
         fa:fd:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:13:03 2025 by rpki-client