This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft
File:                     1D80B161A8871962133619E73EBB98762953ABF1.mft (raw, json)
Hash identifier:          ocPTuREz0+A/06UfyppT4DIt4KojIGhqKzy0UZaroc4=
Subject key identifier:   CE:8A:F7:EC:49:F5:61:EE:CF:CF:5F:65:AD:E9:B0:B6:A6:34:8C:93
Authority key identifier: 1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1
Certificate issuer:       /CN=1D80B161A8871962133619E73EBB98762953ABF1
Certificate serial:       36EAC55AFD0ECE9EBBFF24C607699744AD01982D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft
Manifest number:          01DE
Signing time:             Sun 28 Dec 2025 04:42:15 +0000
Manifest this update:     Sun 28 Dec 2025 04:37:15 +0000
Manifest next update:     Wed 31 Dec 2025 14:42:15 +0000
Files and hashes:         1: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: BnxNSU7GvW8FhzJws2psMwaSALikZLf1ufA7X1GunUU=)
                          2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: JnuGg5b3r/smkXr3roy2qXM8iamIrQdBtkbqYsyBWlk=)
                          3: 1D80B161A8871962133619E73EBB98762953ABF1.crl (hash: ZRCAG3V3eZFdjkelvNDhgJwuVWRdWyyvrO455m9hwNQ=)
                          4: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: rXoDqSI1fvAdoiQWimGUY2MVnvfq9zYbOGQrUgh6KyM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl
                          rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 14:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ea:c5:5a:fd:0e:ce:9e:bb:ff:24:c6:07:69:97:44:ad:01:98:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D80B161A8871962133619E73EBB98762953ABF1
        Validity
            Not Before: Dec 28 04:37:15 2025 GMT
            Not After : Dec 31 14:42:15 2025 GMT
        Subject: CN=CE8AF7EC49F561EECFCF5F65ADE9B0B6A6348C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:9f:20:66:ed:57:e2:1d:c5:30:af:ad:e1:
                    63:e5:e8:32:4e:b5:78:3f:8d:4e:37:3b:15:5e:87:
                    b1:fd:4b:18:bb:ae:33:eb:18:f8:6b:3c:92:3a:29:
                    cb:14:eb:8b:c1:a2:17:52:68:8e:e9:29:14:6d:f0:
                    f9:e3:92:e2:d8:24:11:2d:18:ab:71:a0:df:8a:be:
                    34:99:07:f8:13:42:81:81:ea:d4:12:d9:a6:e6:13:
                    ec:6e:06:00:19:0e:39:27:b2:03:f0:78:14:92:24:
                    46:15:1d:1c:72:a0:a2:2c:c2:73:50:9e:c5:8e:d6:
                    21:aa:84:e0:8b:13:e6:fc:df:71:2d:82:6b:cd:a8:
                    6c:a5:12:22:45:70:01:e2:ad:b4:30:50:71:49:bb:
                    e6:61:20:97:4f:d6:23:37:d6:cd:60:95:43:bf:45:
                    c0:b1:15:70:51:03:e2:78:df:40:a4:c4:8f:e7:c2:
                    ff:8d:e3:d9:9f:13:41:7b:74:c2:37:3e:25:af:f4:
                    21:db:33:54:0b:5e:12:53:36:6d:e2:73:b7:ec:08:
                    fa:f8:0e:f2:63:8d:1a:e4:a7:99:c3:7d:05:33:58:
                    9c:9d:40:82:4a:a8:08:7a:65:b1:1c:c6:6d:ba:e8:
                    da:54:9d:5e:bc:67:18:a8:59:28:96:20:dc:87:de:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8A:F7:EC:49:F5:61:EE:CF:CF:5F:65:AD:E9:B0:B6:A6:34:8C:93
            X509v3 Authority Key Identifier:
                keyid:1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d2:af:52:c9:b3:83:a2:43:e9:3d:90:ec:cc:57:96:61:4c:
         4e:83:21:6c:c4:d8:e4:85:83:42:c1:54:39:b9:cc:61:cd:1a:
         4b:cf:fd:56:18:f1:f8:24:aa:17:35:58:aa:45:29:fa:0f:23:
         50:4b:f8:96:d4:26:a7:5b:13:65:99:80:20:e9:e2:0b:84:4d:
         93:72:7f:dc:cf:91:3f:94:3c:20:c6:fd:a7:7a:80:9f:95:f7:
         cf:b2:2d:7d:6e:4c:96:81:08:58:23:1f:73:4c:b6:21:f4:e5:
         3a:02:7c:7f:a9:45:72:78:8a:93:3e:48:c0:06:bd:a1:ba:a4:
         20:39:f6:28:92:1d:e6:3e:9e:08:61:98:e9:9c:f0:d2:77:fe:
         af:83:d0:50:5c:30:a2:d3:dc:c1:1f:55:69:b2:0c:52:ff:b5:
         77:ea:3e:ba:ca:cf:b1:a1:b6:ee:ab:87:1e:2a:28:ac:dd:41:
         5b:6f:7f:be:44:d2:62:23:98:a4:05:b5:d7:96:5c:6b:39:b9:
         c2:ab:f9:2c:43:f3:2c:87:ae:a3:ea:c9:d3:e7:24:f5:67:14:
         09:3b:2d:15:af:2b:83:34:e0:00:7f:b3:c3:47:15:b5:7f:79:
         69:fa:0a:d2:68:33:ab:53:35:68:d1:bc:14:47:cb:26:f9:bc:
         b0:00:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 05:24:14 2025 by rpki-client