This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
File:                     3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json)
Hash identifier:          ECBTWg2tkSkmSaSe9PrsZD9rwRBb26bNPRWZsOSlaY8=
Subject key identifier:   6F:44:F3:4A:B4:48:7F:40:D2:84:6D:08:DD:D9:AF:79:73:A9:DF:15
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       5246DEEFBAC1098A1906AA226B12FB49C812AF42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
Manifest number:          037F
Signing time:             Sat 20 Dec 2025 10:21:59 +0000
Manifest this update:     Sat 20 Dec 2025 10:16:59 +0000
Manifest next update:     Tue 23 Dec 2025 16:54:59 +0000
Files and hashes:         1: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: hLwBVb+TFBrxAiWAErAvsBh3vSWf3FAWNqnjXsNzPvo=)
                          2: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=)
                          3: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: jx7v0Idpebq1Ou6PCUn6oQ0kEGw/RyRx4sL+jxJLcZU=)
                          4: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: JWZBNDnWrENdctaqQmnbVevM+3EqtVlewochx0EfS+s=)
                          5: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: CbVKZtVYvVOggDO1uOKPHPfiUdMOnMjVJFDe5xCk8Yw=)
                          6: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: fOY5dkAcQph8EWJTLprRbPuleZdE/MLjzsb7GZ9f9kI=)
                          7: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: xxFYLgnOs6wDgHlT3HJi54CQjUA2KWj+T7DvpjE3DPU=)
                          8: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: 3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=)
                          9: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: weBnxCBwkaeNxkdjFOdohMOR+sXn3+vCk0UPpAqaQI8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 16:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:46:de:ef:ba:c1:09:8a:19:06:aa:22:6b:12:fb:49:c8:12:af:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Dec 20 10:16:59 2025 GMT
            Not After : Dec 23 16:54:59 2025 GMT
        Subject: CN=6F44F34AB4487F40D2846D08DDD9AF7973A9DF15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:5a:b6:a6:b0:4f:35:40:50:01:97:d6:aa:
                    76:72:1c:f2:71:8d:4f:c5:fd:df:40:43:de:52:cd:
                    c7:a7:36:73:2f:dd:9d:f2:9f:cc:fc:da:09:4b:40:
                    f2:3a:68:84:8a:6c:a0:be:56:e4:83:5f:96:bc:42:
                    ea:4b:71:4f:13:0a:2e:83:75:1e:5e:65:c9:9e:15:
                    29:39:6a:86:f3:29:95:85:dd:2c:68:cd:eb:7d:c5:
                    e2:9d:10:33:58:88:e8:e6:cf:a0:8b:c8:17:0b:97:
                    cd:7f:4c:32:b7:5f:be:07:9c:90:7e:8f:bd:a2:16:
                    b8:ba:29:c9:01:e2:a5:d2:3f:93:45:f2:31:c1:bc:
                    0b:e8:76:43:18:1a:c6:f4:56:d6:3c:2c:f8:1c:c1:
                    f6:48:9d:30:36:19:30:03:44:0b:96:d4:a6:30:82:
                    f5:43:98:7c:e0:ee:56:86:70:c8:25:45:2b:ec:87:
                    e1:05:7e:94:03:c2:cb:f9:39:43:67:6a:ce:8c:ad:
                    15:a0:51:b0:06:76:3c:c3:ab:54:16:84:be:17:e6:
                    66:d9:12:c8:52:87:51:19:4b:51:ee:4a:53:0f:90:
                    9f:ba:5b:d5:26:01:4d:85:b0:79:7b:b2:65:85:b5:
                    f2:4f:27:a1:11:b1:cf:4f:52:d3:79:b0:30:27:9f:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:F3:4A:B4:48:7F:40:D2:84:6D:08:DD:D9:AF:79:73:A9:DF:15
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:8d:29:a0:94:82:1c:73:61:46:91:0d:b2:67:5e:58:ed:
         1c:87:3f:36:46:2c:d7:33:04:f9:5b:0d:f4:28:57:72:70:95:
         61:d8:34:9d:17:ca:4e:71:29:79:ee:8b:25:70:cf:82:a8:1a:
         c8:7f:89:f3:ad:d6:e8:37:6b:74:3d:8f:24:73:68:b7:0d:7a:
         a9:fc:60:9f:96:93:4c:53:4c:b0:56:1b:21:62:e5:f5:2f:6d:
         f3:14:33:ee:5c:51:ca:fb:19:d2:d0:b0:cb:75:12:b4:82:cb:
         c3:a9:dc:52:d3:45:c7:5a:8e:e6:f1:8a:49:ee:dd:f2:9a:5c:
         25:b7:9c:02:b8:53:d3:b6:11:a1:75:c5:9f:0b:c5:96:e0:c2:
         6c:78:0f:75:c7:ee:56:9a:70:42:a6:6c:dd:cf:24:7c:3d:b0:
         ff:63:17:ac:68:c5:d0:d2:58:d8:d1:84:0a:f3:7d:b9:75:53:
         47:f5:50:ea:a3:3c:ed:f8:7d:14:79:8e:66:6c:1a:eb:46:84:
         c9:3b:5c:fb:f9:2f:84:dc:c3:7a:3b:fd:90:a7:53:d5:86:74:
         a3:8c:5f:ae:40:c5:07:67:bf:ac:b1:59:4a:00:5a:ab:b2:8c:
         64:9d:47:80:c0:63:88:34:9b:cf:87:50:69:b3:e0:3b:ad:5c:
         06:17:2d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:06:37 2025 by rpki-client