This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft
File:                     C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json)
Hash identifier:          vbHbsAxndFycHwVCy0JmU9I6OgJQVxsrthJkyiVDozs=
Subject key identifier:   6A:20:4A:C7:0C:8C:91:2C:2E:7D:8A:9F:ED:F4:A7:1A:66:47:E1:C6
Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47
Certificate issuer:       /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47
Certificate serial:       1075F07AF24983864F32ACA3FCA8A4F129975E9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft
Manifest number:          0138
Signing time:             Tue 16 Dec 2025 20:01:47 +0000
Manifest this update:     Tue 16 Dec 2025 19:56:47 +0000
Manifest next update:     Sat 20 Dec 2025 07:35:47 +0000
Files and hashes:         1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: EPZc5s6xGmEkYEwc1m25H5UKqHqXdKO9ob+h/evRrWo=)
                          2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: W4OBa8bY/rgp1jVFoSOvJbYJ6Ol5k3tCPuEB9bOwCyU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl
                          rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 07:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:f0:7a:f2:49:83:86:4f:32:ac:a3:fc:a8:a4:f1:29:97:5e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47
        Validity
            Not Before: Dec 16 19:56:47 2025 GMT
            Not After : Dec 20 07:35:47 2025 GMT
        Subject: CN=6A204AC70C8C912C2E7D8A9FEDF4A71A6647E1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:2c:92:3b:b9:b0:9c:dd:95:5e:eb:3d:69:
                    78:cc:57:a6:8d:79:b3:8d:3a:b6:3f:41:41:72:3e:
                    bd:d0:b9:8d:24:00:de:af:82:4d:e0:20:ad:b0:6f:
                    90:77:04:56:9c:10:d6:39:95:a8:2e:67:d9:2e:80:
                    9f:bc:52:e8:56:3f:4e:9e:f1:5c:12:f5:c8:12:ce:
                    ad:f8:45:80:da:82:b2:ba:3e:ae:c5:09:7e:8c:7f:
                    c9:43:60:a5:2f:c6:52:55:78:42:56:25:b2:08:66:
                    1d:94:1f:81:7c:30:a4:61:ba:38:74:40:d9:53:cb:
                    d9:83:fe:4a:e3:67:fe:9b:e5:8f:2d:62:e1:cb:11:
                    19:4a:4e:10:3f:4b:bd:6f:79:f1:2a:a9:e1:1e:a7:
                    20:8e:78:ee:f9:da:50:7a:72:1f:b4:8d:55:80:37:
                    27:4b:ce:d5:ef:cc:77:ce:ae:95:9a:2b:d0:a9:64:
                    8e:37:4f:da:b0:4c:03:75:58:25:e3:71:bc:9a:dd:
                    ba:e7:33:c3:22:38:d3:64:2c:b9:63:1d:2b:b8:c2:
                    fa:ec:c1:cd:77:28:27:2d:91:d9:c2:c7:57:8a:40:
                    53:97:41:bc:7f:88:31:ac:87:ce:02:0e:99:fc:38:
                    07:70:66:6b:09:99:5c:6c:21:95:0c:1e:d2:02:58:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:20:4A:C7:0C:8C:91:2C:2E:7D:8A:9F:ED:F4:A7:1A:66:47:E1:C6
            X509v3 Authority Key Identifier:
                keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8a:90:e2:00:cf:0c:8d:63:16:00:ad:67:6f:c2:e6:89:12:
         ee:cb:ce:7d:fb:00:22:e8:c4:db:9c:84:f9:4c:1b:a6:7e:a7:
         47:4a:e9:ae:61:d6:90:55:a0:22:a9:25:13:23:6d:b4:5a:fb:
         a7:71:05:80:5b:66:a4:bf:c2:24:ad:78:d2:b3:69:e4:30:cf:
         aa:b6:d2:f3:19:85:77:8f:69:c9:c6:cf:e0:84:f5:14:ba:6c:
         f3:0e:2c:5e:ac:8e:73:8e:39:4c:d3:b3:cc:2f:92:34:f7:13:
         6d:ea:ca:94:3a:cb:e3:95:57:19:35:f1:7c:19:6f:c8:16:49:
         b2:ad:55:9c:a7:65:d4:07:4b:4a:f3:bc:5e:3b:ac:5c:73:58:
         e1:dd:35:ee:8e:55:e4:86:db:88:97:03:1b:aa:ad:d0:e4:a6:
         c2:96:02:82:ff:66:b0:d1:34:cf:91:4b:b1:b5:b7:dc:6e:4a:
         a8:2e:99:03:b9:ca:5d:a7:2f:b1:63:85:b3:4b:d3:d5:0c:0c:
         a7:62:f8:4b:ed:32:3f:69:59:19:a4:63:19:53:e8:3a:7f:05:
         cb:62:32:99:ab:36:fc:d5:f3:06:51:e7:fe:cf:8f:75:82:7a:
         e8:2c:03:db:fa:04:b6:b7:61:54:ba:f7:66:79:d3:1b:6c:b6:
         e8:fd:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:52 2025 by rpki-client