This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
File:                     13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json)
Hash identifier:          eVi3TKLyinAM+dEVd+JhBz+SzBlebinHXhkdqCmU8qg=
Subject key identifier:   19:F9:E8:C4:7F:47:B4:F0:27:4D:E2:D9:98:ED:B4:31:54:66:8B:B0
Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79
Certificate issuer:       /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479
Certificate serial:       6ECDD24E2C892866F3EAF68EFBFFDD7A177D31D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
Manifest number:          021C
Signing time:             Fri 26 Dec 2025 05:31:21 +0000
Manifest this update:     Fri 26 Dec 2025 05:26:21 +0000
Manifest next update:     Mon 29 Dec 2025 14:58:21 +0000
Files and hashes:         1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=)
                          2: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: /uXXV/Dw9X6TJKuIshinVUQTnX0KJBssQgZgNpuHm7M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl
                          rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cd:d2:4e:2c:89:28:66:f3:ea:f6:8e:fb:ff:dd:7a:17:7d:31:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479
        Validity
            Not Before: Dec 26 05:26:21 2025 GMT
            Not After : Dec 29 14:58:21 2025 GMT
        Subject: CN=19F9E8C47F47B4F0274DE2D998EDB43154668BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:0f:9e:ac:bf:1b:6e:66:a3:98:aa:66:bf:
                    2f:b0:7f:1e:24:a5:03:36:96:84:62:be:f6:f8:26:
                    43:10:c2:d2:30:b5:d7:87:90:26:05:62:40:4e:fb:
                    04:e6:67:3e:0f:cb:03:6c:e4:95:4a:37:e2:81:09:
                    d4:2b:ed:4f:c7:83:98:97:9f:67:d8:d0:be:64:c8:
                    3f:0c:99:4f:1c:d2:32:6a:d8:af:5b:aa:12:6f:c3:
                    7b:72:22:af:55:c0:c4:01:2c:f9:25:ea:3b:b3:17:
                    3b:e5:1d:55:a6:f6:be:8d:f4:e9:1a:8b:56:ae:3a:
                    2b:dd:d1:c9:23:09:63:9d:df:f8:87:fa:5b:a9:91:
                    db:9a:b5:df:34:3d:93:ac:80:29:80:46:3b:c3:ed:
                    15:13:1e:b6:14:36:d4:7e:90:4a:9d:c4:ae:0a:e9:
                    21:e1:39:1d:b5:05:12:9f:1e:a7:2b:be:85:07:bd:
                    10:78:fe:33:70:78:ef:54:81:e9:a5:b0:2d:06:c7:
                    3b:4a:d1:dc:08:b8:31:b0:dd:1e:cd:31:71:99:ea:
                    ac:0e:90:93:84:eb:7b:29:18:a0:37:23:61:7a:d4:
                    77:61:f3:2f:84:86:dc:41:22:a7:3c:4d:20:01:ba:
                    ac:4c:ff:ac:b4:f3:1e:d0:dc:eb:03:92:b5:31:7c:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:E8:C4:7F:47:B4:F0:27:4D:E2:D9:98:ED:B4:31:54:66:8B:B0
            X509v3 Authority Key Identifier:
                keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:88:bd:b9:46:66:e6:be:d3:79:d7:0c:82:1d:65:6d:e1:
         04:f9:7f:1a:7e:e3:0b:1d:9e:cd:30:cd:03:2b:57:43:41:0e:
         27:ce:34:2a:ce:1b:dd:a9:27:7b:0a:9f:94:38:37:0f:49:27:
         f3:d2:17:a5:f9:ef:f1:aa:4d:d6:11:0b:8b:c3:c8:d3:20:4b:
         1e:27:ae:61:52:88:35:32:13:57:b2:7d:20:3d:99:17:ec:0e:
         43:9c:d0:d4:0f:dc:01:5b:54:71:68:12:7e:e2:ce:d2:66:b4:
         5e:ff:7b:2d:c0:9c:f3:04:57:77:11:13:a5:fe:4c:25:83:ca:
         bd:b9:7f:21:93:71:c5:cb:d6:82:43:67:8d:cd:7f:92:d8:a7:
         4f:2c:40:1d:f9:a3:1c:6e:15:ba:35:c8:47:7e:90:a2:ec:50:
         1c:97:e1:e2:29:70:92:00:10:2f:4e:19:07:7e:7b:97:7e:6f:
         47:73:bc:30:7f:f8:4f:fe:d3:b6:4c:95:6e:8c:04:59:02:0b:
         50:bd:ed:d5:d3:38:9f:39:51:bd:bb:36:09:bf:f1:ea:90:ca:
         dd:a3:c9:a2:91:1e:35:10:5f:5c:94:75:e8:7a:1e:25:48:57:
         52:c3:22:a7:b8:08:68:d6:2f:45:c0:5d:61:fa:a0:f4:2d:d4:
         ed:b2:4a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:28:44 2025 by rpki-client