This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
File:                     312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json)
Hash identifier:          LQBtX8duyAhuIb7JoP/LIeSV8fO2UacWpXNOBrqwA68=
Subject key identifier:   8E:C2:20:FF:27:F0:B2:C5:5E:A9:F1:46:47:27:C0:1B:72:EF:84:3E
Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4
Certificate issuer:       /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4
Certificate serial:       29E6C749D864817D81E42E91D1611C89784DCD13
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
Manifest number:          015B
Signing time:             Wed 31 Dec 2025 13:52:28 +0000
Manifest this update:     Wed 31 Dec 2025 13:47:28 +0000
Manifest next update:     Sun 04 Jan 2026 01:02:28 +0000
Files and hashes:         1: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: QVyI5ohSvHLX3Y/snlbiMpyGbl8Ioo26V4OReeUxxpo=)
                          2: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Via8twfYiTOYYUS4MnDOw8zvlMb40Ue2urMBm24mYnU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl
                          rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e6:c7:49:d8:64:81:7d:81:e4:2e:91:d1:61:1c:89:78:4d:cd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4
        Validity
            Not Before: Dec 31 13:47:28 2025 GMT
            Not After : Jan  4 01:02:28 2026 GMT
        Subject: CN=8EC220FF27F0B2C55EA9F1464727C01B72EF843E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:f0:5c:65:fd:da:bb:b9:93:e6:d5:a5:c2:
                    86:61:1d:97:d2:7f:62:d5:36:54:34:e3:1c:f4:d2:
                    9c:85:51:df:a0:2b:fb:09:81:91:54:e6:8a:6e:1f:
                    46:70:9e:19:15:cb:8c:53:c7:80:62:53:18:0e:4a:
                    88:48:65:48:91:bb:b1:a1:26:43:3c:5d:26:55:c7:
                    cd:64:88:9b:d3:8b:ad:95:25:af:f9:85:aa:0e:55:
                    ad:c1:11:25:b6:30:62:f5:76:cd:da:f3:a5:a3:f9:
                    66:cd:43:04:67:f3:25:fd:d9:6a:53:ff:bc:f3:f9:
                    ef:78:fe:fc:c1:59:ee:7c:ff:15:0f:b8:af:cb:33:
                    4c:2d:5a:12:37:bc:fb:80:1e:1f:23:36:27:70:8e:
                    b9:a9:63:18:bf:8f:9f:ac:37:f2:bb:13:68:a1:51:
                    b0:50:23:e7:96:10:8c:ec:2b:45:b6:ba:e2:1d:6e:
                    6b:5b:cd:b2:6c:ca:00:82:e5:86:b1:31:2c:6c:8d:
                    06:80:6e:d5:3c:c2:51:61:7f:f2:44:eb:29:8b:96:
                    5e:b6:db:f1:cb:e4:0e:2f:27:b4:fd:eb:1e:60:ca:
                    f0:be:59:49:e7:01:78:16:ba:5d:af:95:63:35:46:
                    1a:50:e8:f9:26:8b:68:1a:6c:e8:6e:56:25:55:8c:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C2:20:FF:27:F0:B2:C5:5E:A9:F1:46:47:27:C0:1B:72:EF:84:3E
            X509v3 Authority Key Identifier:
                keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:03:b0:49:aa:d1:dd:73:50:82:fc:f9:1a:97:14:a0:7f:
         7d:f3:7c:e0:22:31:ba:42:6c:9e:93:a6:17:8a:b6:0c:03:f3:
         97:4b:c3:32:9e:52:04:10:a9:ee:9c:ea:42:2c:35:81:76:48:
         29:71:9c:b0:fa:ea:61:2f:68:ba:b9:09:64:77:0e:98:4a:ce:
         9b:75:90:69:a7:72:67:23:04:67:53:51:e0:f4:9d:a3:fb:10:
         3b:9b:bf:4c:78:25:70:50:92:95:4c:32:85:e6:9b:63:8a:bd:
         66:3a:58:20:51:97:2f:14:ff:7d:18:b7:8f:c8:66:df:9f:c5:
         5e:99:34:5b:3d:38:0d:67:01:74:46:02:9b:43:c1:24:03:5c:
         10:c7:82:3d:f2:7d:a4:a7:af:f9:b8:7c:a8:81:af:d5:e9:32:
         8b:a1:8e:7f:9c:bf:2d:cd:58:93:b8:e9:64:ba:a5:d8:e4:4d:
         cb:2e:9d:a9:c2:3b:00:53:fe:73:76:8e:88:f6:33:00:b1:92:
         7a:a9:32:9f:5e:98:86:31:6d:b1:a4:15:56:7b:8e:30:a8:85:
         a7:06:15:6b:88:41:85:6a:33:bc:d8:4f:12:e5:2b:44:15:f8:
         8c:a3:33:22:52:9e:57:2b:54:ad:76:17:e0:4c:93:21:7b:be:
         fa:49:59:91
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKebHSdhkgX2B5C6R0WEciXhNzRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5
M0RBRThCNDAeFw0yNTEyMzExMzQ3MjhaFw0yNjAxMDQwMTAyMjhaMDMxMTAvBgNV
BAMTKDhFQzIyMEZGMjdGMEIyQzU1RUE5RjE0NjQ3MjdDMDFCNzJFRjg0M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfg/BcZf3au7mT5tWlwoZhHZfS
f2LVNlQ04xz00pyFUd+gK/sJgZFU5opuH0ZwnhkVy4xTx4BiUxgOSohIZUiRu7Gh
JkM8XSZVx81kiJvTi62VJa/5haoOVa3BESW2MGL1ds3a86Wj+WbNQwRn8yX92WpT
/7zz+e94/vzBWe58/xUPuK/LM0wtWhI3vPuAHh8jNidwjrmpYxi/j5+sN/K7E2ih
UbBQI+eWEIzsK0W2uuIdbmtbzbJsygCC5YaxMSxsjQaAbtU8wlFhf/JE6ymLll62
2/HL5A4vJ7T96x5gyvC+WUnnAXgWul2vlWM1RhpQ6Pkmi2gabOhuViVVjIPJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjsIg/yfwssVeqfFGRyfAG3LvhD4wHwYDVR0j
BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw
QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB
RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2
ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw
QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABSgA7BJqtHdc1CC/PkalxSgf33zfOAiMbpC
bJ6TpheKtgwD85dLwzKeUgQQqe6c6kIsNYF2SClxnLD66mEvaLq5CWR3DphKzpt1
kGmncmcjBGdTUeD0naP7EDubv0x4JXBQkpVMMoXmm2OKvWY6WCBRly8U/30Yt4/I
Zt+fxV6ZNFs9OA1nAXRGAptDwSQDXBDHgj3yfaSnr/m4fKiBr9XpMouhjn+cvy3N
WJO46WS6pdjkTcsunanCOwBT/nN2joj2MwCxknqpMp9emIYxbbGkFVZ7jjCohacG
FWuIQYVqM7zYTxLlK0QV+IyjMyJSnlcrVK12F+BMkyF7vvpJWZE=
-----END CERTIFICATE-----
Generated at Wed Dec 31 21:06:58 2025 by rpki-client