This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
File:                     781285AE1A8C595D354913D0B93F6982FCDFD898.mft (raw, json)
Hash identifier:          6bJ2Hsx+c7PLGLk8i6kNr6605y4Sy3YrRWM2DpwNI/4=
Subject key identifier:   F1:91:0F:B8:68:73:67:FC:8C:BC:78:BA:A0:BA:79:A3:0E:08:3F:1A
Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
Certificate issuer:       /CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Certificate serial:       0103534DD3F5C5110CB1E314526935A975DEC350
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
Manifest number:          01CE
Signing time:             Thu 18 Dec 2025 00:21:15 +0000
Manifest this update:     Thu 18 Dec 2025 00:16:15 +0000
Manifest next update:     Sun 21 Dec 2025 02:12:15 +0000
Files and hashes:         1: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: 2BdVqKJM7wkCXb7z3xWM42z8nq2M+ZXCEKBrPXEyNn4=)
                          2: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: rVykKz8Sijcwgrjh36jl66i5jYhje07nNSzwkGxxcIo=)
                          3: 781285AE1A8C595D354913D0B93F6982FCDFD898.crl (hash: PfTPtLbDtqKu8I4GFxMR9P75rJ8EmyefunsshWHNnhw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl
                          rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 02:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:03:53:4d:d3:f5:c5:11:0c:b1:e3:14:52:69:35:a9:75:de:c3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898
        Validity
            Not Before: Dec 18 00:16:15 2025 GMT
            Not After : Dec 21 02:12:15 2025 GMT
        Subject: CN=F1910FB8687367FC8CBC78BAA0BA79A30E083F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0b:1c:37:a6:e9:23:67:0c:7e:7d:e3:20:04:
                    65:0f:76:71:48:76:e4:a2:69:d2:6b:3b:21:8b:5d:
                    a5:bc:f0:0c:06:07:3d:16:7e:32:77:22:ff:6f:61:
                    b4:6f:56:c1:b7:56:db:19:19:d8:a5:61:98:e7:9a:
                    fa:4e:0a:c6:7d:66:34:97:4b:06:fd:ca:a2:31:36:
                    7f:ed:17:6b:bd:ca:fe:67:73:64:34:de:ef:03:3d:
                    0a:b0:d6:de:dd:80:92:3f:0d:92:22:ba:e6:ba:48:
                    2c:fe:51:93:3d:bd:9e:6b:82:b6:c5:66:00:1a:e7:
                    5a:dd:eb:1a:c1:6e:b6:80:e5:c2:3b:b9:4f:82:5a:
                    8a:7f:b7:c6:1d:de:a7:94:57:d9:9d:01:1f:22:68:
                    ac:23:83:d7:85:49:e9:6c:fb:38:bf:91:c1:a9:d7:
                    5a:f9:89:0a:f8:27:8c:e8:0b:96:a0:c0:cf:5f:11:
                    ef:ec:6a:23:f5:fd:9d:6b:9b:4d:df:7e:40:9a:1c:
                    a8:56:f9:ba:3e:40:d8:ce:79:cb:aa:f7:b6:e9:d4:
                    b3:de:dc:9e:f8:71:f9:14:0d:1b:90:41:2c:69:f2:
                    42:44:2b:96:36:98:db:ce:0d:47:7e:1d:91:57:ed:
                    ef:c9:49:2e:b8:bb:76:fd:52:d0:2c:84:2c:f1:8d:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:0F:B8:68:73:67:FC:8C:BC:78:BA:A0:BA:79:A3:0E:08:3F:1A
            X509v3 Authority Key Identifier:
                keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:73:12:63:26:4a:be:4b:ab:fa:4d:99:f8:e6:cd:fe:d7:8f:
         4b:00:9a:76:2b:99:37:a2:fc:0c:bf:16:16:92:f9:cd:80:2a:
         d5:ef:64:65:51:40:12:16:4f:73:4e:d5:f5:d9:06:41:cf:11:
         fa:c8:75:89:fa:4c:9e:d1:a5:b9:59:be:6c:3f:6b:2c:f8:48:
         02:c4:ee:15:33:b5:96:76:36:77:ea:8e:df:f3:93:a9:54:64:
         4e:2a:ba:b3:b3:c2:7d:29:31:9e:03:13:a4:c2:78:d3:91:08:
         04:3b:fc:db:5b:b8:00:62:f0:f5:98:84:10:15:1e:6a:3c:02:
         45:4c:0a:4a:08:72:d7:e0:3a:82:ed:0b:b6:3f:bc:32:91:e9:
         ed:da:32:58:41:86:bd:3d:81:65:b8:1a:a8:19:ac:e9:cb:51:
         aa:e3:e8:3d:69:9e:44:b5:8a:78:8b:7b:c9:0a:f6:e3:6f:14:
         c1:5d:f6:7f:5b:0d:e7:70:b7:b9:cc:b0:ba:73:59:04:96:87:
         d9:aa:2f:78:c8:43:9f:ea:94:0a:75:2c:48:10:07:65:da:67:
         bd:de:98:da:9a:d9:3a:1a:4a:b1:f9:c5:be:3a:14:d9:31:ef:
         77:03:2f:46:1b:70:37:ac:c8:62:d7:29:2d:fb:01:6f:43:17:
         55:5e:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:33 2025 by rpki-client