This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
File:                     732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json)
Hash identifier:          bxAnm2dTkJqW3jrt5jx+tHy46vqtFQeaNImV0CrTl7E=
Subject key identifier:   1E:63:64:50:07:AE:32:CF:8A:53:66:C8:C7:25:36:4D:10:B1:50:71
Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3
Certificate issuer:       /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
Certificate serial:       7BF21505CFAADA6486069A94C611FFA53CA3B105
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
Manifest number:          02AC
Signing time:             Fri 05 Dec 2025 05:41:07 +0000
Manifest this update:     Fri 05 Dec 2025 05:36:07 +0000
Manifest next update:     Mon 08 Dec 2025 12:51:07 +0000
Files and hashes:         1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: i+G0wkw9eFQNHx1LqwEL98KjKHoUFaL1s8XT+aYCTOw=)
                          2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl
                          rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 12:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f2:15:05:cf:aa:da:64:86:06:9a:94:c6:11:ff:a5:3c:a3:b1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
        Validity
            Not Before: Dec  5 05:36:07 2025 GMT
            Not After : Dec  8 12:51:07 2025 GMT
        Subject: CN=1E63645007AE32CF8A5366C8C725364D10B15071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:da:06:99:e1:3e:e2:28:ee:53:2b:74:cd:
                    5a:59:fa:f8:e5:33:47:85:1d:50:22:b8:01:8f:7f:
                    75:00:fa:46:86:2d:ea:b6:b4:fd:16:7d:6a:16:9d:
                    19:9c:d6:9e:9a:ef:9f:59:ce:ec:c2:55:eb:59:37:
                    75:bf:f7:c1:c4:40:cb:84:f2:ec:dc:ff:ae:6d:b9:
                    51:86:2f:9f:9d:59:49:b6:4c:69:fd:50:39:4a:3f:
                    53:76:8b:ac:01:25:14:c9:f0:6d:12:ca:5d:fb:6a:
                    a6:27:7c:f9:59:f0:7b:d5:27:7a:bf:80:72:43:fe:
                    a0:15:64:53:c8:b1:92:36:7e:33:51:b5:04:69:7e:
                    a1:f0:ad:07:2f:38:82:c5:94:c5:ad:6a:83:fc:98:
                    df:0b:19:26:f5:37:7a:a5:83:11:a5:e3:de:ae:8b:
                    14:18:ca:94:31:cc:4f:5e:05:63:6b:67:bd:a6:19:
                    68:1a:5a:df:09:98:70:1d:08:89:d3:84:8c:a9:3e:
                    89:15:bb:36:93:3f:e2:e6:cb:5c:af:21:c1:81:96:
                    21:66:7a:a9:ca:c1:cc:2c:d6:4b:a5:16:45:99:80:
                    7a:cb:2b:05:b1:b9:fd:0a:28:ce:8e:33:e3:8c:61:
                    95:4a:d7:b0:38:77:e8:53:23:32:7b:a1:44:b6:9f:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:64:50:07:AE:32:CF:8A:53:66:C8:C7:25:36:4D:10:B1:50:71
            X509v3 Authority Key Identifier:
                keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:be:80:04:da:07:67:5f:7a:01:c7:a3:32:ca:9c:16:65:
         07:15:be:80:49:1e:42:e8:39:a5:58:88:cb:42:e9:0e:48:cb:
         f9:50:ab:ca:0e:b7:b0:c0:7b:b2:7a:95:23:49:30:fa:e7:fb:
         72:f1:92:74:a8:b1:e5:f8:21:e9:2a:90:72:97:25:67:d5:b8:
         dc:08:54:e2:82:57:b9:7f:23:26:da:11:25:8c:60:79:ab:42:
         8c:20:b5:cb:99:f4:1a:89:b1:24:d2:f6:3b:9b:c4:cc:52:3b:
         73:ca:5b:44:5d:de:dc:1f:cc:cd:9c:8c:20:72:5a:eb:74:4c:
         38:cd:b4:64:92:b4:df:a2:d3:bd:b0:b9:0a:9a:f5:b8:c1:a5:
         b3:f5:c3:bd:09:3e:f3:7a:4c:7c:e0:0e:c2:ab:9c:91:77:21:
         f7:37:d0:3f:8e:51:2b:d3:67:a8:4a:5b:52:fb:6d:17:e2:e2:
         87:be:88:36:61:20:85:75:4f:3c:37:a4:8b:af:ce:11:78:e8:
         04:f6:f2:95:ec:62:a9:4a:2f:e1:e1:b7:b9:fd:0b:72:2c:12:
         0e:93:21:af:9b:e0:db:ff:e5:44:4a:e3:b4:2f:1c:2c:6a:8f:
         74:63:57:f0:00:31:f6:4b:cb:43:39:b3:8d:62:42:fa:20:bb:
         02:54:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:41 2025 by rpki-client