This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft
File:                     18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json)
Hash identifier:          yBLAIweg40ubOuxb6l1ebuKg6Uop81rlb+bkyU0vKMI=
Subject key identifier:   FD:6A:56:1E:A2:16:DB:45:12:86:87:53:71:04:A9:42:7B:E3:03:B0
Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4
Certificate issuer:       /CN=18501FBD8586A1409C33F07377587F8C015DAFF4
Certificate serial:       474154E5D6EE4D373CC35BBD5F3EF4322FC63953
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft
Manifest number:          018E
Signing time:             Fri 05 Dec 2025 02:42:13 +0000
Manifest this update:     Fri 05 Dec 2025 02:37:13 +0000
Manifest next update:     Mon 08 Dec 2025 04:18:13 +0000
Files and hashes:         1: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: chT3sgzcbIgOEUDbSYeQpaPME9xtowWzjj8PRhplgFo=)
                          2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl
                          rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 04:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:41:54:e5:d6:ee:4d:37:3c:c3:5b:bd:5f:3e:f4:32:2f:c6:39:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4
        Validity
            Not Before: Dec  5 02:37:13 2025 GMT
            Not After : Dec  8 04:18:13 2025 GMT
        Subject: CN=FD6A561EA216DB45128687537104A9427BE303B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:ae:79:00:80:3c:e1:c8:2a:41:bb:72:a2:
                    17:7d:fb:18:00:91:da:eb:a6:5d:ea:cd:d9:d4:d7:
                    28:35:21:19:bd:93:2a:8c:27:78:cf:87:d2:25:36:
                    a8:07:a7:4e:2d:e6:a4:7a:66:48:b6:04:31:f6:9d:
                    81:f5:59:dd:69:a6:ed:a8:39:ff:b1:b2:c4:67:14:
                    be:75:22:24:48:aa:51:ae:09:56:45:c9:c5:e1:73:
                    da:bc:ba:6c:f1:0e:3f:d2:c9:6c:a0:68:89:4d:01:
                    09:1a:5b:b9:63:9f:cd:c3:22:1b:e4:ba:f4:23:bd:
                    7e:6a:58:83:f9:42:d8:ec:98:cd:dc:65:98:94:c3:
                    42:9d:d7:0e:e3:7e:1a:53:57:00:b5:dc:ef:83:63:
                    d9:af:8b:46:58:de:e5:e6:35:3f:f9:ed:13:4d:88:
                    3f:ec:9b:22:6f:12:a8:e8:f5:97:f2:83:ef:7c:56:
                    7e:06:89:0d:ef:f6:34:24:40:1f:ba:ae:70:31:df:
                    cc:3d:bd:e0:b2:36:cd:39:b5:e2:14:6e:33:6e:68:
                    d7:c8:f6:25:9e:97:ba:2d:db:a7:99:ee:4f:2e:09:
                    9e:b5:b8:99:0d:43:05:41:19:ac:84:95:73:02:c8:
                    b7:09:2f:02:ce:2a:e2:19:01:5d:9c:e6:ef:5a:d5:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6A:56:1E:A2:16:DB:45:12:86:87:53:71:04:A9:42:7B:E3:03:B0
            X509v3 Authority Key Identifier:
                keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4a:99:a1:3e:6b:93:a0:e8:77:29:51:d9:8c:5b:78:62:57:
         41:c1:a6:ce:a8:7d:b5:9f:16:42:52:86:56:92:78:31:81:d1:
         50:1a:76:ca:fa:fd:8a:fd:fa:3a:b0:f2:28:d2:fd:ef:4e:59:
         0e:df:4e:70:5a:a7:89:e4:ee:60:b4:d2:dd:98:90:cb:27:c5:
         3d:64:bd:8d:25:f1:96:71:55:69:7d:b7:0e:b2:a8:7f:dc:16:
         1d:d7:0f:f9:d0:f9:76:67:57:a0:5c:8c:12:8c:67:96:18:c6:
         ae:1d:25:29:cd:38:0d:66:c0:df:12:ea:8f:3e:1b:ae:b1:08:
         26:2b:7c:65:bc:df:1c:89:08:db:1c:80:76:56:bf:6d:78:b0:
         b1:f1:a8:32:8f:be:ea:a2:0c:10:b0:a4:76:55:35:28:5c:ff:
         76:08:77:09:41:ad:ac:96:e8:fd:14:d3:ca:3c:0d:14:a5:47:
         c0:7a:39:25:3f:df:4f:86:00:d4:d2:3b:15:9f:cf:01:2a:a3:
         ac:8c:af:16:f3:bd:f6:11:a4:c9:b4:5e:09:17:b2:57:c8:de:
         f7:f5:65:8e:c9:5c:9a:0f:36:5b:cc:34:b9:82:80:7f:43:a4:
         9d:22:be:b3:3a:44:29:b6:95:ff:31:2b:c7:3b:5e:cb:9c:10:
         70:de:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:39 2025 by rpki-client