This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
File:                     357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json)
Hash identifier:          zmlMXWxO7R606yF3VLnc7F1bdO5eOxYzpbd3CmPMGig=
Subject key identifier:   AD:43:E0:40:31:7D:F5:0D:67:0E:41:80:39:32:91:01:4D:8B:83:D2
Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05
Certificate issuer:       /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605
Certificate serial:       38030CBA40E51503BEB980B6A9B41574B5D9DA05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
Manifest number:          04E7
Signing time:             Sat 06 Dec 2025 02:51:13 +0000
Manifest this update:     Sat 06 Dec 2025 02:46:13 +0000
Manifest next update:     Tue 09 Dec 2025 12:32:13 +0000
Files and hashes:         1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: jrlc4y1UecJWjWunaH3ogK/kpmmW518AEEuqb6SZ3HQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl
                          rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 12:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:03:0c:ba:40:e5:15:03:be:b9:80:b6:a9:b4:15:74:b5:d9:da:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605
        Validity
            Not Before: Dec  6 02:46:13 2025 GMT
            Not After : Dec  9 12:32:13 2025 GMT
        Subject: CN=AD43E040317DF50D670E4180393291014D8B83D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:ee:1d:70:c0:00:88:9f:14:de:90:e7:30:
                    96:b8:64:2b:7d:17:a7:de:eb:77:55:bc:f9:56:00:
                    94:0d:31:18:ef:e3:1d:37:60:07:dd:4d:dc:d8:c2:
                    ea:ff:a7:ae:1e:a5:3b:82:a7:45:30:90:d8:b5:c5:
                    af:5b:78:de:d5:72:ba:0f:22:6c:bb:d7:28:10:50:
                    3c:9a:4f:15:f5:b4:03:07:3d:e0:2d:07:68:8c:e6:
                    05:f9:80:38:14:25:9d:14:a7:0f:d3:e6:8f:75:4d:
                    e6:74:20:a4:40:67:28:cc:5a:41:89:49:b3:47:5b:
                    cc:55:b5:35:75:8e:39:dd:d0:de:93:26:35:88:b3:
                    4f:f7:b0:20:c8:cc:b2:4a:63:2f:30:2e:04:1b:f3:
                    c3:e6:b8:15:2f:6a:3f:ee:8c:54:02:ea:41:94:3b:
                    76:aa:59:c6:7e:7a:c6:9f:70:e2:9f:7a:29:05:4e:
                    e2:f1:2f:48:04:ef:4a:9c:d6:ce:b7:29:05:93:3f:
                    71:c4:d2:9d:00:cb:20:71:d3:9c:e3:32:77:6a:5e:
                    9a:44:81:68:33:ef:8d:08:bf:d9:ed:55:81:95:c0:
                    f9:67:9c:b3:be:05:bf:e0:b5:d6:7c:ab:d2:27:cc:
                    07:2d:32:03:3c:0a:57:ac:df:8a:f8:f6:62:5e:15:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:43:E0:40:31:7D:F5:0D:67:0E:41:80:39:32:91:01:4D:8B:83:D2
            X509v3 Authority Key Identifier:
                keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:44:d6:87:1f:15:21:d7:83:fe:9b:4b:aa:6f:69:31:ae:18:
         b4:e0:81:a5:46:3a:e3:6b:03:e0:90:a1:5a:19:fd:79:f0:ec:
         c0:e7:26:62:f3:99:2c:fd:4c:59:d2:f5:cf:1b:b9:90:7a:4a:
         03:eb:de:15:49:78:19:57:69:6f:5d:cd:f2:a7:71:48:63:c0:
         b1:7e:7b:5f:b1:29:1f:d0:b6:61:04:18:79:6a:52:fb:23:57:
         49:fd:de:d1:a4:ac:9e:2c:15:23:49:a8:1b:ae:b9:49:cb:ba:
         20:fc:d7:2f:4a:3c:02:5f:ef:2f:90:9b:5f:8b:b2:22:4d:5c:
         39:a9:4d:47:f1:89:68:e7:dd:1c:65:d1:f4:77:d2:5f:8b:61:
         51:d5:57:a4:fd:3f:ad:f0:c7:47:26:27:6f:ae:5a:3c:d8:d3:
         0a:5a:55:b7:75:e2:7f:ee:bf:c9:80:b7:07:80:4e:21:4e:5d:
         d5:f6:2e:07:68:69:ea:55:82:e4:cd:05:30:e7:53:eb:08:ec:
         aa:a1:50:53:28:1e:99:9e:cf:17:87:60:6c:ff:66:40:f8:3c:
         9a:cb:c0:bf:bb:7b:de:75:8b:2b:e8:16:0f:96:49:45:62:a6:
         44:2d:2c:73:8c:d7:cc:41:e3:6b:f4:74:86:35:28:d8:4a:3c:
         35:28:ed:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:41:30 2025 by rpki-client