This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
File:                     1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json)
Hash identifier:          DA6vs3bJ33FT/MQ2hHgMVHTqfqOrkIzaona/8LQt4E0=
Subject key identifier:   3F:21:BB:B1:E0:ED:46:7E:FE:2B:92:47:C9:C9:DF:8C:DC:19:CE:55
Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8
Certificate issuer:       /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8
Certificate serial:       352DF2AEE396FC1D6E8CA619FC513A5F4DE8F462
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
Manifest number:          FC
Signing time:             Fri 05 Dec 2025 11:20:04 +0000
Manifest this update:     Fri 05 Dec 2025 11:15:04 +0000
Manifest next update:     Mon 08 Dec 2025 18:46:04 +0000
Files and hashes:         1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: wRqHy5n1BiEOjgUWuogMLLTmzddTGkiwtCbsvKjSlB8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl
                          rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 18:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2d:f2:ae:e3:96:fc:1d:6e:8c:a6:19:fc:51:3a:5f:4d:e8:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8
        Validity
            Not Before: Dec  5 11:15:04 2025 GMT
            Not After : Dec  8 18:46:04 2025 GMT
        Subject: CN=3F21BBB1E0ED467EFE2B9247C9C9DF8CDC19CE55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:5e:1b:63:d2:3b:e9:a3:4a:11:87:88:77:
                    b9:0a:1b:58:aa:42:a2:4d:21:06:e4:90:e0:f7:51:
                    43:ea:c1:8d:c5:28:77:ff:e4:a5:13:36:10:d0:a9:
                    f1:02:b6:a9:a5:99:fc:45:98:5b:22:d8:72:84:bd:
                    a5:ab:f9:f2:30:4f:ce:d5:28:49:7f:99:3d:f3:e5:
                    3d:ef:4b:b1:17:c1:fc:b8:97:6e:f6:5d:95:29:d6:
                    40:8e:74:3f:5e:a2:24:5b:a3:19:cf:40:96:fe:76:
                    31:3d:92:81:fa:5d:d7:3c:96:be:4e:9a:3f:2d:ff:
                    75:e1:55:10:2e:04:21:e1:d9:53:ae:94:3d:67:32:
                    30:3f:45:76:88:90:9f:5d:39:29:0b:55:6d:e3:02:
                    28:03:de:07:56:94:3f:6a:03:2d:c1:c1:bb:19:89:
                    a9:cd:5d:c3:2b:ba:ce:60:e2:56:1f:fc:44:5a:49:
                    32:99:61:89:a9:55:f4:9f:e4:42:9b:f6:59:97:19:
                    bb:67:75:88:28:45:91:a7:07:70:ff:73:48:6e:12:
                    ab:7f:04:60:55:4c:73:5b:2e:4a:65:96:21:cd:2a:
                    84:24:4a:00:82:ad:f3:2b:dc:1b:d5:8a:d5:c9:2c:
                    8f:57:3d:36:19:c2:36:16:57:a7:3e:17:27:fd:27:
                    a9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:BB:B1:E0:ED:46:7E:FE:2B:92:47:C9:C9:DF:8C:DC:19:CE:55
            X509v3 Authority Key Identifier:
                keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8c:9a:5e:00:77:15:9f:d3:30:82:95:bb:08:86:d2:b3:80:
         86:80:ae:b4:5e:00:0d:c7:40:aa:9b:6d:cf:65:74:7e:37:69:
         79:79:69:51:ef:a6:e3:e8:00:5c:c6:cb:ca:c0:bc:c7:8a:14:
         49:67:c1:8b:cb:9f:61:9d:ff:0b:27:ad:ae:17:54:13:8f:0e:
         2b:31:25:e6:54:87:87:74:26:92:c9:82:8f:07:92:61:db:55:
         1b:03:9c:17:da:fc:db:1a:03:35:a0:a7:6a:49:52:61:7d:37:
         11:67:a3:8d:e2:5c:81:71:ac:b6:c1:2e:bb:cd:41:dd:99:bd:
         00:bc:58:d4:6a:12:dc:e1:23:cb:36:fa:04:04:55:40:43:24:
         76:7f:70:ed:d4:38:a3:4a:29:78:1b:6e:86:b6:56:3b:ee:53:
         b9:f8:83:f9:1c:bd:04:06:66:f0:20:05:df:d6:c9:7b:41:c9:
         1f:d9:35:b3:c3:25:4e:dc:39:ab:55:e2:0d:88:7b:92:5e:43:
         f6:b5:2f:4b:69:b3:bc:28:1c:88:16:26:98:84:0c:a6:07:8b:
         7d:25:06:fe:7a:32:42:50:94:c6:a3:46:73:e7:5e:fd:6b:ac:
         33:8c:27:1a:30:e8:fa:82:9e:46:c0:2f:bf:0c:09:a2:4e:32:
         0e:ea:d5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:30 2025 by rpki-client