This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft
File:                     46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json)
Hash identifier:          vFW3yJd/U1+dpLFxLCEpnFX9usUIynAXlTfo/6y9u8s=
Subject key identifier:   98:D6:F1:66:A5:02:E0:AF:03:FB:9A:4E:80:D5:40:19:75:E2:C1:A3
Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03
Certificate issuer:       /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03
Certificate serial:       2504739DAD237E0D24096C5873D0AE524F10CE12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft
Manifest number:          0115
Signing time:             Sat 06 Dec 2025 08:41:59 +0000
Manifest this update:     Sat 06 Dec 2025 08:36:59 +0000
Manifest next update:     Tue 09 Dec 2025 17:24:59 +0000
Files and hashes:         1: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: kGE/DoHrV4fMHxDZHja4VARBo2bZIcrtohiDsXUXVtM=)
                          2: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: xyltXPiPOHbvKePnlpJnsx741KzCQWK/N5bnmbeAlMM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl
                          rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:04:73:9d:ad:23:7e:0d:24:09:6c:58:73:d0:ae:52:4f:10:ce:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03
        Validity
            Not Before: Dec  6 08:36:59 2025 GMT
            Not After : Dec  9 17:24:59 2025 GMT
        Subject: CN=98D6F166A502E0AF03FB9A4E80D5401975E2C1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:b9:bc:43:f5:36:b1:8d:59:92:ef:cb:4c:
                    de:12:4b:d2:a4:b7:eb:75:5b:b9:eb:c3:2f:86:fd:
                    87:b0:51:08:f7:4c:87:b1:1e:e2:ed:e9:a3:9a:2c:
                    cb:03:34:ae:1f:8f:f6:58:b6:fe:13:de:8c:c8:27:
                    0e:47:6d:f2:7a:9a:41:a8:d4:1f:8d:3e:d5:dc:41:
                    72:f8:66:5b:bc:8a:36:a2:3b:e9:bf:b8:67:de:0f:
                    3e:d3:64:4b:d2:53:be:fc:e9:9c:ac:32:35:ee:82:
                    44:76:99:18:aa:fd:e6:71:9a:bf:cc:05:85:f6:02:
                    a9:c6:3e:25:8b:bd:49:e3:db:ff:6f:f0:83:03:3f:
                    fa:2b:53:fe:f9:e9:a7:46:40:1e:b9:ea:f5:fc:b5:
                    b2:75:b9:c3:d1:1b:63:79:89:6a:d6:32:cf:fd:bd:
                    e5:9d:86:61:4c:51:38:c2:d6:e5:c1:41:d4:e2:00:
                    b9:3c:b8:db:ad:3b:a2:48:85:13:13:20:b1:66:c1:
                    8b:41:5a:a9:0e:df:eb:dd:95:64:e3:2a:5b:3a:07:
                    de:20:ed:ae:9a:c7:aa:21:82:b3:71:cc:9a:3b:01:
                    60:fd:20:38:3a:32:06:38:d3:be:f0:19:d7:92:0e:
                    af:27:70:73:10:7c:10:49:fb:d4:9d:ff:8b:7c:48:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:F1:66:A5:02:E0:AF:03:FB:9A:4E:80:D5:40:19:75:E2:C1:A3
            X509v3 Authority Key Identifier:
                keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:80:44:38:df:ce:bf:cd:82:59:a1:82:f9:54:f2:b7:20:
         c6:4a:6f:d5:d3:30:69:e7:40:34:9c:49:5b:96:60:66:94:41:
         09:8c:b4:c9:3b:cb:ef:9d:73:48:12:83:49:51:2d:27:a0:fb:
         ba:1a:9f:a5:51:e9:a7:ad:a4:e2:0e:73:26:7d:53:97:37:c8:
         6c:3f:78:75:88:e1:b2:70:20:09:ac:6c:47:08:df:79:24:ac:
         c2:e5:5d:f8:ff:90:7e:9a:43:4e:4c:ce:ed:b8:6f:c5:d8:8a:
         b9:cb:03:e6:16:7d:b0:65:3e:5c:17:5a:73:30:b6:98:67:71:
         77:8f:78:78:92:41:7e:f5:18:69:09:a1:ef:1b:1c:d4:79:71:
         d5:1c:15:ae:d4:ae:ab:b7:14:cd:2c:be:98:33:58:a1:55:a3:
         4c:88:9f:0e:91:de:c5:b1:cf:17:f4:a6:b4:2b:91:8e:bf:c2:
         41:fc:f2:75:39:07:a5:6d:3e:e3:ac:87:98:2b:e7:ac:e9:9a:
         67:4a:ea:33:65:4e:73:0f:11:c3:4c:91:bf:7c:17:f7:bf:4c:
         3e:b8:f9:02:21:14:c2:65:8d:b4:c3:0d:d2:6d:cb:66:e7:19:
         71:75:52:3d:5d:63:b7:d8:1e:54:6d:11:e7:12:b4:be:6a:02:
         5f:94:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:50:22 2025 by rpki-client