This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
File:                     1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft (raw, json)
Hash identifier:          JT5ZyBcZkE1fTBLThZAtmlaUfA0E+VOWV3NZ2TUNupA=
Subject key identifier:   35:41:0A:73:A7:43:5E:1C:17:FD:60:D6:F0:CF:C8:AC:B1:2E:7F:0C
Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB
Certificate issuer:       /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
Certificate serial:       4DEEE86D3696FFCECF18DA65F7157AAE47BAE9DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
Manifest number:          0134
Signing time:             Sat 06 Dec 2025 06:11:44 +0000
Manifest this update:     Sat 06 Dec 2025 06:06:44 +0000
Manifest next update:     Tue 09 Dec 2025 16:24:44 +0000
Files and hashes:         1: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl (hash: aSXPP2sqvvOqrSTolxKRxhxgPMgicnPTYcTbcasV4eU=)
                          2: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: qDLyTdPWSG6q8vGu/DnC4p5fkC9xQVIbSAKqWF4GTxo=)
                          3: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: y5O1Ppu2ytn4g8GvvxC2f7T0LX+os0fh9M12M0RIzb8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl
                          rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ee:e8:6d:36:96:ff:ce:cf:18:da:65:f7:15:7a:ae:47:ba:e9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
        Validity
            Not Before: Dec  6 06:06:44 2025 GMT
            Not After : Dec  9 16:24:44 2025 GMT
        Subject: CN=35410A73A7435E1C17FD60D6F0CFC8ACB12E7F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:b5:1d:00:97:cd:23:79:00:25:50:2c:5e:
                    b3:66:02:09:3e:67:24:77:d1:2e:d0:30:79:f0:cc:
                    4a:c3:50:5d:59:83:39:0d:f6:d1:f4:d6:6a:fd:ee:
                    38:3d:9f:09:16:52:a8:a6:60:ae:d3:3f:cf:b0:28:
                    03:4f:96:91:f0:13:ce:23:18:af:23:7b:0d:62:e5:
                    5e:c6:5f:ce:39:42:21:ce:05:62:f7:85:df:5d:92:
                    a3:db:25:de:f4:d3:2b:57:e3:13:b3:f3:d0:5b:a3:
                    f1:eb:43:75:a8:ca:02:b2:6c:2e:98:82:2e:18:45:
                    ad:8e:3c:24:e2:cc:51:f1:8f:e9:6c:e0:e3:ce:49:
                    62:9c:20:cd:38:93:ad:da:ba:a3:d7:86:56:ae:ee:
                    30:fe:71:30:56:79:37:e2:5b:f7:48:95:af:80:79:
                    79:62:a2:c1:33:a5:54:7a:30:d0:de:60:db:8a:9d:
                    45:ac:fc:5c:12:65:2f:41:4a:37:ee:ad:2f:6b:05:
                    85:0b:a9:75:0f:0b:11:74:39:fb:50:97:b4:21:37:
                    b6:80:cf:c5:bf:f6:72:31:c3:d4:2e:a6:5b:0c:d3:
                    07:64:8d:1c:56:d8:03:b1:6b:19:ae:39:65:ae:b8:
                    88:25:90:eb:8d:ce:2f:dd:63:96:6b:68:62:cf:11:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:0A:73:A7:43:5E:1C:17:FD:60:D6:F0:CF:C8:AC:B1:2E:7F:0C
            X509v3 Authority Key Identifier:
                keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:d7:c7:14:f8:8a:e1:7e:25:9d:86:9b:19:1e:80:32:17:
         e2:0e:ba:9b:2e:32:06:fb:77:03:2e:5b:39:80:ff:69:79:0d:
         dd:bf:fb:af:06:a0:e7:3a:5d:c0:c8:0c:e7:6f:9a:5b:b9:50:
         b1:5f:36:8e:7b:7f:18:4e:aa:f5:c2:50:05:3a:68:b1:d4:35:
         54:89:70:ee:29:b4:64:10:5c:6e:2f:ae:44:f7:43:ec:e8:d3:
         89:cd:8c:3e:6a:64:14:88:e4:62:4e:aa:dd:06:87:3f:bc:4b:
         e0:d5:87:bd:1f:5f:07:fb:da:06:b8:52:13:d7:59:cf:bc:c9:
         dd:90:78:ff:0a:a9:52:65:4a:ab:66:df:6d:a0:c2:1c:00:f4:
         af:76:57:4c:d5:c3:7c:1b:42:5b:f8:f9:1a:c2:06:34:ba:df:
         56:40:98:07:f5:e2:cf:c5:20:8a:4b:e4:67:85:a7:a2:5c:f0:
         68:4f:3c:7c:99:b1:7d:b9:2c:29:f8:f5:0c:48:e8:02:a6:8c:
         fd:14:aa:78:d4:b3:d8:dc:1f:e3:69:34:9d:f2:95:b4:f0:23:
         de:40:68:b9:eb:e8:35:57:96:3a:53:1b:a9:bb:46:c9:c4:cc:
         2c:7f:c5:86:ed:90:78:8e:0b:27:d3:4b:d0:90:c2:80:71:07:
         ec:43:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:04 2025 by rpki-client