This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
File:                     A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json)
Hash identifier:          2dZdqX3uIT5Mm5k6fumLrRR1aQcCgB9CeysOycQnEWA=
Subject key identifier:   1C:0E:64:9B:A5:B9:BF:AE:AC:4F:F5:F7:EC:37:3D:72:28:90:24:F7
Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9
Certificate issuer:       /CN=A61585874729C58BB62740692BA8FA6ED286FDC9
Certificate serial:       68B9EB60B087C279CC387285269D7B324D403E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
Manifest number:          0210
Signing time:             Sat 06 Dec 2025 13:02:06 +0000
Manifest this update:     Sat 06 Dec 2025 12:57:06 +0000
Manifest next update:     Tue 09 Dec 2025 20:22:06 +0000
Files and hashes:         1: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: JyQPd0bhiqSkYXHZyn1cHjSsBgx175ueb6u+4/BZBnk=)
                          2: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=)
                          3: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=)
                          4: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl
                          rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b9:eb:60:b0:87:c2:79:cc:38:72:85:26:9d:7b:32:4d:40:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9
        Validity
            Not Before: Dec  6 12:57:06 2025 GMT
            Not After : Dec  9 20:22:06 2025 GMT
        Subject: CN=1C0E649BA5B9BFAEAC4FF5F7EC373D72289024F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:04:0a:e9:37:7d:07:ea:ac:a3:73:94:ec:
                    a0:d8:4e:73:94:7f:5b:f2:4a:d6:64:08:03:a5:5a:
                    e9:3b:b7:2f:f7:3d:64:78:4e:e1:34:58:b7:00:c9:
                    f1:d6:58:5f:be:da:e4:1a:80:b6:1e:62:0e:e5:81:
                    cd:6e:3d:44:b6:78:19:46:29:8f:9f:cb:83:fa:f7:
                    66:6a:12:67:d0:26:31:1b:8f:06:63:6f:45:e9:a1:
                    05:66:8d:de:e7:47:52:e8:42:97:7d:8e:09:35:47:
                    22:8d:11:ca:4b:17:37:94:d9:f7:9a:5e:35:02:b9:
                    47:b1:48:ac:21:a4:f1:d2:67:1b:82:18:95:0d:50:
                    80:42:10:c0:df:c9:75:bf:3d:6a:8c:28:00:bc:69:
                    a4:05:42:01:80:f3:29:40:8c:1e:bc:9a:22:d6:67:
                    ec:e1:cf:07:ca:5c:e3:d5:9a:08:cf:cd:45:a0:24:
                    18:f6:55:31:67:75:bd:e7:aa:a9:c7:0f:65:00:79:
                    5a:e1:b0:eb:2b:28:c8:c4:d5:45:ad:e9:65:46:22:
                    18:57:66:1a:20:d9:36:8d:b8:ea:ff:d0:7b:2c:4f:
                    0a:1c:ed:9b:58:3e:db:42:5f:52:a8:f3:c0:cc:e3:
                    83:f4:87:96:29:0a:19:e3:28:92:a4:ed:2c:c5:c1:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0E:64:9B:A5:B9:BF:AE:AC:4F:F5:F7:EC:37:3D:72:28:90:24:F7
            X509v3 Authority Key Identifier:
                keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8a:1c:b0:89:55:9f:e2:13:fc:2a:cf:1b:97:bf:94:3c:d5:
         82:72:e0:6a:3c:83:05:be:3e:50:f9:f3:d5:87:f7:55:62:80:
         cd:92:75:96:35:f4:6e:1f:84:24:6c:a7:f0:9d:d9:fc:78:c3:
         c8:42:d1:e2:dc:ff:98:dc:e8:fc:be:73:08:6a:19:6b:77:e7:
         df:31:5f:49:e9:e7:4d:08:86:13:9a:b7:9f:5c:32:d7:43:ad:
         ee:c3:e1:cc:d6:01:11:4e:c0:c4:02:8e:70:8f:8c:65:f7:0d:
         12:01:a3:61:d0:1b:ea:83:00:16:95:61:02:49:19:6c:9b:44:
         dc:85:6e:a0:21:ae:61:d7:d2:44:7c:ec:57:0d:e1:1e:ee:e9:
         8e:ec:1a:4c:3e:3a:ef:44:81:b5:3d:59:6f:d3:90:f5:91:db:
         51:b8:fd:7c:a0:50:1c:af:e5:34:b8:18:19:f6:2f:39:55:7b:
         0d:78:99:53:87:03:db:a1:4e:d6:ae:0c:5f:48:3f:17:40:8b:
         ab:51:6f:9a:7f:40:63:86:e2:75:19:d3:6d:06:a5:61:63:fb:
         85:29:24:70:b1:68:da:09:a8:5f:d8:1e:59:35:b3:46:9a:df:
         6d:73:74:a1:f6:39:59:2d:f8:ad:96:15:a0:14:16:86:76:5f:
         11:4e:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:36:22 2025 by rpki-client