This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
File:                     E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json)
Hash identifier:          5uPWZ04KqbMiRYxSCrN41djjpV50O1eeJCZtjKOXdJ4=
Subject key identifier:   FB:78:04:71:7C:4F:58:35:87:CD:7C:D4:C6:6B:5A:A1:AE:34:61:41
Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C
Certificate issuer:       /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C
Certificate serial:       04459544306446D9705DA3FAE8F36CBE5DB12A95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
Manifest number:          0130
Signing time:             Sat 06 Dec 2025 19:12:13 +0000
Manifest this update:     Sat 06 Dec 2025 19:07:13 +0000
Manifest next update:     Wed 10 Dec 2025 00:25:13 +0000
Files and hashes:         1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: 6h5aW1JulhBc5lTM/7oXxOcCiWwybtebLx2zD780Y78=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl
                          rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:45:95:44:30:64:46:d9:70:5d:a3:fa:e8:f3:6c:be:5d:b1:2a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C
        Validity
            Not Before: Dec  6 19:07:13 2025 GMT
            Not After : Dec 10 00:25:13 2025 GMT
        Subject: CN=FB7804717C4F583587CD7CD4C66B5AA1AE346141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:4d:66:5d:6d:b5:7f:f1:92:4a:cd:5a:15:
                    5e:72:9b:0d:b0:7b:6d:f8:fc:54:db:da:68:55:b2:
                    c1:75:62:8a:ab:e9:d1:71:1c:3f:96:38:df:ad:4d:
                    6b:79:fe:9f:bb:7b:63:03:d2:23:c3:27:e5:b7:1a:
                    5a:14:b3:59:8a:82:89:2c:29:64:50:9d:cd:3e:8a:
                    29:4d:f3:c2:c2:09:be:9b:d5:3c:ea:ea:1c:ad:26:
                    ba:eb:ca:5c:c7:28:bf:ca:43:c1:ad:e2:8a:d0:ec:
                    e2:5c:c0:2f:f8:e7:b9:a7:bf:e4:71:e9:dd:21:b7:
                    4c:f5:51:d1:3b:6a:20:75:a9:74:79:b0:e8:53:0f:
                    f6:fd:9b:25:db:dc:3a:06:ce:51:f1:12:10:b4:ab:
                    29:d5:df:53:f5:97:c0:6c:45:1d:2f:26:22:6a:23:
                    65:12:97:ac:0e:ca:a9:96:d2:1c:83:1b:09:f4:7e:
                    cd:a7:89:3e:89:c4:f5:f4:e9:54:1d:16:01:f8:c6:
                    34:b9:21:d8:28:1e:7e:e7:1f:7c:52:4c:4f:b3:4c:
                    cb:76:91:18:37:d4:bc:a5:45:92:c7:86:7f:9a:ef:
                    90:f4:c6:47:69:28:15:d0:a5:e0:96:01:67:9f:44:
                    40:8e:87:12:b9:f5:ee:66:22:62:1a:38:26:a6:a9:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:04:71:7C:4F:58:35:87:CD:7C:D4:C6:6B:5A:A1:AE:34:61:41
            X509v3 Authority Key Identifier:
                keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:39:6f:3d:9f:8a:6f:15:41:1e:32:1c:fc:a0:f1:39:80:
         be:45:82:58:c6:50:35:8c:2f:40:60:9f:4c:aa:58:4f:ff:c2:
         b8:b3:07:0b:eb:a4:47:31:ed:fb:fb:58:21:de:67:4f:8f:72:
         44:02:33:bc:e8:3f:53:cc:12:14:8c:60:bc:06:ac:f2:43:ac:
         3b:d7:ff:7a:39:b8:49:77:89:47:86:2a:d0:ff:c2:f4:bc:96:
         8d:f3:f4:1b:27:bc:a8:94:87:57:11:d7:dc:52:fe:34:2f:31:
         89:a7:f0:5e:9e:c7:c8:10:70:2c:48:00:96:98:c5:9f:27:35:
         f9:ac:72:f3:6e:20:c0:cd:cd:db:36:b1:fa:38:87:9c:c9:17:
         48:94:0e:58:04:d8:06:c5:1c:16:dc:32:c5:52:23:52:50:c1:
         e7:df:94:98:35:44:70:14:07:ae:7c:2f:59:bd:7e:47:35:d7:
         72:86:62:f5:19:38:a0:00:eb:c8:85:cb:f4:fe:ca:88:c5:af:
         85:22:9b:d9:77:a5:7c:41:7c:f2:fc:7c:1b:3a:54:98:65:44:
         b4:d3:fe:5c:84:90:38:e5:02:67:f6:49:51:13:4a:f7:35:d3:
         68:13:0c:33:08:1d:cd:e5:4e:f9:20:72:62:69:7d:4d:6a:09:
         9c:48:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:37:13 2025 by rpki-client