This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
File:                     7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json)
Hash identifier:          yY2hLZoparkRT1GMWp6bUdbELdLmblchug30e6Bok4A=
Subject key identifier:   D2:53:BD:FA:3B:B3:EE:94:C9:7C:9B:1E:FB:3A:0A:BA:EA:55:DA:9B
Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04
Certificate issuer:       /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504
Certificate serial:       3EBAF33892D75ECEB1F7EE988EEC8CEAE43CFD09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
Manifest number:          34
Signing time:             Sun 07 Dec 2025 01:21:31 +0000
Manifest this update:     Sun 07 Dec 2025 01:16:31 +0000
Manifest next update:     Wed 10 Dec 2025 09:48:31 +0000
Files and hashes:         1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: ZC8fPwMJuU/rIAlvN9Sr6wF3mWlmcA8MWSe7ZOTOCuI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl
                          rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ba:f3:38:92:d7:5e:ce:b1:f7:ee:98:8e:ec:8c:ea:e4:3c:fd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504
        Validity
            Not Before: Dec  7 01:16:31 2025 GMT
            Not After : Dec 10 09:48:31 2025 GMT
        Subject: CN=D253BDFA3BB3EE94C97C9B1EFB3A0ABAEA55DA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:b5:b5:04:b6:1a:3f:5e:2e:be:42:78:b4:
                    54:b3:73:f7:f2:76:12:08:a9:58:fa:62:4d:cd:31:
                    46:78:11:60:8e:a0:ce:22:4b:9a:f5:76:31:69:df:
                    49:36:0b:45:61:5c:c8:f2:06:9c:79:67:b7:6e:42:
                    74:64:41:e3:94:db:82:e2:ef:3a:6e:2f:d8:6b:a5:
                    6c:b4:20:b7:95:29:cd:a0:ec:3a:e2:17:d2:2e:64:
                    23:75:e6:cb:11:b3:8c:fc:00:74:5b:a4:f9:6a:8e:
                    90:49:b9:75:96:d6:ac:0c:67:c3:2c:b5:0d:0d:96:
                    df:a1:dc:2a:a9:4b:21:7f:db:72:aa:d8:55:48:a0:
                    a9:36:cc:73:16:1d:b1:e1:ff:b1:c5:06:37:e3:fa:
                    e8:08:67:a9:71:57:23:ed:ba:ca:a2:dd:c4:d2:b9:
                    b0:d5:d2:d6:24:31:5c:b4:8d:47:df:83:89:b3:83:
                    6a:62:bb:34:9a:d9:ba:00:8c:f9:b3:bc:b0:5f:d4:
                    cb:45:58:67:7c:a0:37:bf:ed:1a:07:f7:2e:63:ed:
                    5a:33:5c:f9:86:b9:38:45:59:62:fc:3e:d4:13:5c:
                    14:91:44:07:e4:bd:dc:90:bc:7f:a7:90:f1:66:a8:
                    5f:c5:6d:fc:1c:a7:1f:dd:e1:08:1e:f1:03:bd:0f:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:53:BD:FA:3B:B3:EE:94:C9:7C:9B:1E:FB:3A:0A:BA:EA:55:DA:9B
            X509v3 Authority Key Identifier:
                keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:81:e1:0d:16:a7:03:dc:c2:e5:98:db:31:7d:ed:73:60:
         58:33:81:8f:6b:1e:60:74:09:61:97:86:4b:e6:e0:ba:5f:65:
         6f:ed:58:22:0f:25:ec:1e:60:d3:ad:22:b7:85:ac:5d:1b:cd:
         2f:4d:89:3f:10:bb:78:c2:10:84:36:63:eb:17:18:5f:d3:c0:
         d8:6f:5c:d8:4b:63:a2:d6:c0:68:44:0e:b7:7f:61:4a:9f:33:
         86:5a:44:93:da:fd:99:f7:d4:ee:37:61:f1:aa:36:f6:b6:65:
         61:ff:44:15:68:8e:68:1d:c7:65:ca:d0:f0:fc:87:9f:72:b2:
         03:72:2c:3d:84:9a:c8:0c:70:b7:1e:6a:ff:81:bf:f7:ea:b4:
         6d:53:42:7c:cb:7f:57:0b:33:7c:26:f3:e3:6a:3b:68:ad:79:
         4d:49:d2:ae:d0:a4:88:f1:19:22:e7:43:b0:09:5a:bf:7c:84:
         30:37:41:b3:9b:7b:85:0f:db:c6:2f:13:2f:15:80:f5:51:bb:
         d9:a5:03:9d:dc:0c:db:ab:a7:b1:86:35:e9:c6:12:db:94:cb:
         6e:66:10:ef:e2:c7:0a:ec:69:82:43:e3:f6:c7:6c:5a:7c:91:
         d0:63:72:e9:98:33:6e:41:83:aa:cd:02:d9:ad:bc:36:ae:66:
         4f:64:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:56:18 2025 by rpki-client