This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
File:                     585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json)
Hash identifier:          GyFlO7a+aspA++Go9D5A/lDMaxifbFQZA8ap3kYex8A=
Subject key identifier:   AD:74:75:D0:15:DF:7D:30:6D:AE:5E:20:6B:6E:B2:06:70:F1:48:18
Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90
Certificate issuer:       /CN=585D79944E315672D413B937BFC042F7C0AAB990
Certificate serial:       06ACF3CA39447A0566E5A8B5058794DA5284D015
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
Manifest number:          012C
Signing time:             Sat 06 Dec 2025 11:31:04 +0000
Manifest this update:     Sat 06 Dec 2025 11:26:04 +0000
Manifest next update:     Tue 09 Dec 2025 19:50:04 +0000
Files and hashes:         1: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: +PI60B2oSBmhRfVisZzR+tAhQ9OLHcdwD9wOzZYVMCg=)
                          2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl
                          rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ac:f3:ca:39:44:7a:05:66:e5:a8:b5:05:87:94:da:52:84:d0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990
        Validity
            Not Before: Dec  6 11:26:04 2025 GMT
            Not After : Dec  9 19:50:04 2025 GMT
        Subject: CN=AD7475D015DF7D306DAE5E206B6EB20670F14818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:1a:cc:b5:c0:49:8c:20:64:e4:94:3e:bf:
                    f3:10:32:35:2b:03:03:ee:01:eb:74:b8:43:32:0d:
                    d1:36:06:bd:d0:9f:04:cf:3a:fb:f8:c2:a2:b9:a0:
                    2c:12:f7:17:9f:6e:c5:d9:1f:19:3e:8d:39:c1:7f:
                    49:4d:cd:a2:45:1f:b0:81:c0:7b:26:2a:64:ca:6b:
                    07:74:6e:0b:a7:9a:2a:6d:2e:91:45:59:e6:8c:79:
                    50:db:7c:4f:23:3a:e3:cc:69:1d:98:6c:cf:ad:7e:
                    ba:1f:3f:91:05:1b:8d:bd:71:bf:07:6e:63:46:23:
                    70:71:72:ad:d7:41:a1:7e:36:28:af:18:44:06:94:
                    5b:54:ed:9f:57:fd:b7:76:29:18:ea:b7:b1:a5:67:
                    26:20:e2:d2:2b:4f:a1:76:c5:d8:06:d2:79:1d:16:
                    71:f2:ea:22:60:a8:4a:ba:93:7a:ae:39:3d:3c:ee:
                    22:fd:8c:1c:7d:78:f8:79:73:d4:a1:92:a9:0e:99:
                    29:7c:c1:b4:20:94:f6:d7:26:42:77:c3:0f:ba:7d:
                    00:1d:74:76:e8:55:c1:f6:4a:fb:af:3d:71:7d:39:
                    e1:2d:06:f9:ea:d5:33:f1:20:b9:44:cb:b7:c8:b0:
                    ee:18:32:89:be:3c:13:88:5d:42:2b:a4:a5:47:87:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:75:D0:15:DF:7D:30:6D:AE:5E:20:6B:6E:B2:06:70:F1:48:18
            X509v3 Authority Key Identifier:
                keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:90:5d:5a:32:8b:70:2b:c6:9d:b7:5b:d6:63:fa:08:f2:
         d0:1e:f7:a9:bc:86:00:30:5c:90:af:82:5f:42:43:a4:72:d7:
         4c:cb:8e:dd:41:47:4a:5c:0b:bd:00:89:0c:a9:5f:5d:fb:08:
         03:7c:99:92:27:c9:9c:47:ff:e4:ef:90:69:a1:3b:53:37:b3:
         98:92:2f:e1:a8:8a:e8:ce:ea:75:4a:01:7a:cc:a7:e2:85:cf:
         7a:85:b9:0b:88:2f:da:53:f2:45:56:79:12:fa:d3:81:0d:e2:
         1a:a2:03:f1:8f:d8:f2:80:2f:a9:95:69:a7:af:b3:1b:b4:95:
         d2:94:59:7e:dc:43:26:2b:75:f7:53:82:59:ae:e9:b1:bc:6d:
         8b:c0:20:cf:4e:5c:e7:78:e8:0f:b6:d1:fe:20:60:01:6a:e3:
         e7:cf:fb:db:22:b5:27:3b:18:37:1a:12:1c:80:dd:f5:6c:cf:
         29:99:b5:a4:99:00:fe:56:78:26:33:7f:ed:c3:48:38:46:55:
         6f:85:87:9d:2d:33:a8:90:42:87:b7:5d:5c:20:92:e2:84:b7:
         c2:fa:e4:74:6f:cf:ee:32:78:fe:0b:9a:d5:01:aa:9b:f0:55:
         4e:0b:07:28:3c:a2:cc:10:7a:d8:fc:f3:f7:2b:0a:9a:e8:1e:
         93:5b:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:48 2025 by rpki-client