This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft
File:                     277D3C0811B597BC22847329E543CCEE7E2449A0.mft (raw, json)
Hash identifier:          3fr+MpVa+mr6HTh73BA0Fm4aQrQcrLKDeSjWmEK/x38=
Subject key identifier:   DB:43:34:5D:ED:39:F4:D2:CB:57:32:A9:E9:72:F6:8A:8B:1A:68:F3
Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0
Certificate issuer:       /CN=277D3C0811B597BC22847329E543CCEE7E2449A0
Certificate serial:       16B562612527F7B8DA986D5F3033D782F368493A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft
Manifest number:          E7
Signing time:             Mon 15 Dec 2025 17:00:59 +0000
Manifest this update:     Mon 15 Dec 2025 16:55:59 +0000
Manifest next update:     Thu 18 Dec 2025 18:40:59 +0000
Files and hashes:         1: 277D3C0811B597BC22847329E543CCEE7E2449A0.crl (hash: LVpfMVi8dJhtnkhyt/lusKD6dTgO1nd+BhPzV+UCT/c=)
                          2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: fefCWKXr30YVqWiq342VlH8lfhnIRdZEARC93/LTaB0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl
                          rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 18:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:62:61:25:27:f7:b8:da:98:6d:5f:30:33:d7:82:f3:68:49:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0
        Validity
            Not Before: Dec 15 16:55:59 2025 GMT
            Not After : Dec 18 18:40:59 2025 GMT
        Subject: CN=DB43345DED39F4D2CB5732A9E972F68A8B1A68F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:7c:ea:f6:d1:70:c5:17:d5:6d:ca:d0:1d:
                    ad:7c:ff:a1:e6:20:eb:0d:7d:8f:d3:03:d5:eb:cd:
                    69:c0:03:dd:69:e3:e3:c7:b1:9a:1d:1f:6f:aa:06:
                    a7:00:d3:bd:89:a0:19:a1:f9:11:e4:a0:45:c0:e4:
                    6f:c7:04:ce:79:4d:e9:d1:46:fc:b7:72:dc:41:26:
                    7c:c7:2b:4d:05:83:d7:fb:e7:07:c2:bf:3a:6d:da:
                    ea:9d:38:80:76:fe:8d:26:a7:29:09:6a:7f:65:7e:
                    39:9f:8c:4a:1c:1f:2a:b4:d4:05:b0:9e:f4:44:ee:
                    71:58:6e:91:f9:59:88:ea:2e:de:c2:a5:ae:b9:15:
                    dd:4f:39:42:2a:f2:58:18:47:d9:50:8d:6a:94:ac:
                    78:e6:79:62:e7:e9:ca:1e:24:c5:f2:88:da:4e:47:
                    3d:1d:b9:70:9a:e8:5f:63:df:8d:94:4e:5a:c9:b7:
                    42:2a:25:f5:1a:94:7c:01:d8:33:1b:d4:57:3d:ac:
                    19:93:dc:36:cb:b4:6c:93:d1:59:7c:d5:70:f6:be:
                    ea:f3:12:94:f1:84:d2:be:1e:4c:49:cc:ff:35:01:
                    07:06:45:a6:10:4d:fe:a2:e4:dd:51:3b:c5:62:2b:
                    05:30:31:22:80:54:e4:5c:4d:57:60:ce:56:42:f9:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:43:34:5D:ED:39:F4:D2:CB:57:32:A9:E9:72:F6:8A:8B:1A:68:F3
            X509v3 Authority Key Identifier:
                keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:8e:3c:11:43:56:32:22:89:8a:dc:37:ee:62:fd:c6:9a:
         1e:9a:83:a5:5b:4a:dc:21:3a:2e:c9:f2:91:25:e2:c3:8e:63:
         58:a4:71:f2:ba:23:23:fa:21:76:5e:6f:13:68:2f:9d:04:25:
         23:43:44:0d:0b:8b:53:dd:41:03:22:e1:64:2a:e6:61:22:fa:
         c1:5b:a6:a4:8e:04:d7:9f:6d:f1:86:08:8f:73:1b:fb:50:da:
         a1:d8:65:8e:ca:97:bc:9f:05:11:be:f6:73:50:20:1a:51:8a:
         82:81:6a:08:40:fa:c5:ca:7f:3b:33:cf:4d:79:6f:01:fd:c5:
         43:73:b9:40:c0:09:fc:9f:dc:df:45:ec:2f:0f:c5:34:b1:f2:
         59:94:cd:fc:a6:c8:d4:bb:8a:ac:fa:a0:2a:5b:f9:f7:b7:c9:
         b2:f6:6f:a3:09:af:08:e0:f8:4f:a6:f6:ef:c0:40:62:ca:3f:
         57:cb:55:7a:b9:35:18:ac:8a:70:63:6b:85:f7:5c:92:6a:b9:
         49:05:9b:18:08:6f:3a:6b:fe:2a:e6:b1:37:2c:3d:c2:64:aa:
         18:fd:f9:f4:87:25:f1:51:e7:5d:df:c7:c8:79:15:04:64:60:
         0a:6b:9d:b3:ce:05:5c:2c:19:ff:d6:20:12:d4:e5:89:be:02:
         2b:26:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:16:22 2025 by rpki-client