This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
File:                     85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json)
Hash identifier:          CiBXtmJf9LJvpbbCnSn0faGgNhMpYBwU0zxofa9leO0=
Subject key identifier:   3D:7E:E4:14:4F:BB:6D:FC:CC:03:28:0D:5B:AF:D3:B9:6D:C5:AA:CD
Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
Certificate issuer:       /CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Certificate serial:       7B6062716ECEB420B9670CC25A3186C7702C2072
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
Manifest number:          0530
Signing time:             Fri 05 Dec 2025 08:12:22 +0000
Manifest this update:     Fri 05 Dec 2025 08:07:22 +0000
Manifest next update:     Mon 08 Dec 2025 08:46:22 +0000
Files and hashes:         1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: fr33nyThFVt4ayJN3q2sSkk+i0k+2+kERIxYKtdwkvE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl
                          rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 08:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:60:62:71:6e:ce:b4:20:b9:67:0c:c2:5a:31:86:c7:70:2c:20:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6
        Validity
            Not Before: Dec  5 08:07:22 2025 GMT
            Not After : Dec  8 08:46:22 2025 GMT
        Subject: CN=3D7EE4144FBB6DFCCC03280D5BAFD3B96DC5AACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:52:47:b0:1a:ea:fd:ba:90:63:a9:d0:07:
                    a6:2b:82:df:c4:5a:7f:81:f8:64:55:ce:05:a4:33:
                    b0:44:4b:f5:92:e4:dd:3e:bc:f0:c4:8a:53:0d:1c:
                    da:9b:8e:19:9d:ac:07:73:97:0c:30:80:f8:f9:e2:
                    36:cf:60:99:72:53:5c:eb:75:fe:a2:e5:27:3e:a5:
                    c6:f2:91:c4:67:53:97:b7:11:2d:81:3d:69:bb:b9:
                    5b:dd:95:98:ec:60:91:84:82:ea:6d:52:5e:8d:34:
                    74:28:24:52:57:fd:06:78:ce:2c:77:ce:e5:c9:59:
                    3d:49:e5:f1:98:7b:3f:f0:81:c1:27:73:fa:16:a6:
                    be:39:69:66:4f:6f:86:73:23:f8:bf:2a:28:dc:2b:
                    8c:3b:b9:ea:e3:c1:3a:7b:15:73:1b:0f:a4:ba:75:
                    0b:fc:c4:5c:8e:be:c4:ad:57:c1:1f:d0:a2:c6:db:
                    fc:be:a6:c6:69:11:29:aa:a3:25:47:a0:b5:a4:49:
                    21:74:ef:b8:3f:ed:b8:e2:d8:88:c3:f8:27:a8:65:
                    b2:49:0d:bd:1d:18:60:ff:0f:d7:06:6b:47:00:1f:
                    c8:b8:7f:9e:09:5a:e8:a7:6c:cd:dd:0e:7b:79:db:
                    47:93:fa:50:5d:62:fc:31:fa:65:e6:59:bd:90:cb:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7E:E4:14:4F:BB:6D:FC:CC:03:28:0D:5B:AF:D3:B9:6D:C5:AA:CD
            X509v3 Authority Key Identifier:
                keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:79:b7:06:f1:29:f6:d3:18:76:c3:3e:d7:21:d0:7c:23:
         14:3a:2d:a1:73:6d:3f:c3:32:4a:25:c7:3f:99:53:c3:3e:05:
         57:81:f1:93:6e:74:53:4f:b5:c8:f2:b3:26:34:79:ed:51:5c:
         58:2a:50:5b:46:82:8f:6e:37:3a:7a:22:15:50:72:ff:0a:9f:
         c7:49:d1:60:46:b0:96:6c:0b:f0:b3:3d:9a:fe:8a:a6:ca:1a:
         fb:c6:36:f7:22:95:6a:7f:e2:c7:f6:4e:ac:c6:ca:4a:e7:80:
         cc:e8:a4:a5:1d:48:e4:f0:e4:2c:e1:2c:23:c7:f7:99:8f:3d:
         fa:04:49:d7:58:c8:0b:42:9d:ca:b2:57:a4:bd:de:85:bf:21:
         1f:88:f4:6e:28:c4:15:a0:0c:1e:22:bf:d0:1e:71:d1:b6:f2:
         7f:0f:37:bf:ac:d8:0d:1a:f9:7d:5f:b7:6b:16:05:97:15:58:
         97:c0:14:c2:5c:3e:15:7c:0e:2e:c8:74:c9:55:71:67:e3:ff:
         98:5d:86:88:79:52:cf:ab:3d:c6:83:63:a9:7f:04:69:bd:2a:
         33:b2:26:ca:eb:4b:12:f7:7b:16:4c:fb:6f:b9:12:e2:ac:31:
         68:23:d1:b0:17:92:c1:19:19:c4:4c:59:4f:e2:78:bc:6d:ce:
         fc:7e:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:05:39 2025 by rpki-client