This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft
File:                     F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json)
Hash identifier:          4tWtwVyoyJnIADNL6RIoCYUzhliL6a+udmo/11HajWI=
Subject key identifier:   77:5F:8B:C9:93:29:C5:14:44:E6:CB:FE:D8:3F:79:8E:89:64:4A:7D
Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C
Certificate issuer:       /CN=F21589FF449CC6950642FB6826CF5416005D740C
Certificate serial:       76B48666CC0D3524ED3B9C1B64B45CC99C1ECE36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft
Manifest number:          0151
Signing time:             Fri 05 Dec 2025 12:31:00 +0000
Manifest this update:     Fri 05 Dec 2025 12:26:00 +0000
Manifest next update:     Mon 08 Dec 2025 16:18:00 +0000
Files and hashes:         1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: SolQLQ9fV9rUA0w3diC5Ago+pq0LiUpraPzu17zxBuY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl
                          rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 16:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b4:86:66:cc:0d:35:24:ed:3b:9c:1b:64:b4:5c:c9:9c:1e:ce:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C
        Validity
            Not Before: Dec  5 12:26:00 2025 GMT
            Not After : Dec  8 16:18:00 2025 GMT
        Subject: CN=775F8BC99329C51444E6CBFED83F798E89644A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:2b:1c:f0:3b:d4:51:ae:aa:bf:26:44:2d:
                    45:29:1c:cc:6d:33:6a:4e:16:ab:b4:60:df:57:1c:
                    6e:dd:14:6d:b2:8b:10:c6:3a:06:0d:82:6e:3d:b6:
                    94:6e:8e:95:a9:57:0a:73:65:f0:e4:ff:33:c6:fb:
                    f9:3d:ca:07:5d:37:2e:46:ab:af:2c:0b:b2:f9:3f:
                    f6:10:87:b6:2c:7c:ed:dd:b9:fb:e2:5b:b7:da:3b:
                    15:86:e7:df:38:42:5e:2c:68:16:08:5b:77:d9:58:
                    4d:10:1c:a1:9e:58:52:85:10:30:88:ad:3c:dc:7b:
                    d0:52:c4:9e:39:4a:1f:74:c5:47:70:ef:00:cf:c9:
                    8a:dc:a6:82:0e:4b:1c:04:39:95:c6:ad:0a:30:a2:
                    db:b5:55:30:96:2f:da:46:de:dd:00:df:e4:7a:93:
                    05:64:17:3d:c4:2b:29:52:64:2a:01:fb:bb:0f:6d:
                    e8:56:cf:db:dd:cf:0e:1e:9e:27:3c:7d:58:a9:54:
                    d0:c2:a9:94:84:51:7c:25:cb:1c:47:14:2f:a1:6c:
                    08:53:c0:9f:4d:ca:d1:e9:d0:42:5f:76:8b:a5:09:
                    cb:c4:a7:c7:0e:00:a8:7a:aa:fe:2f:e3:eb:49:40:
                    c8:a1:3b:8a:28:3a:83:5f:32:0b:c4:98:ce:12:2a:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5F:8B:C9:93:29:C5:14:44:E6:CB:FE:D8:3F:79:8E:89:64:4A:7D
            X509v3 Authority Key Identifier:
                keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6a:07:5d:14:da:06:ab:04:8d:3b:a3:cc:15:05:a0:e8:f2:
         07:e5:14:50:1e:f4:98:1d:67:ad:7e:a3:f3:9d:7d:84:74:26:
         d4:01:96:ae:91:fb:83:68:d8:a0:1c:48:4d:49:52:b5:cc:20:
         78:dc:78:ae:a6:2b:4b:3e:69:2a:b9:0c:b3:5c:68:c9:1b:98:
         7d:bd:71:c9:c5:f3:c8:19:ba:81:85:6c:89:20:4e:97:d1:f0:
         78:ae:8a:74:c5:d8:c2:21:4b:38:f9:1e:84:16:fd:8e:95:c9:
         88:f1:5d:da:d9:d3:c9:58:3d:3c:55:22:9e:52:e5:b2:a7:ca:
         ab:0e:82:b2:ab:5a:a8:b9:a4:8b:88:33:87:69:46:b4:d8:2a:
         10:45:09:b7:4c:db:fa:55:fc:2a:8f:89:41:be:85:db:23:ef:
         8a:3b:92:7a:c1:f7:c7:31:3a:9e:52:f8:d4:29:a5:63:a6:ca:
         12:2e:49:85:81:09:03:dd:5c:ab:93:2b:1e:b6:1b:05:c3:03:
         ac:2d:00:5c:b5:da:db:bc:19:62:8d:f7:35:42:35:61:f3:a1:
         9c:2f:98:c2:d7:c8:fb:77:ad:48:c6:0a:3d:f0:75:42:e4:f3:
         b8:45:4e:61:aa:48:7b:98:e9:60:6e:0c:b0:a0:71:15:07:32:
         db:ee:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:16 2025 by rpki-client