This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft
File:                     98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json)
Hash identifier:          AnxwznLqi93Hwt9EJBhP3OziUQCcPQoRUbCDrW71NUs=
Subject key identifier:   64:47:E1:0F:D9:01:50:10:5F:4F:E6:CC:F7:F3:80:3A:C9:E5:02:4B
Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43
Certificate issuer:       /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743
Certificate serial:       2F39E5260F9FF20CDCB9BD5E99FD59475B55BE66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft
Manifest number:          024D
Signing time:             Sat 06 Dec 2025 08:40:54 +0000
Manifest this update:     Sat 06 Dec 2025 08:35:54 +0000
Manifest next update:     Tue 09 Dec 2025 15:02:54 +0000
Files and hashes:         1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: 5/6nWvDsfeHPkaYV34GTkdN3lZr55Ptx/DRrTK4sM5c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl
                          rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:39:e5:26:0f:9f:f2:0c:dc:b9:bd:5e:99:fd:59:47:5b:55:be:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743
        Validity
            Not Before: Dec  6 08:35:54 2025 GMT
            Not After : Dec  9 15:02:54 2025 GMT
        Subject: CN=6447E10FD90150105F4FE6CCF7F3803AC9E5024B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:df:c7:c7:ec:8b:a3:16:a4:b9:42:d4:77:
                    37:e2:6b:8f:bc:74:ff:81:0e:5b:70:96:f6:ee:f4:
                    a0:8f:45:6c:07:5e:d6:bd:cf:9d:1a:69:a3:a2:de:
                    33:57:76:95:ba:75:83:91:1f:c0:bf:4d:69:cb:b1:
                    cd:fb:fc:51:ed:1b:55:c5:68:49:23:d2:94:cd:39:
                    e0:f8:d1:b5:70:bd:64:9b:ea:f9:45:c3:5a:71:b5:
                    bf:cf:c9:0b:df:36:62:9d:8f:58:19:a9:19:2f:db:
                    bb:c1:9d:1d:10:a3:27:42:06:51:56:07:69:26:90:
                    dd:fe:44:2e:a2:8c:9b:ea:b8:84:20:47:7c:f2:74:
                    1b:10:13:ad:51:1f:3d:aa:ec:da:d0:3e:0b:a7:34:
                    e1:b7:15:7e:6b:c7:4b:26:2f:89:1f:7c:9f:8e:37:
                    73:2e:2c:e4:9c:b0:b0:4c:51:c3:fa:0c:f0:c1:69:
                    a4:fb:cc:e8:66:81:77:d8:d9:8a:b8:bd:68:11:0e:
                    56:41:89:5e:5f:88:72:02:08:62:4b:f3:fc:30:b2:
                    c8:61:61:86:8b:7e:ad:d9:d2:c5:a3:47:47:a4:04:
                    ea:d7:c6:da:6e:15:a0:f5:08:21:46:f8:fb:68:af:
                    fb:35:b7:92:95:83:dc:03:fe:d6:6e:c8:d1:90:39:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:47:E1:0F:D9:01:50:10:5F:4F:E6:CC:F7:F3:80:3A:C9:E5:02:4B
            X509v3 Authority Key Identifier:
                keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:70:b2:72:96:aa:c7:e6:c8:74:df:c8:d7:f9:e6:70:16:39:
         80:3d:2e:2a:dc:2d:d6:3e:14:79:ff:2b:1e:29:2f:cc:c7:c8:
         aa:0a:c4:d1:a3:c4:75:be:51:69:82:e9:fd:37:25:ea:b6:67:
         e0:04:51:78:87:be:0a:7b:a3:3d:78:57:48:bd:00:53:7e:93:
         a7:4b:2e:5a:ae:c5:5b:87:b9:78:97:08:24:82:07:cf:e6:6b:
         93:84:d6:7f:70:a3:46:e3:7f:b8:39:4e:73:6d:e4:f5:33:20:
         45:86:41:60:0e:ce:19:44:d8:e5:c5:57:4c:33:48:e5:c2:ee:
         11:01:0a:68:87:dd:b9:21:98:07:13:76:8f:42:19:1d:66:aa:
         bb:3c:7c:15:0b:8a:a2:40:38:d0:f6:b4:07:87:b5:f8:dc:5f:
         9f:c7:87:b2:18:3f:eb:c4:1b:42:1a:b3:e9:fd:a9:f3:8d:9f:
         f6:0e:60:b4:97:e7:ce:73:e1:34:37:36:02:12:ce:63:3f:0f:
         7a:e9:e5:2d:16:55:30:e2:a0:35:b6:54:7b:d5:c0:e8:e2:a3:
         a9:16:f1:eb:d1:a2:13:79:e8:4d:da:6b:e9:d3:08:72:b0:f3:
         3c:9a:63:87:8f:c6:71:6f:b7:8a:72:ba:64:f6:58:74:29:2b:
         62:a5:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:54:44 2025 by rpki-client