This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
File:                     A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json)
Hash identifier:          RsTZTSq8rDKamuXVAathaZ/FSKovtam8xi/dCVWIDgA=
Subject key identifier:   21:16:3C:32:61:76:8C:F0:3E:5C:9C:01:7E:12:CD:7D:E8:CC:E0:F7
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Certificate issuer:       /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial:       0F8D763E230EA01ECEDBB48951AC5BECB9A7E794
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
Manifest number:          0112
Signing time:             Fri 05 Dec 2025 23:11:20 +0000
Manifest this update:     Fri 05 Dec 2025 23:06:20 +0000
Manifest next update:     Tue 09 Dec 2025 05:58:20 +0000
Files and hashes:         1: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: 2A08KZW30Dz58yvg93VVEBRgdnxNB3RpuYsCyC8Ywd4=)
                          2: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
                          rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8d:76:3e:23:0e:a0:1e:ce:db:b4:89:51:ac:5b:ec:b9:a7:e7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
        Validity
            Not Before: Dec  5 23:06:20 2025 GMT
            Not After : Dec  9 05:58:20 2025 GMT
        Subject: CN=21163C3261768CF03E5C9C017E12CD7DE8CCE0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:bd:61:43:f2:18:55:4e:75:9d:61:66:3d:
                    e6:12:8f:be:c0:1b:d5:73:04:d8:51:8a:8d:0b:a5:
                    95:84:99:21:ad:6a:2b:4a:4b:1e:55:bf:ef:0a:1b:
                    eb:13:2d:4e:9b:b0:f8:32:f2:92:44:e7:89:d0:cc:
                    e1:f1:d3:bc:c1:5d:16:7b:47:dc:6a:92:d5:de:54:
                    77:98:99:55:c0:dc:be:84:42:85:bb:d0:b0:e0:da:
                    5e:fa:51:f9:be:c4:e8:84:c7:f0:19:73:c6:e4:97:
                    a0:d2:ec:ea:20:08:b5:18:8a:35:06:cd:93:a0:3a:
                    ce:e6:fc:1e:72:d3:7e:08:01:0d:ae:1e:85:da:dc:
                    4c:e0:88:12:d7:23:2a:96:05:e1:72:12:a4:1a:f2:
                    5b:72:e3:35:c2:35:bc:7e:dc:d6:53:7b:f6:2d:5d:
                    9f:2b:23:79:2f:a5:2c:f0:a9:4f:16:17:68:d7:f2:
                    7e:01:c7:e2:ce:53:f1:47:00:28:2c:8c:4d:87:11:
                    03:85:51:6c:e1:a3:a4:7d:c2:bb:b1:f9:1d:2e:f5:
                    e1:2b:da:51:30:6d:f5:0d:8c:92:c5:95:55:4a:51:
                    e7:56:cf:23:0f:86:a8:80:55:49:89:54:30:36:76:
                    26:0e:0e:20:07:52:c9:7e:d6:a0:a6:52:2a:da:4e:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:16:3C:32:61:76:8C:F0:3E:5C:9C:01:7E:12:CD:7D:E8:CC:E0:F7
            X509v3 Authority Key Identifier:
                keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a3:98:2b:35:d8:da:54:33:41:3f:e7:ab:d4:99:c4:62:ec:
         b2:ad:fc:71:e8:e6:e8:83:17:cf:ee:1f:bd:56:27:19:8a:a7:
         5a:8a:6e:e9:4d:8d:38:a8:92:87:9a:fd:59:1b:c0:b0:10:6f:
         b5:4c:6f:4a:7c:6c:d4:b4:87:55:d3:1a:3e:38:8c:c9:05:13:
         96:6b:9a:63:cf:e5:43:06:e9:52:83:c9:a6:30:6d:58:c6:aa:
         f1:88:0a:29:d6:50:f5:3d:91:0f:fe:ca:bc:0b:22:0a:02:92:
         17:cd:e2:f3:02:ab:76:d9:bb:14:ee:87:41:25:64:8d:52:ff:
         40:ec:f7:72:06:fe:02:a5:2e:5c:cb:bc:40:59:a4:18:97:01:
         a4:69:23:ad:d2:4f:bc:89:91:62:8d:fb:79:8a:ab:1b:ee:74:
         2c:4a:68:b3:f4:2e:7a:00:97:63:91:8f:01:06:ad:bc:2f:43:
         0f:a7:d2:b9:1e:63:59:07:45:df:08:fe:8e:d8:51:82:10:e2:
         ab:a9:11:55:a4:11:5f:9f:94:95:af:e9:64:ac:be:d4:d2:77:
         d0:b5:27:1b:6b:40:e6:83:73:6a:f4:b6:b7:88:d9:2d:88:06:
         f1:9a:97:4f:68:9e:41:5e:b3:61:3b:54:56:95:f1:ee:d1:37:
         0f:01:a4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:05:09 2025 by rpki-client