This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft
File:                     597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json)
Hash identifier:          HHhx0WwIUbJ3WLpD7P33bMMXMiaptTXIbXcauedNOaE=
Subject key identifier:   79:EA:A3:46:F7:69:CF:4C:9C:44:4F:E7:D6:14:2A:03:05:D8:C5:FD
Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03
Certificate issuer:       /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03
Certificate serial:       6B71B40DF4D18AD6BE8994EC2A277FE9082C3BEA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft
Manifest number:          0106
Signing time:             Sat 06 Dec 2025 07:21:01 +0000
Manifest this update:     Sat 06 Dec 2025 07:16:01 +0000
Manifest next update:     Tue 09 Dec 2025 08:13:01 +0000
Files and hashes:         1: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: NFZBFKl86zY8ysHPZj/XRhvXdD57xujiJ0KoHC3uyVk=)
                          2: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: 0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl
                          rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 08:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:71:b4:0d:f4:d1:8a:d6:be:89:94:ec:2a:27:7f:e9:08:2c:3b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03
        Validity
            Not Before: Dec  6 07:16:01 2025 GMT
            Not After : Dec  9 08:13:01 2025 GMT
        Subject: CN=79EAA346F769CF4C9C444FE7D6142A0305D8C5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:02:39:b4:69:54:0e:c3:76:86:22:2f:36:
                    c1:fe:f3:ad:a0:c2:12:29:77:b1:cb:a8:a5:ad:53:
                    89:b9:5b:15:98:0a:b2:67:01:a4:db:13:19:0e:81:
                    74:af:d9:94:bb:d9:bb:86:04:f9:8e:98:ec:36:ee:
                    da:57:68:19:29:c6:dd:31:04:26:b8:65:c2:5b:c2:
                    18:e1:b2:09:ce:0d:3e:dc:6d:8b:b4:6b:cd:ee:58:
                    ae:e3:ec:4e:82:c0:e6:f0:2d:56:be:d4:71:3d:54:
                    62:bf:13:3d:50:7e:ec:82:4f:9e:6c:2c:ca:df:b5:
                    c3:29:5a:1d:4d:d0:23:87:d4:58:aa:0a:11:d7:79:
                    97:a8:06:59:17:39:43:81:ec:25:34:b9:90:bc:e5:
                    8a:d4:28:a7:62:75:99:77:87:d0:be:4a:99:93:dd:
                    cc:f6:71:d7:1e:9a:98:d4:9c:c8:05:18:61:c7:3a:
                    3f:0d:56:64:89:29:ad:6a:0a:e9:d0:f1:c4:7a:c1:
                    f5:41:e4:d7:50:a9:2e:02:4f:e3:fa:89:67:9e:70:
                    f4:3b:6f:b4:0a:25:dc:8c:32:5d:4a:a9:4e:aa:b5:
                    cf:61:a5:1b:c7:84:a2:61:03:1b:85:ae:fa:37:d2:
                    ad:e4:04:ef:64:5e:89:30:35:40:a4:9b:35:ad:04:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EA:A3:46:F7:69:CF:4C:9C:44:4F:E7:D6:14:2A:03:05:D8:C5:FD
            X509v3 Authority Key Identifier:
                keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:9f:3b:e0:89:72:a3:e9:74:b3:78:5d:3e:29:7a:3f:a8:
         0a:86:05:99:6c:55:64:61:bc:18:af:f8:5a:f2:57:c4:b9:8e:
         c0:1f:ec:3a:ce:cf:77:be:a1:49:76:02:04:06:2a:47:8b:ad:
         00:26:c3:f1:28:63:50:e4:c8:e0:44:2a:8f:18:9e:37:b9:51:
         e1:c3:3e:a1:38:60:33:86:c3:80:d7:a7:b0:9f:e9:d3:c0:2b:
         dd:f5:f7:36:8e:2f:f6:64:39:77:94:71:43:1e:f3:6f:a0:26:
         e3:20:4c:cb:63:1b:96:c0:36:6c:2d:a4:5c:e5:e7:19:be:83:
         30:d2:fc:30:60:50:9b:ab:16:0c:41:b1:c7:73:e6:9a:57:b1:
         ee:32:c8:81:fc:e2:df:6c:d4:8d:45:91:c3:73:34:7c:88:96:
         f5:8a:89:12:9e:d2:52:ae:c1:7e:1d:cf:f2:e0:bc:41:f4:ab:
         80:6b:f2:d5:0c:7b:4e:f0:3c:a6:d9:72:1a:63:49:ac:41:35:
         ae:d5:5c:80:59:2d:92:0b:03:25:5c:dd:8d:9e:fc:bf:0c:c5:
         7f:7e:af:01:00:8b:88:26:52:04:72:3b:c4:6a:76:c0:ba:47:
         8a:7c:25:91:e5:92:63:b3:23:c7:62:78:39:69:3c:45:fc:fb:
         9c:ae:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:57:37 2025 by rpki-client