This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft
File:                     74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json)
Hash identifier:          KlJhnrs4u1EXS4wezjE/0Q8s2/hQ5Ygsv9xDRSwnXnA=
Subject key identifier:   57:DE:1D:48:53:0C:BF:E7:4D:62:5B:76:DA:79:BE:1B:1D:F5:58:DB
Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13
Certificate issuer:       /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213
Certificate serial:       040DD355ACD5BA421FCD795E94DFA3DE180E32D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft
Manifest number:          0192
Signing time:             Thu 04 Dec 2025 18:32:00 +0000
Manifest this update:     Thu 04 Dec 2025 18:27:00 +0000
Manifest next update:     Mon 08 Dec 2025 01:50:00 +0000
Files and hashes:         1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: nYj2Kz0MY5guiRb1z73Fj/5gpGkfckpraBf8yU0pfIA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl
                          rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 01:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0d:d3:55:ac:d5:ba:42:1f:cd:79:5e:94:df:a3:de:18:0e:32:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213
        Validity
            Not Before: Dec  4 18:27:00 2025 GMT
            Not After : Dec  8 01:50:00 2025 GMT
        Subject: CN=57DE1D48530CBFE74D625B76DA79BE1B1DF558DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:ac:6e:30:18:5e:ea:08:b3:fa:b6:57:43:
                    ba:7f:45:4a:59:85:e2:45:98:7a:ea:9a:4d:b5:8a:
                    36:59:2f:2d:24:4b:42:2f:de:01:25:14:a1:29:bd:
                    cf:d0:8e:a9:e8:ad:2f:f7:89:da:4a:51:92:84:7b:
                    5a:d8:38:b7:39:55:61:51:c5:34:50:2e:cb:a9:90:
                    49:84:38:9b:82:e0:d9:6f:c9:53:db:55:90:6b:f6:
                    57:bd:10:80:c8:fd:70:33:33:3e:40:b3:cb:6e:dd:
                    2d:a5:89:ef:03:31:68:74:c7:71:45:ba:94:bf:56:
                    06:e6:b4:58:f2:bb:aa:a1:e9:e8:60:40:ac:6c:ea:
                    24:32:ea:ac:19:b7:fd:b8:f1:be:2e:cd:8b:60:0b:
                    02:36:b4:9f:17:b0:44:32:03:a7:d5:a2:08:eb:b8:
                    bf:ab:e2:54:8c:c0:9c:17:ed:39:9f:cf:9e:99:18:
                    39:44:82:c0:7d:c9:88:ce:d6:6a:65:09:1f:5f:a7:
                    50:0e:0e:f6:f9:ab:0e:f9:54:4b:d8:d7:17:76:dc:
                    50:5d:7e:9d:c0:15:ab:df:c1:00:30:25:5a:eb:ee:
                    55:07:d8:f5:ba:f5:b9:d8:77:63:af:77:35:31:97:
                    ec:c2:ab:92:f9:ce:4d:7f:f3:c9:f7:02:98:52:40:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DE:1D:48:53:0C:BF:E7:4D:62:5B:76:DA:79:BE:1B:1D:F5:58:DB
            X509v3 Authority Key Identifier:
                keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:1e:21:17:af:90:59:04:5e:f8:bc:9a:44:42:fe:4c:22:
         2d:00:5b:22:e2:ee:80:a7:53:06:a8:bf:8c:2b:29:77:b3:ee:
         88:67:4b:6c:04:27:3b:7b:79:e2:ec:c7:71:16:66:c0:36:ac:
         ae:62:78:86:5a:81:d0:be:5a:17:7c:95:23:e6:29:b5:aa:6d:
         61:48:28:ac:fb:61:99:fa:3b:23:f7:ba:b6:22:0b:bf:5c:6f:
         31:4f:62:16:7c:a3:fc:6a:4a:d3:9b:bf:22:b2:9c:0a:d3:45:
         87:a1:c5:cd:30:86:95:48:03:9c:33:69:03:ad:f8:98:84:3c:
         bc:81:d8:f3:f1:03:b4:46:9a:e2:9d:96:23:7d:9c:50:0a:96:
         53:13:0f:2d:51:16:51:84:de:6c:cf:4a:d8:4d:dd:0a:66:bf:
         b4:6f:db:0e:d2:d9:b7:40:7d:f6:14:f0:5b:93:be:76:5d:07:
         97:b4:74:30:c2:bd:4c:b4:1e:5c:09:1f:b0:ab:66:90:0f:33:
         09:b8:2e:a1:cb:6d:a8:4d:31:e0:f7:cb:19:21:93:6f:c6:2b:
         e7:de:c3:2f:68:df:94:63:84:b8:ef:ff:b4:9a:5a:4f:a2:7a:
         4e:58:31:28:53:33:e7:1c:67:c5:a5:67:78:dc:20:1c:57:c5:
         c8:69:f2:35
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBA3TVazVukIfzXlelN+j3hgOMtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB
QzY3MTIxMzAeFw0yNTEyMDQxODI3MDBaFw0yNTEyMDgwMTUwMDBaMDMxMTAvBgNV
BAMTKDU3REUxRDQ4NTMwQ0JGRTc0RDYyNUI3NkRBNzlCRTFCMURGNTU4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8KxuMBhe6giz+rZXQ7p/RUpZ
heJFmHrqmk21ijZZLy0kS0Iv3gElFKEpvc/QjqnorS/3idpKUZKEe1rYOLc5VWFR
xTRQLsupkEmEOJuC4NlvyVPbVZBr9le9EIDI/XAzMz5As8tu3S2lie8DMWh0x3FF
upS/VgbmtFjyu6qh6ehgQKxs6iQy6qwZt/248b4uzYtgCwI2tJ8XsEQyA6fVogjr
uL+r4lSMwJwX7Tmfz56ZGDlEgsB9yYjO1mplCR9fp1AODvb5qw75VEvY1xd23FBd
fp3AFavfwQAwJVrr7lUH2PW69bnYd2OvdzUxl+zCq5L5zk1/88n3AphSQIitAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUV94dSFMMv+dNYlt22nm+Gx31WNswHwYDVR0j
BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz
QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3
MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj
ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3
OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGqqHiEXr5BZBF74vJpEQv5MIi0AWyLi7oCn
Uwaov4wrKXez7ohnS2wEJzt7eeLsx3EWZsA2rK5ieIZagdC+Whd8lSPmKbWqbWFI
KKz7YZn6OyP3urYiC79cbzFPYhZ8o/xqStObvyKynArTRYehxc0whpVIA5wzaQOt
+JiEPLyB2PPxA7RGmuKdliN9nFAKllMTDy1RFlGE3mzPSthN3Qpmv7Rv2w7S2bdA
ffYU8FuTvnZdB5e0dDDCvUy0HlwJH7CrZpAPMwm4LqHLbahNMeD3yxkhk2/GK+fe
wy9o35RjhLjv/7SaWk+iek5YMShTM+ccZ8WlZ3jcIBxXxchp8jU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:09 2025 by rpki-client