This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
File:                     F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json)
Hash identifier:          cjtyFP88IhWwoYYrVO4JiMW43zm93mwpMJt7xlj7zDw=
Subject key identifier:   61:CC:C9:79:AB:12:F1:6E:11:27:2D:EA:7E:22:B0:22:28:10:6B:B8
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Certificate issuer:       /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial:       357B4727AF9B14C2ECFE43E094C9380FCF4ED58B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
Manifest number:          0491
Signing time:             Tue 16 Dec 2025 16:11:42 +0000
Manifest this update:     Tue 16 Dec 2025 16:06:42 +0000
Manifest next update:     Fri 19 Dec 2025 22:21:42 +0000
Files and hashes:         1: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: VtsqIR+6XCapsrR1+LNzII3JxKfgTjSTY1moCHTzqBg=)
                          2: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: tWY/6umjYIKYO4Yi6unWY6z8ANffH061XFtZ500p3RI=)
                          3: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: YDn+UkbOnA22nwNbzvw75sJ6kzbC7kgwQ8ntSkUIEQE=)
                          4: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: 0BDcpOLIRVqH1LqrD2HTtyqqS166kEUq73to5WDYQTw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
                          rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 22:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7b:47:27:af:9b:14:c2:ec:fe:43:e0:94:c9:38:0f:cf:4e:d5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
        Validity
            Not Before: Dec 16 16:06:42 2025 GMT
            Not After : Dec 19 22:21:42 2025 GMT
        Subject: CN=61CCC979AB12F16E11272DEA7E22B02228106BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7d:9e:dd:49:03:58:88:06:17:8d:42:59:d8:
                    da:cc:b9:f2:4e:68:f9:e4:52:f5:6b:8a:e4:11:b1:
                    62:4c:6e:01:1c:2d:35:4a:e7:a6:79:db:51:f7:b5:
                    7f:c6:c1:28:1b:36:27:27:4b:3b:9f:98:c2:a1:9d:
                    a5:66:85:dc:7d:2c:a7:a3:80:0b:cf:39:b6:47:62:
                    ed:bf:6b:9b:b4:4e:fb:03:b7:2e:7c:18:ab:c3:c0:
                    e2:ed:7f:f4:dc:89:ea:4a:d0:fa:61:4b:d8:99:42:
                    94:38:96:de:69:b2:a5:b0:e7:02:cb:06:55:a2:e8:
                    7e:51:9d:07:9e:68:21:2d:66:3b:f4:f5:76:58:29:
                    d2:e6:7a:23:3f:d1:ad:a5:f9:4e:cc:79:26:0f:79:
                    f7:28:f0:7b:8a:a7:cc:b1:52:c1:5a:7a:48:69:ca:
                    67:ef:a7:95:b4:5e:03:ca:3f:ca:31:f6:89:6e:f0:
                    d8:78:d9:00:19:56:29:6a:a9:36:93:c2:a6:19:3c:
                    9c:45:26:b5:47:3a:dc:5a:fe:7b:30:c3:65:d1:88:
                    86:cd:46:4c:0d:98:9a:ba:f0:e9:70:37:dc:5f:b1:
                    cb:4a:8f:48:2e:c2:68:cd:1e:b9:1c:5c:09:c2:34:
                    10:61:dd:2d:55:a9:07:61:22:a8:d8:55:38:5b:3a:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:C9:79:AB:12:F1:6E:11:27:2D:EA:7E:22:B0:22:28:10:6B:B8
            X509v3 Authority Key Identifier:
                keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:35:9e:7b:df:58:03:52:dd:fb:28:63:65:28:57:f0:34:c3:
         ca:15:b2:37:e3:fd:12:4f:94:44:9f:2f:84:9c:2e:96:be:88:
         8b:18:5c:8e:f5:9d:2f:09:63:01:96:b7:fb:a4:6e:8e:96:ea:
         38:f4:7f:df:bc:77:3b:b9:48:53:bd:3a:0d:46:79:1e:6f:80:
         eb:55:8c:9f:c9:06:be:f4:45:ea:0d:f4:9f:f1:a4:40:b4:ea:
         8d:43:e3:7a:dd:7f:6e:47:26:30:a7:f9:a2:37:d3:7d:f6:96:
         6d:70:14:db:78:4e:d4:56:dc:5c:79:3d:a4:3a:e0:30:7b:43:
         0f:c0:6c:78:2d:cc:3f:43:1d:14:72:b2:63:88:bd:5c:72:e4:
         38:68:0c:ea:60:46:80:e5:89:cd:7c:74:77:59:f4:a0:77:c9:
         fe:3f:d6:50:83:b2:15:2f:af:94:d8:51:cf:93:af:c3:0c:17:
         72:fb:15:a1:3a:7e:c5:7f:fa:92:9d:0f:cc:17:9d:9f:77:30:
         ff:0a:ba:98:31:49:47:55:3f:8d:2d:ab:fa:75:94:8f:c6:24:
         b9:06:9e:06:ba:3c:d5:a2:b0:84:2c:70:ba:30:65:0f:bb:99:
         60:48:66:a3:b1:aa:c9:b0:2e:36:b3:9b:95:33:9d:63:85:2f:
         4d:74:f5:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNXtHJ6+bFMLs/kPglMk4D89O1YswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy
MEU4MkZCQzAeFw0yNTEyMTYxNjA2NDJaFw0yNTEyMTkyMjIxNDJaMDMxMTAvBgNV
BAMTKDYxQ0NDOTc5QUIxMkYxNkUxMTI3MkRFQTdFMjJCMDIyMjgxMDZCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfZ7dSQNYiAYXjUJZ2NrMufJO
aPnkUvVriuQRsWJMbgEcLTVK56Z521H3tX/GwSgbNicnSzufmMKhnaVmhdx9LKej
gAvPObZHYu2/a5u0TvsDty58GKvDwOLtf/TciepK0PphS9iZQpQ4lt5psqWw5wLL
BlWi6H5RnQeeaCEtZjv09XZYKdLmeiM/0a2l+U7MeSYPefco8HuKp8yxUsFaekhp
ymfvp5W0XgPKP8ox9olu8Nh42QAZVilqqTaTwqYZPJxFJrVHOtxa/nsww2XRiIbN
RkwNmJq68OlwN9xfsctKj0guwmjNHrkcXAnCNBBh3S1VqQdhIqjYVThbOln5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYczJeasS8W4RJy3qfiKwIigQa7gwHwYDVR0j
BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4
RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4
MkZCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh
NjktY2Q4YmZmZTRhNTNkLzAvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRC
QTQyMEU4MkZCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMA1nnvfWANS3fsoY2UoV/A0w8oVsjfj/RJP
lESfL4ScLpa+iIsYXI71nS8JYwGWt/ukbo6W6jj0f9+8dzu5SFO9Og1GeR5vgOtV
jJ/JBr70ReoN9J/xpEC06o1D43rdf25HJjCn+aI30332lm1wFNt4TtRW3Fx5PaQ6
4DB7Qw/AbHgtzD9DHRRysmOIvVxy5DhoDOpgRoDlic18dHdZ9KB3yf4/1lCDshUv
r5TYUc+Tr8MMF3L7FaE6fsV/+pKdD8wXnZ93MP8KupgxSUdVP40tq/p1lI/GJLkG
nga6PNWisIQscLowZQ+7mWBIZqOxqsmwLjazm5UznWOFL0109bs=
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:35:13 2025 by rpki-client