This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
File:                     ABF793B534686EC2D5820CF153E43AAEF088BE41.mft (raw, json)
Hash identifier:          0XBrbJWCoF5HEZM8aC23qwxFvzSlxHgjdX8nOBfa3yM=
Subject key identifier:   D2:D4:0D:5B:FA:46:21:42:EF:9A:C1:C3:2F:55:E7:E7:00:F1:5B:66
Authority key identifier: AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41
Certificate issuer:       /CN=ABF793B534686EC2D5820CF153E43AAEF088BE41
Certificate serial:       2846B084C7909D2B506A8E454CE41C20938F642B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
Manifest number:          F2
Signing time:             Sat 06 Dec 2025 03:21:06 +0000
Manifest this update:     Sat 06 Dec 2025 03:16:06 +0000
Manifest next update:     Tue 09 Dec 2025 05:56:06 +0000
Files and hashes:         1: ABF793B534686EC2D5820CF153E43AAEF088BE41.crl (hash: D9DGvugVZOsuvySrbiMG+cy0+bRmnIFkwKFRYYc+eNI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl
                          rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:46:b0:84:c7:90:9d:2b:50:6a:8e:45:4c:e4:1c:20:93:8f:64:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF793B534686EC2D5820CF153E43AAEF088BE41
        Validity
            Not Before: Dec  6 03:16:06 2025 GMT
            Not After : Dec  9 05:56:06 2025 GMT
        Subject: CN=D2D40D5BFA462142EF9AC1C32F55E7E700F15B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:e2:e7:95:31:45:42:f8:dd:11:13:e4:9d:
                    e5:a3:1d:0f:aa:91:9b:10:9d:4e:1b:bc:2a:2f:0c:
                    5a:62:e4:30:9e:04:9f:d6:2f:2e:19:80:69:fa:7b:
                    6d:e4:59:5b:e1:7c:ae:c0:5e:63:11:62:43:ba:f5:
                    7e:e7:41:c5:27:91:33:b8:82:61:b2:c8:c6:f0:2d:
                    03:00:a4:de:f2:78:1b:8a:79:36:80:0f:14:58:91:
                    e7:37:6a:71:c5:9f:d4:f7:fb:85:93:d2:fb:c9:47:
                    69:56:ff:bd:d7:bf:de:1e:e7:18:b6:fd:c2:f0:ed:
                    25:a3:9a:b4:72:7a:8a:7c:4a:ac:6f:83:60:a6:dc:
                    6a:f2:5f:cc:e3:5f:e5:7f:5a:f7:f8:b9:20:ba:3d:
                    4c:a0:dc:2d:80:41:98:56:21:5f:60:ec:52:b6:ef:
                    d7:e6:fd:94:c0:7a:56:63:20:21:df:1d:da:73:3c:
                    26:9a:78:7d:45:f7:68:e2:c3:85:22:9d:d1:b4:cf:
                    d5:f9:13:0a:bd:d0:90:10:8d:66:3f:43:5d:50:ab:
                    13:bf:ad:d4:9c:21:12:31:91:38:ba:e9:04:00:f3:
                    65:9b:81:b2:3e:03:e6:c9:5e:73:b2:94:3b:b5:66:
                    f1:cc:1d:cd:63:ca:f9:74:ea:f0:d5:07:68:ce:6e:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D4:0D:5B:FA:46:21:42:EF:9A:C1:C3:2F:55:E7:E7:00:F1:5B:66
            X509v3 Authority Key Identifier:
                keyid:AB:F7:93:B5:34:68:6E:C2:D5:82:0C:F1:53:E4:3A:AE:F0:88:BE:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ABF793B534686EC2D5820CF153E43AAEF088BE41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/ABF793B534686EC2D5820CF153E43AAEF088BE41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ae:ae:fc:70:15:c1:7d:6a:cf:ff:a8:19:99:c3:d8:00:a3:
         34:c4:75:e0:d5:c0:06:ad:b9:a2:3f:bb:c5:0a:ae:30:c9:cf:
         f8:e2:96:a0:93:58:2c:19:fd:3a:04:33:4b:77:ba:07:ab:3d:
         1b:10:47:cd:10:a6:c5:b3:03:37:08:65:1d:95:a6:5a:fa:66:
         c5:db:49:ad:ff:87:ad:72:19:3c:ea:21:87:5b:6b:c8:45:0a:
         e9:e0:7e:24:7d:0a:93:75:59:43:f3:23:db:0d:5d:27:0e:a9:
         f9:4f:12:a3:89:2c:dd:d0:a9:40:00:c5:19:c4:79:ef:a1:f7:
         12:5c:e6:c3:50:3e:2a:8c:1a:2f:f9:0a:7c:0e:66:5b:a0:12:
         15:3e:d5:6f:1f:56:02:b9:de:99:f4:30:c6:70:44:18:97:67:
         c2:13:55:c7:1f:41:e0:9f:59:17:69:e4:d8:31:d4:22:31:80:
         f0:5d:35:64:67:32:b1:4a:36:2e:d4:8f:5f:89:12:c8:b3:16:
         8b:95:e6:72:60:35:3f:fb:b6:d9:ce:10:48:c4:72:4c:39:bd:
         5f:55:a5:89:35:a6:72:84:f7:94:8f:56:fa:a1:21:3d:ad:96:
         cb:b1:48:c5:46:7f:6d:f6:36:02:d1:8d:00:fd:29:81:8c:95:
         9e:4d:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:23:01 2025 by rpki-client