This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
File:                     1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json)
Hash identifier:          F28aorj3/e2G9VJvb52/uqdQXFx9w116ujRUNws6Vxk=
Subject key identifier:   B4:CA:DD:ED:E8:17:9B:E9:44:A7:D4:0C:73:EC:BC:FE:47:91:EB:90
Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3
Certificate issuer:       /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
Certificate serial:       01BFCF1DA3782F3CC23469EADCE7BE34CBB97163
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
Manifest number:          039E
Signing time:             Fri 05 Dec 2025 21:11:49 +0000
Manifest this update:     Fri 05 Dec 2025 21:06:49 +0000
Manifest next update:     Tue 09 Dec 2025 01:59:49 +0000
Files and hashes:         1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: Y/k/LGDjTaVvpW5Eu1Uce4mYEkaoJKLQEs0sxjV/bns=)
                          2: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl
                          rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 01:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bf:cf:1d:a3:78:2f:3c:c2:34:69:ea:dc:e7:be:34:cb:b9:71:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
        Validity
            Not Before: Dec  5 21:06:49 2025 GMT
            Not After : Dec  9 01:59:49 2025 GMT
        Subject: CN=B4CADDEDE8179BE944A7D40C73ECBCFE4791EB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:9b:5b:0a:1d:b0:9a:5f:3f:9e:b7:93:dd:
                    32:9f:cb:5d:da:d3:11:cd:71:e9:84:d2:3f:cf:f3:
                    1b:ef:fc:0b:c7:38:81:34:30:f8:ec:8a:23:c3:79:
                    d0:24:68:ce:ad:ac:c4:97:3c:eb:5a:22:2a:22:6b:
                    e0:39:5c:13:a4:5a:19:36:65:94:b8:6a:c7:19:84:
                    45:b4:30:75:46:7a:19:ba:da:52:d2:cf:3c:8d:55:
                    43:c7:6d:29:ff:75:fd:1e:a5:e4:b9:26:4a:f3:55:
                    e9:50:d9:ad:67:f0:fc:54:af:50:f1:1b:76:70:46:
                    6b:17:70:71:40:31:f0:48:a6:3d:5a:27:54:84:6f:
                    1c:33:87:a5:ed:00:01:7b:aa:43:34:65:a1:5c:7c:
                    9e:eb:38:2c:3a:cd:44:12:0d:36:d1:58:34:d0:91:
                    fc:23:35:db:86:de:50:2e:e3:f5:cd:08:43:cc:27:
                    86:2e:51:7f:c2:df:60:2e:ae:40:44:5b:60:6e:5b:
                    6a:c4:ee:d2:1a:92:88:3b:b9:d5:b9:1b:2e:c8:64:
                    26:71:5c:5e:13:41:99:f8:7e:27:2d:e6:fd:45:5b:
                    f7:e6:d9:10:16:19:b5:a6:a6:72:31:e6:86:86:c8:
                    e7:62:f7:b9:7a:d2:3f:e3:86:b2:5e:80:58:f7:2d:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:DD:ED:E8:17:9B:E9:44:A7:D4:0C:73:EC:BC:FE:47:91:EB:90
            X509v3 Authority Key Identifier:
                keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:da:d8:9d:84:17:5d:3d:38:85:cf:34:ed:57:ac:d8:08:77:
         40:bf:21:a0:a8:4c:d3:5d:46:26:c5:4c:66:a4:8d:05:88:fd:
         ee:95:1f:1d:07:4a:cc:54:2f:40:99:cf:74:d4:17:62:d2:8c:
         49:5f:25:12:41:51:b5:7a:58:54:dd:9a:39:01:01:72:7d:28:
         62:4b:ac:34:54:20:4c:65:c5:78:44:50:91:6f:89:7a:81:3d:
         d7:81:f7:e4:0a:33:55:76:bc:ef:7b:6e:c4:75:62:36:e6:c9:
         db:8d:25:25:c7:ea:56:e3:0a:c3:19:bf:ae:af:fd:8f:62:73:
         51:b8:ae:37:bb:f4:51:a8:35:59:51:21:d4:6d:2e:08:b5:1a:
         11:bb:a2:07:ce:b1:6c:2f:08:d0:2f:96:4a:17:c1:f3:dd:8a:
         06:8a:cb:cc:e9:d6:14:d7:31:0d:ed:11:48:e0:19:c1:e1:b7:
         27:94:d6:6c:b5:2f:d9:60:01:70:83:db:7a:86:8a:78:64:54:
         26:52:59:c0:0e:f9:71:20:65:fc:32:1f:be:01:ca:a0:a8:57:
         0e:d5:53:12:aa:c0:67:e0:8d:72:fd:4a:e3:10:ae:6c:05:58:
         c4:39:8d:ea:b8:1d:2a:20:5e:e4:19:a0:17:55:f4:63:d5:27:
         7c:4c:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:15 2025 by rpki-client