This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
File:                     45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json)
Hash identifier:          mGIN3ji2cu1+Ni9bBR3XsewxAsbtQ2LDe+Uo3VlSfDs=
Subject key identifier:   CF:00:AF:3A:FD:1A:03:2E:D6:7F:C0:CE:42:E4:42:26:03:36:33:C7
Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD
Certificate issuer:       /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD
Certificate serial:       2BA741DD0581EF01848A2E537124DCD9E4BDB113
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
Manifest number:          0259
Signing time:             Sat 06 Dec 2025 22:32:30 +0000
Manifest this update:     Sat 06 Dec 2025 22:27:30 +0000
Manifest next update:     Wed 10 Dec 2025 03:25:30 +0000
Files and hashes:         1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: BO4i3E6mdVc1xyLNTJu7KdxCXocumLpTfX1sH9mjsRE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl
                          rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a7:41:dd:05:81:ef:01:84:8a:2e:53:71:24:dc:d9:e4:bd:b1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD
        Validity
            Not Before: Dec  6 22:27:30 2025 GMT
            Not After : Dec 10 03:25:30 2025 GMT
        Subject: CN=CF00AF3AFD1A032ED67FC0CE42E44226033633C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:9a:ac:88:9c:82:50:b4:49:14:84:40:98:
                    13:60:dd:ae:0f:7a:a0:4a:26:bb:ff:fa:2f:ae:33:
                    34:8c:35:da:c0:fc:b0:93:24:a3:cc:92:e0:83:ed:
                    b6:68:54:cd:73:61:b8:77:29:56:c1:fe:20:ea:f1:
                    10:17:da:ce:98:a4:fb:43:04:41:85:ba:db:4c:19:
                    e2:40:11:8f:dd:40:6b:98:d8:cf:2a:28:fa:6f:b0:
                    00:54:70:cb:60:67:01:95:db:3f:3a:37:d1:a6:34:
                    1c:10:75:e5:a3:14:35:b6:81:03:f2:aa:89:0e:c3:
                    f3:59:80:6a:2b:47:57:ad:3b:ea:84:61:8c:d2:c5:
                    7c:e2:c4:3d:a8:78:09:65:20:76:2f:f5:00:ce:0c:
                    53:70:50:2b:5e:71:69:c7:0e:ab:67:29:9b:b5:47:
                    5c:c9:05:59:07:ce:39:7b:0c:d5:fc:00:08:36:9c:
                    12:fc:cf:fa:93:06:05:53:a0:dc:ce:70:04:82:25:
                    8c:13:db:0f:40:f7:ed:6b:e9:97:84:00:30:00:86:
                    f9:61:1a:4c:32:46:7c:11:a1:46:87:84:a6:a9:33:
                    eb:20:6c:2a:cb:8c:bd:32:34:17:8a:25:04:6b:6a:
                    d4:69:3d:b2:66:69:26:ce:86:8e:49:fb:28:e9:fa:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:00:AF:3A:FD:1A:03:2E:D6:7F:C0:CE:42:E4:42:26:03:36:33:C7
            X509v3 Authority Key Identifier:
                keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:98:04:90:24:fe:61:a6:78:3e:6b:f6:51:c1:39:16:ba:e4:
         58:73:71:12:dd:9b:1e:85:72:08:fa:aa:67:31:df:85:7b:c6:
         8f:e7:a8:0f:b3:f7:65:f3:4b:79:70:73:37:23:b7:9f:28:95:
         15:be:d0:61:1a:23:85:e5:4e:b5:db:e5:32:73:96:74:8d:e0:
         e2:ef:8c:06:2d:1b:6e:90:86:42:ed:3b:c0:1f:e8:0d:3b:cc:
         d3:8d:e8:09:23:81:a2:8e:f3:6b:0e:86:63:14:1e:c3:b7:f1:
         a0:21:e4:58:ab:f9:f7:88:66:b6:7f:22:52:a4:0f:fa:6f:e1:
         46:b4:93:15:06:77:66:60:6d:e9:39:a6:af:e1:d8:07:37:28:
         30:e4:d9:e1:01:d2:67:37:9a:3a:35:51:a2:43:51:03:08:46:
         61:c8:db:45:b5:71:0a:d4:47:d6:d3:33:ea:11:ac:e1:1b:74:
         a4:87:0f:1e:f0:58:44:97:c0:90:4c:1f:23:70:2a:64:0f:eb:
         c7:6b:1f:5e:d0:b0:59:6e:10:2c:d5:ce:9e:00:93:38:6f:04:
         cc:06:b6:57:dd:af:84:56:c0:27:3a:b0:1c:89:0f:2d:2f:82:
         4f:a1:8c:5d:1a:be:b5:50:6e:30:34:1f:4f:59:51:6a:60:d3:
         dd:b9:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:45:04 2025 by rpki-client