This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft
File:                     6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json)
Hash identifier:          B4/YoPcMbk6ZlFxqYzYMIbiEFBCPyuSmmGEtwtPJInw=
Subject key identifier:   C4:A3:F7:18:93:7B:5C:3F:E8:47:72:50:B5:D7:B6:EC:76:09:DE:39
Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC
Certificate issuer:       /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC
Certificate serial:       6D4EB98A78967A60C2198EBBFC988AB702EEFAB2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft
Manifest number:          046C
Signing time:             Sat 06 Dec 2025 21:12:00 +0000
Manifest this update:     Sat 06 Dec 2025 21:07:00 +0000
Manifest next update:     Wed 10 Dec 2025 08:50:00 +0000
Files and hashes:         1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: 8tO5KCKX2WIrui4ljtVx+Hgx5cu92E6Z36f5YHlG0eg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl
                          rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4e:b9:8a:78:96:7a:60:c2:19:8e:bb:fc:98:8a:b7:02:ee:fa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC
        Validity
            Not Before: Dec  6 21:07:00 2025 GMT
            Not After : Dec 10 08:50:00 2025 GMT
        Subject: CN=C4A3F718937B5C3FE8477250B5D7B6EC7609DE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:b5:d6:7c:56:28:ff:2c:36:82:54:d2:49:
                    7d:05:7b:b5:45:e8:93:17:d9:63:f3:ff:77:ea:29:
                    df:bf:9c:3b:dc:2c:d6:2e:ef:33:49:0b:40:3d:68:
                    cd:bd:d8:16:01:1d:32:1f:48:d7:32:f7:27:c1:1b:
                    24:9f:53:ba:5e:cb:9e:c6:47:b9:2a:b4:07:ab:ef:
                    cb:fd:70:c7:d8:fe:8b:ea:21:d6:ae:fe:b9:62:a0:
                    92:c7:f0:97:fc:1f:e3:38:3d:af:06:8c:9c:07:7f:
                    4c:6c:45:19:84:41:94:cb:49:d7:fb:26:df:f7:18:
                    57:d5:b0:68:67:bb:57:2e:80:a5:6b:8e:d7:7d:4e:
                    33:a5:5f:79:45:83:d2:62:26:c6:51:ca:05:2d:1c:
                    c6:07:f1:0e:c7:1f:8a:71:5e:b2:fe:ee:e7:e1:93:
                    13:15:4e:0c:57:77:dd:fb:f3:55:c1:a8:39:3a:8d:
                    c2:f0:3a:d6:c9:b0:f5:d3:1d:5a:af:35:80:4d:11:
                    1b:74:8e:a5:65:4e:8b:02:ac:07:3e:23:4a:b3:43:
                    84:b9:01:7b:69:ca:d4:c1:f0:f1:42:fa:f1:b7:69:
                    b1:b0:8d:69:44:ac:16:64:83:ab:2c:a8:5f:ce:6d:
                    b8:ad:60:55:66:6d:58:92:6d:0d:17:92:33:af:d4:
                    f0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:F7:18:93:7B:5C:3F:E8:47:72:50:B5:D7:B6:EC:76:09:DE:39
            X509v3 Authority Key Identifier:
                keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:b4:d7:a8:df:83:5f:e4:9b:47:ea:e2:ae:ae:77:18:30:
         9b:57:d7:ad:5f:7a:1a:de:67:00:ca:ba:3f:94:f4:6f:d5:a3:
         05:7a:33:4d:98:bc:c5:e7:ef:9c:9d:0f:9a:b5:f1:ae:70:40:
         4a:27:6e:7f:15:f8:3a:97:cf:9e:2b:7e:06:21:cd:6f:2c:f3:
         12:2c:38:ab:08:6d:73:34:7a:4b:9e:6a:8d:6e:0d:da:46:d3:
         68:30:21:2c:ed:ba:72:71:c0:a2:cd:3f:fc:1c:a9:0c:3a:21:
         be:0d:be:e3:e1:f8:77:42:8c:e8:84:d4:b5:bc:aa:30:2d:6f:
         c5:a1:b0:41:01:a7:a2:11:a8:a6:b0:89:9e:b9:e0:4c:ca:55:
         c3:97:d1:cf:f8:cf:5d:21:3f:67:a1:17:90:9f:a4:ac:1a:ef:
         d0:ce:4a:d6:7f:8c:df:a3:bf:ee:e8:2a:4f:74:7a:3b:f3:77:
         1b:87:ee:9d:92:17:07:07:8b:28:12:57:d5:68:f2:43:c8:ca:
         57:fc:58:3a:79:c2:7c:bd:2f:59:45:00:f5:28:fd:02:dc:3f:
         58:3c:49:7c:82:d4:4f:7f:b9:04:9b:d5:20:f9:a0:cc:89:67:
         01:5b:e9:5b:eb:f8:96:d0:74:2b:3d:30:a1:fc:40:9b:13:6e:
         08:d0:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:00:48 2025 by rpki-client