This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft
File:                     104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json)
Hash identifier:          3xnqG+/u5FX/4f6vvzPQT6dVcUgVJAL/ghFIBeaHzb0=
Subject key identifier:   5D:A3:BD:A9:D5:4F:64:B5:D2:6B:E3:A3:00:54:69:0C:A2:DD:B6:54
Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01
Certificate issuer:       /CN=104297C14501204E355A97BD8ED42B1FB7C82B01
Certificate serial:       6C26A140FEC9B6502C2F692BDF6074D278A750E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft
Manifest number:          0258
Signing time:             Fri 05 Dec 2025 15:41:48 +0000
Manifest this update:     Fri 05 Dec 2025 15:36:48 +0000
Manifest next update:     Tue 09 Dec 2025 00:34:48 +0000
Files and hashes:         1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: 48cY7R8Bwle+viCdOVQJEatkWjD8LcIu1eh2f5tYWGY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl
                          rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 00:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:a1:40:fe:c9:b6:50:2c:2f:69:2b:df:60:74:d2:78:a7:50:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01
        Validity
            Not Before: Dec  5 15:36:48 2025 GMT
            Not After : Dec  9 00:34:48 2025 GMT
        Subject: CN=5DA3BDA9D54F64B5D26BE3A30054690CA2DDB654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0c:eb:32:d3:d4:17:ed:16:80:6a:63:fe:58:
                    7b:e3:69:a9:87:91:f7:4b:f8:52:e3:e9:3a:c1:c4:
                    ee:71:a2:e2:58:07:2b:38:92:c6:1a:0b:2e:b5:09:
                    7f:6b:8c:5f:f8:69:1b:85:59:b2:e9:17:1a:e5:04:
                    e8:c8:ee:ed:9f:d2:d9:a9:f2:55:78:53:89:5c:82:
                    d3:d6:44:13:68:82:f8:c2:42:a6:b9:82:d6:9a:c2:
                    ea:12:10:6c:3a:c0:8e:3a:89:e6:8d:8a:68:46:f9:
                    7f:78:3b:b4:67:14:33:f7:de:c1:26:4c:76:51:fb:
                    03:55:f6:b6:95:c4:56:0c:a4:65:73:06:6f:5f:66:
                    2b:96:8b:5a:d7:62:bf:b6:f6:f0:b0:4d:3a:bf:16:
                    9c:f6:33:c3:a0:2f:58:30:5b:01:a9:ba:13:bb:f1:
                    f4:ef:0c:40:31:e2:99:e2:ee:c5:b0:8c:53:b6:13:
                    ca:81:99:e0:0f:8a:22:14:fe:16:76:d2:36:2b:c1:
                    8b:f1:95:c4:71:56:d4:75:a0:2f:fd:0b:02:9c:84:
                    2f:78:b7:55:5b:d6:52:11:eb:4b:7d:0d:e0:a3:65:
                    fe:1f:ad:e1:0d:23:b7:24:04:43:b4:be:8e:e3:4b:
                    ca:77:a3:af:d8:f0:c9:7d:01:f8:3e:6c:77:7c:ea:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A3:BD:A9:D5:4F:64:B5:D2:6B:E3:A3:00:54:69:0C:A2:DD:B6:54
            X509v3 Authority Key Identifier:
                keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:71:1b:db:33:eb:a9:d3:35:28:b6:08:b6:1b:be:50:32:06:
         00:0d:3b:8e:a7:6e:23:77:c8:c5:9f:c3:07:8b:a1:41:21:24:
         18:81:c1:7e:ee:5d:3d:9d:b8:c1:2e:59:fc:05:cd:18:b5:82:
         22:e9:0b:fe:66:ab:ae:da:24:b3:7b:43:47:39:75:7b:43:d0:
         13:ae:5e:8e:4a:73:c9:71:50:09:ce:08:86:28:1f:d6:e1:9a:
         db:83:a4:b2:b0:9d:cc:ae:f9:d2:a5:c6:58:e8:fd:27:07:10:
         6c:65:cf:de:80:d1:fe:86:af:96:d0:4d:86:74:03:e7:66:7f:
         ba:95:ab:c2:90:af:c0:44:24:c3:55:c4:bc:7a:f9:91:3d:1b:
         88:ce:2a:59:51:be:c0:33:cb:d0:e4:ea:5c:51:b6:92:15:fa:
         0a:e4:f7:79:5b:61:a1:ea:62:b2:a7:be:7e:97:69:94:b5:10:
         05:51:63:ea:e9:de:97:1d:1c:41:ae:c2:8f:20:7c:ea:d1:9b:
         1d:b7:d6:12:90:ea:fe:31:c7:3e:56:8d:2c:8a:2c:d4:45:2b:
         42:0d:d3:3c:b3:24:58:61:ab:28:bc:af:b2:67:31:b8:ea:60:
         27:c0:a9:93:c4:e9:eb:e9:17:d3:ae:04:f1:3e:53:b4:c1:05:
         bc:5d:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:00:10 2025 by rpki-client