This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
File:                     4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json)
Hash identifier:          wXZ9iytTTDYLwv6UJAMhGS4VrmMoxIXw9mVU4ZavxB0=
Subject key identifier:   A2:74:C5:E3:5E:DC:4D:8B:AE:54:D4:0E:34:A4:CA:4E:FC:C4:80:F6
Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
Certificate issuer:       /CN=4A906D4F534B26A0E62898882630292936CEA54A
Certificate serial:       3F2713457EBAB060770555DCD555DAE80F6BF3B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
Manifest number:          015E
Signing time:             Fri 05 Dec 2025 23:51:45 +0000
Manifest this update:     Fri 05 Dec 2025 23:46:45 +0000
Manifest next update:     Tue 09 Dec 2025 05:40:45 +0000
Files and hashes:         1: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: Rvm74mG4zKQDKNIRYfIp7wDna0b5E9zp+H3gk0c2W1M=)
                          2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=)
                          3: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl
                          rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:27:13:45:7e:ba:b0:60:77:05:55:dc:d5:55:da:e8:0f:6b:f3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A
        Validity
            Not Before: Dec  5 23:46:45 2025 GMT
            Not After : Dec  9 05:40:45 2025 GMT
        Subject: CN=A274C5E35EDC4D8BAE54D40E34A4CA4EFCC480F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:6b:c4:17:f3:78:01:79:2e:95:df:f0:63:
                    71:f0:1a:8c:b8:41:00:df:df:6a:0a:d5:24:24:21:
                    19:82:eb:00:55:fd:e6:53:08:5a:31:5a:97:14:3a:
                    b0:07:d3:78:47:a5:a8:b8:b9:2e:10:0d:2a:11:90:
                    aa:b9:b7:98:da:0f:d6:8f:0a:b0:fa:1d:80:95:e4:
                    5d:ef:d0:59:2d:2f:a9:65:11:ae:b6:fe:d2:7d:00:
                    cb:9c:3e:6a:f0:be:a8:e7:6b:e2:7c:45:7a:40:ab:
                    2e:83:cc:9f:3f:ae:3c:96:40:16:24:21:d5:f3:97:
                    9d:dc:e5:86:88:e2:02:0a:60:8d:ef:4d:ac:16:dd:
                    78:74:dc:e9:b1:42:43:71:3c:72:30:bd:a1:a2:44:
                    75:d4:d2:ec:3c:2e:a6:6b:97:6d:13:44:8e:d1:44:
                    5c:55:e1:9e:53:1c:1a:33:16:fd:2e:dc:0e:6a:a0:
                    cc:a0:fd:5c:b4:6f:f2:58:b0:1e:39:ff:1c:9b:84:
                    d1:b6:bc:83:2e:09:ab:49:79:06:59:9d:e0:f7:1b:
                    f7:05:8f:36:26:22:84:23:12:ab:fd:24:94:34:89:
                    f4:54:ae:13:9a:48:13:65:d6:64:11:29:4c:c3:52:
                    9e:17:75:99:35:a0:c7:8d:d1:26:5d:4e:41:4c:1b:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:C5:E3:5E:DC:4D:8B:AE:54:D4:0E:34:A4:CA:4E:FC:C4:80:F6
            X509v3 Authority Key Identifier:
                keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:96:68:9f:a4:c9:bb:47:33:42:65:bb:e0:38:48:ee:c9:f0:
         9e:1d:88:0e:6b:55:8e:54:f7:4e:73:a3:c2:66:d8:57:c7:ba:
         3f:57:c9:38:a1:98:0c:4a:c1:3e:d3:7f:fb:8a:38:d5:ec:c2:
         92:7f:49:d9:84:c6:70:a4:0f:95:26:0a:86:af:ed:9e:5f:f3:
         01:6c:62:87:36:3d:ef:a3:4b:c4:16:2b:87:d8:62:5c:b8:1a:
         72:d4:34:a5:6d:f6:c9:c5:73:79:ca:b3:22:1a:c6:f6:9e:5a:
         37:99:75:69:1b:7b:57:c6:de:9f:2f:f6:19:4a:3b:48:7e:37:
         5e:f1:bf:e3:ac:20:2c:8e:25:6d:81:a9:9a:91:39:86:ce:93:
         66:93:a3:d6:e1:60:e8:11:40:81:9d:3c:36:70:0c:4e:52:a3:
         54:1e:9b:3a:32:39:f0:b1:dc:d9:2e:7a:fd:f5:13:94:88:fc:
         da:9d:86:b3:df:d6:13:49:d0:67:f1:be:6d:e2:f5:fa:5d:1e:
         ed:52:cc:58:6f:fa:1d:2d:c8:b0:ee:82:2a:2b:44:73:47:6e:
         e3:e6:7f:c1:95:69:dc:d2:a9:d3:f8:0b:ec:11:a4:67:f3:94:
         80:c5:48:07:30:1f:ed:98:3b:4e:ba:a8:eb:39:e0:7b:76:94:
         a8:a0:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:44:28 2025 by rpki-client