This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft
File:                     AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json)
Hash identifier:          FXOy450DxN+37KnhRWfqO7rSk7CinJ0eJfUb5nLk/q8=
Subject key identifier:   FF:6D:C9:02:32:66:33:F3:3F:03:37:59:02:0B:72:8A:45:E9:64:1C
Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06
Certificate issuer:       /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906
Certificate serial:       618E8B4C15F3CB5B042CB42F1017281456A82F53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft
Manifest number:          04EC
Signing time:             Fri 05 Dec 2025 01:02:02 +0000
Manifest this update:     Fri 05 Dec 2025 00:57:02 +0000
Manifest next update:     Mon 08 Dec 2025 09:51:02 +0000
Files and hashes:         1: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: LDAcpzPIDtFosq/i+hXgcTLu+HjVgI/fVqeh4Bmr//Q=)
                          2: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: XAdZjhJ8p/Sfbf/+znyNJnyeiAlF9/1TNV8duJLhiwk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl
                          rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 09:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8e:8b:4c:15:f3:cb:5b:04:2c:b4:2f:10:17:28:14:56:a8:2f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906
        Validity
            Not Before: Dec  5 00:57:02 2025 GMT
            Not After : Dec  8 09:51:02 2025 GMT
        Subject: CN=FF6DC902326633F33F033759020B728A45E9641C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:66:01:34:48:6b:c2:62:3d:bd:c3:af:b3:96:
                    f0:59:a9:9f:d5:8e:c0:b1:0f:03:9d:88:f3:a9:35:
                    bb:4f:e3:ca:a5:59:87:c6:24:5e:ba:7e:b7:65:61:
                    8f:89:94:48:07:4c:f5:82:3c:2d:d6:68:c0:5c:d7:
                    73:e2:ac:05:a5:2f:8c:8d:bb:a1:9e:b7:e3:9c:21:
                    79:f5:ee:a1:73:04:5b:8e:18:08:fc:0c:90:82:8e:
                    01:59:2f:4f:11:46:28:d4:88:a5:21:25:9b:c9:96:
                    4a:e4:d4:60:d2:dd:ad:3e:e6:55:a8:e3:93:59:3f:
                    74:87:e0:1a:1d:fc:a9:c9:b4:8d:60:b8:c3:4d:ef:
                    43:48:bb:a5:5b:70:e3:11:9d:03:72:20:d9:e7:87:
                    0e:5d:be:6c:b8:fc:82:2a:5b:16:f0:b0:5b:af:18:
                    7a:05:f9:dc:80:be:80:7e:fd:1a:21:2c:1c:e3:1c:
                    1c:c4:50:f7:20:fa:26:b8:9f:39:91:94:c0:20:29:
                    8a:92:7e:33:f4:f6:71:e7:fb:ef:fc:f8:a5:c2:0f:
                    e7:0c:c6:d1:8a:78:11:39:21:19:df:a6:18:53:7b:
                    3c:a7:69:ae:bf:c7:f3:d4:26:2b:6d:6f:d7:78:4d:
                    f1:e5:6d:01:02:b9:6a:d9:f6:50:08:f3:1e:3a:9c:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:C9:02:32:66:33:F3:3F:03:37:59:02:0B:72:8A:45:E9:64:1C
            X509v3 Authority Key Identifier:
                keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:07:3d:96:c2:c6:4f:cd:dd:8d:ad:1c:e4:11:53:91:20:22:
         07:85:8a:55:e4:2a:33:57:cc:cd:80:4b:65:85:e7:49:9a:c8:
         e3:f7:dd:44:96:97:5f:26:9b:7b:7b:ab:83:2d:a1:04:5d:3b:
         51:45:6d:cd:e0:fa:3b:32:b4:b3:33:98:99:46:cf:54:b1:cc:
         1b:06:af:62:e3:3f:fd:4d:f3:ad:40:11:51:ca:3f:49:db:4d:
         25:50:12:b0:fa:94:fd:94:95:b9:e5:78:4c:05:c4:8e:42:06:
         60:9b:81:e5:60:30:83:ca:6c:42:94:7c:08:69:64:30:ac:ff:
         81:60:9b:9f:0f:11:22:aa:32:9d:b8:b5:a1:7c:51:94:bd:ad:
         ad:44:89:93:eb:68:75:78:31:b8:60:f7:c1:01:6e:d0:f2:6b:
         8f:ef:fa:8a:60:02:70:9d:52:9d:fd:8a:a1:35:fd:f6:a1:85:
         70:2c:2e:b1:f3:75:e1:cc:86:af:85:11:f7:27:8e:a4:a4:90:
         3d:d7:5c:6f:1f:4c:97:f5:92:09:8e:2b:5e:e6:42:9f:eb:a9:
         d5:15:43:54:33:90:60:98:de:96:70:1e:f9:3e:b8:ac:07:58:
         ac:95:b8:f6:1b:e6:82:b9:7c:3d:42:8f:ea:01:b1:e3:cd:b3:
         82:ed:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:49 2025 by rpki-client