This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
File:                     F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json)
Hash identifier:          7F5b46VHZDdxx8DLQ8Zx6d92nNeardDkPD4l1d8+Ttg=
Subject key identifier:   47:81:9A:EC:49:C1:93:02:8E:0B:C5:AF:D8:96:12:93:B2:2D:57:09
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Certificate issuer:       /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial:       62E33220B41CCFA353A651CB57E861D55ABE998A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
Manifest number:          01A1
Signing time:             Sat 06 Dec 2025 02:30:44 +0000
Manifest this update:     Sat 06 Dec 2025 02:25:44 +0000
Manifest next update:     Tue 09 Dec 2025 03:36:44 +0000
Files and hashes:         1: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: HxXSc8f2xwrtgqyYPrKidtpestAdm+/qaDwAmAhFXV8=)
                          2: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: O7uhBUEz+z1Q2GX4lPzEa5VOca0EqQ+u9YYJDNTn8wg=)
                          3: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: jruW/AUePdWFgbuv5StGivVVFVpHpBSL3kjIWCplc4g=)
                          4: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: IoIh0X1wtCWoeOPeFilpjxljpSISulJCU4DOxkNVruE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
                          rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 03:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e3:32:20:b4:1c:cf:a3:53:a6:51:cb:57:e8:61:d5:5a:be:99:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
        Validity
            Not Before: Dec  6 02:25:44 2025 GMT
            Not After : Dec  9 03:36:44 2025 GMT
        Subject: CN=47819AEC49C193028E0BC5AFD8961293B22D5709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:48:9f:36:77:df:ed:0c:07:1d:d7:ae:bd:
                    f4:ff:7d:31:fe:74:6e:31:f1:a3:c1:77:e5:89:4c:
                    1e:99:7b:e4:c4:38:11:b9:97:d4:e3:a0:98:31:89:
                    a2:6a:fa:55:e3:39:6d:fa:74:7d:77:0b:09:1f:6b:
                    6d:d1:44:9f:3f:d9:c2:ac:30:c2:5b:2c:a5:60:58:
                    6c:d7:a6:35:2f:ee:a1:cf:4a:12:ce:44:95:ac:05:
                    73:c7:e9:9c:15:9e:47:0c:b5:67:2f:a6:46:82:8c:
                    0a:52:d1:6e:46:57:e3:b1:ec:3d:34:14:81:16:97:
                    1e:2a:05:4f:12:f8:96:86:e3:ee:db:9d:67:09:b7:
                    cb:38:17:bb:76:74:0a:e8:b2:27:61:ca:49:3b:c1:
                    c5:25:49:5f:d4:c6:79:69:33:7b:df:ff:86:ea:b1:
                    a4:72:1d:0d:af:25:d3:c1:b9:b2:3d:93:25:a9:1b:
                    bd:3a:04:78:8a:6d:9a:a4:6e:00:e1:bc:9a:eb:d8:
                    63:d1:00:1a:55:17:24:e7:79:3b:7a:fe:e8:69:87:
                    d9:f9:00:ee:61:ae:f5:ca:90:14:51:5f:3b:af:fa:
                    6d:f7:e5:33:c9:fe:d4:af:5a:9c:a0:f1:c6:c9:01:
                    26:6f:c3:d2:75:5c:00:bc:f3:a1:01:cf:02:f7:18:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:9A:EC:49:C1:93:02:8E:0B:C5:AF:D8:96:12:93:B2:2D:57:09
            X509v3 Authority Key Identifier:
                keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:45:f2:ad:c9:36:23:a6:7e:f0:e2:f5:d2:91:c5:22:a0:
         57:56:c7:c2:45:87:24:a2:03:16:81:f5:45:06:87:94:dc:0c:
         c2:ea:e0:d0:ad:52:c9:d5:32:00:fd:9c:22:ab:05:57:9d:c2:
         c2:a1:dc:8f:6f:ba:9c:8a:b5:af:b7:6e:5f:6f:81:0f:68:1c:
         95:89:f8:28:61:df:4f:ab:71:87:0b:78:dc:ce:ac:da:4f:a0:
         e5:e6:fc:72:15:2a:02:03:92:d6:0f:5d:00:87:32:37:4e:5d:
         1e:23:2a:88:49:8c:4f:20:3e:7d:a1:81:bd:31:c8:ec:47:15:
         d6:e3:63:71:0e:fa:90:0c:15:5d:4e:cf:54:a2:8d:93:9d:c2:
         f4:58:b2:a9:9c:c7:67:57:33:b6:46:bc:b9:f7:f3:41:3f:b3:
         10:55:86:1d:0e:92:c5:f0:44:4a:2a:b5:1e:b2:f8:d5:46:e2:
         b5:13:6e:1c:41:6c:87:16:9f:54:af:02:c4:9d:96:7b:83:37:
         03:a2:71:25:a6:4a:f3:4c:6f:1c:b6:72:32:e8:82:26:c3:8b:
         df:5b:ac:f4:af:3d:c9:0e:fa:10:23:f9:18:60:e7:db:1b:e2:
         d4:0c:70:72:7a:0b:b1:20:27:25:57:42:84:f8:55:2a:83:b3:
         ae:4f:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:18:01 2025 by rpki-client