This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
File:                     2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json)
Hash identifier:          CLczotAVomS/H9uE6hfhT/h2ku8pNOXkFIBYlMhC1g0=
Subject key identifier:   61:6A:C3:2B:DE:C1:EB:56:EB:8F:F2:DE:2B:02:13:CE:B2:D3:05:FE
Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B
Certificate issuer:       /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B
Certificate serial:       1EFEDB04993104E7D4FDEC210654F0C358412D1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
Manifest number:          0132
Signing time:             Fri 05 Dec 2025 17:42:09 +0000
Manifest this update:     Fri 05 Dec 2025 17:37:09 +0000
Manifest next update:     Tue 09 Dec 2025 00:55:09 +0000
Files and hashes:         1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: 9hwJDDRE9kRmn5mH59CGodmLawzyJfr2scvDNu/Uhms=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl
                          rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 00:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fe:db:04:99:31:04:e7:d4:fd:ec:21:06:54:f0:c3:58:41:2d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B
        Validity
            Not Before: Dec  5 17:37:09 2025 GMT
            Not After : Dec  9 00:55:09 2025 GMT
        Subject: CN=616AC32BDEC1EB56EB8FF2DE2B0213CEB2D305FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:a5:a3:4a:0c:00:16:a3:c3:de:2b:19:c9:
                    f3:d1:38:47:67:d3:4a:ae:c6:93:1d:b1:6d:bf:f4:
                    86:d5:15:0b:7d:9c:4d:46:b6:88:dc:bb:ed:6a:37:
                    72:d8:7d:cb:3d:98:31:53:ee:8b:ae:6e:10:99:49:
                    d1:51:e0:6e:7e:96:cd:38:b9:f9:98:2c:1b:88:45:
                    fe:50:6e:7e:6d:3a:32:f7:7e:6b:d0:c0:24:e5:0a:
                    bc:07:95:60:1a:8a:5d:63:c2:e3:84:0d:5b:46:0f:
                    b6:3a:6c:86:9e:f9:5b:c2:68:d1:ec:da:35:71:3f:
                    50:7c:af:36:3b:cc:ec:b8:02:b8:57:47:3a:69:1a:
                    ef:34:a4:01:20:45:48:e6:07:e1:60:22:df:20:b3:
                    50:0c:33:97:35:eb:65:5c:06:06:7f:68:1b:12:08:
                    14:38:f4:ee:4a:f3:fe:ba:6a:01:cd:35:ad:5f:80:
                    5d:3e:5c:13:7c:63:77:37:c5:b1:72:e7:80:2b:e0:
                    6d:e0:2b:0d:fa:73:bf:b8:50:d7:99:8c:64:84:ae:
                    58:0c:b2:88:fe:45:b2:c7:e6:f6:d0:77:c2:28:5b:
                    51:15:0c:84:8b:68:48:75:e9:e1:94:1f:2e:44:92:
                    d4:ef:ed:ab:e5:54:12:da:18:d4:8d:8a:4a:34:58:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6A:C3:2B:DE:C1:EB:56:EB:8F:F2:DE:2B:02:13:CE:B2:D3:05:FE
            X509v3 Authority Key Identifier:
                keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fe:27:69:40:70:56:46:64:d6:5c:a0:be:33:2a:aa:14:9c:
         fb:70:61:43:4f:31:21:96:c9:7f:90:8c:61:03:aa:f9:4c:63:
         f7:97:e7:e2:43:93:70:b3:14:2e:f8:3b:bd:f6:2b:a8:08:71:
         98:04:0b:33:6a:f2:44:b1:d3:87:76:1f:a7:44:60:a1:f0:3f:
         3e:70:5f:ef:8a:c5:ee:b6:14:b1:51:8b:9a:da:11:30:e6:32:
         67:20:32:f6:b2:44:dd:f4:ae:be:e4:ed:8c:0e:58:84:07:24:
         3d:1a:92:a0:41:9f:a6:ef:75:2f:d5:79:d9:42:ef:22:47:bd:
         76:1f:b9:f7:81:81:27:7c:25:87:90:76:63:f2:03:dc:75:ff:
         b6:8a:17:15:68:47:42:65:73:23:a9:28:8c:0e:04:e7:11:ff:
         56:1e:c0:65:b2:00:bb:fe:fe:5f:97:1b:e7:76:c6:5a:ad:19:
         98:36:58:a1:ed:89:c3:00:aa:1b:19:d6:40:25:39:a5:6a:c6:
         60:9e:64:f7:2f:2a:6e:06:0e:84:f4:bf:69:d7:6b:a5:b3:9e:
         18:19:b4:bd:5c:b6:da:04:74:9b:0d:8b:6f:7c:66:da:ff:41:
         2d:1b:f9:63:7b:16:5f:b2:ca:7b:51:f8:77:29:34:b4:47:b3:
         2f:db:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:59:36 2025 by rpki-client