This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
File:                     F694BC9CF5B570CC62014EB8B877448A76680AEF.mft (raw, json)
Hash identifier:          2QfNucMDVG9/sqjw+kZfMmyZjccIu6D4zO0tzrFZJfQ=
Subject key identifier:   14:85:CA:7E:2E:6F:2D:5A:B1:50:37:6B:55:6F:A6:8A:A9:BE:8A:F5
Authority key identifier: F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF
Certificate issuer:       /CN=F694BC9CF5B570CC62014EB8B877448A76680AEF
Certificate serial:       5AF2469C3A2C66E8D3D2A3616ED5EF468D415BA7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
Manifest number:          E3
Signing time:             Thu 04 Dec 2025 22:42:32 +0000
Manifest this update:     Thu 04 Dec 2025 22:37:32 +0000
Manifest next update:     Mon 08 Dec 2025 02:06:32 +0000
Files and hashes:         1: F694BC9CF5B570CC62014EB8B877448A76680AEF.crl (hash: r+T9MlyG3lsViHKvDlM/kI4YSNhxvG33YWIiDvdOfqI=)
                          2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: Olb5UAH0bGOuP1xREu1ehDMuAwFsYaccHtg3tVn/tDU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl
                          rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 02:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f2:46:9c:3a:2c:66:e8:d3:d2:a3:61:6e:d5:ef:46:8d:41:5b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F694BC9CF5B570CC62014EB8B877448A76680AEF
        Validity
            Not Before: Dec  4 22:37:32 2025 GMT
            Not After : Dec  8 02:06:32 2025 GMT
        Subject: CN=1485CA7E2E6F2D5AB150376B556FA68AA9BE8AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f3:c9:e4:02:55:3f:fd:9c:8e:c0:da:25:78:
                    68:a9:ba:b9:0d:25:53:39:fe:40:01:ab:92:76:df:
                    58:2a:ec:b5:41:c5:45:f9:c5:9f:c2:96:b4:56:1e:
                    26:83:1f:a3:42:1b:30:9e:99:94:5e:ca:86:32:63:
                    a1:fc:f7:ce:7f:dc:15:1f:67:3c:8e:fc:ea:a7:8f:
                    61:41:0a:c6:1f:6e:88:6d:ca:81:bc:42:cd:d2:ed:
                    29:6a:d1:1f:4e:5b:4c:14:e0:16:f8:8b:2c:97:bc:
                    33:33:07:7c:9d:e8:60:b9:aa:bd:33:22:35:22:98:
                    1f:41:96:25:6a:fd:d5:0e:db:1f:89:a3:2d:74:1f:
                    02:4c:a9:6c:9b:74:ed:13:74:85:85:5a:16:37:9f:
                    0a:5e:da:e1:d0:4e:8b:ec:ef:03:fa:84:06:d0:3b:
                    d7:cd:fb:f6:9a:e1:2e:20:4c:e1:8e:b6:c3:73:bc:
                    45:c0:86:15:96:11:21:31:38:ed:29:f0:3c:cd:79:
                    d3:92:a4:7e:f0:6b:23:16:81:52:d8:14:29:4c:63:
                    29:59:7a:50:44:83:18:f5:e3:20:55:89:fc:38:23:
                    e9:e6:5a:e3:b9:20:86:32:87:2a:cf:4b:f9:61:42:
                    22:19:09:8d:b2:fe:1a:2f:93:fa:2f:22:ec:fd:ce:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:85:CA:7E:2E:6F:2D:5A:B1:50:37:6B:55:6F:A6:8A:A9:BE:8A:F5
            X509v3 Authority Key Identifier:
                keyid:F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:01:8b:01:fa:4c:9a:e0:a4:bb:77:e4:ac:cd:7b:d2:91:66:
         6c:51:98:52:27:81:67:86:f1:f5:cb:ba:81:f9:e3:a9:87:37:
         c2:a8:5f:d5:fa:8e:f8:53:28:94:ab:b4:d9:64:de:d2:3d:33:
         d5:6c:37:1e:98:86:a8:4e:39:0b:7c:36:ea:ad:13:85:bd:da:
         c4:b0:26:7d:11:7d:5a:c4:ba:9d:52:37:d7:7c:6c:e3:91:3f:
         32:df:8c:70:2e:e5:c2:09:a2:0f:8b:d7:14:24:98:0c:c1:f5:
         31:15:b8:8e:ad:a9:dc:22:44:15:27:cc:2c:03:4b:d9:9e:01:
         d5:e3:4a:6b:83:34:ac:c2:56:5b:d4:2e:7d:16:5b:87:7b:a4:
         1b:54:05:d7:5b:47:b8:7c:a8:81:14:c3:6b:99:f1:e2:15:e4:
         07:0c:86:74:03:66:f7:9f:74:f0:93:69:97:1f:08:cc:ef:0f:
         1b:92:55:c0:a4:bc:5b:a1:36:13:d0:96:e1:9f:d8:49:52:95:
         60:8e:e7:89:fa:67:83:64:32:63:ca:46:b5:f4:24:04:37:e2:
         b9:a7:75:9e:0a:83:75:96:93:18:47:9f:cd:d3:0b:b8:2f:10:
         ed:34:cd:74:48:1a:43:af:3c:60:f0:d9:69:43:c3:25:b8:b5:
         4e:8f:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:23:32 2025 by rpki-client