This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
File:                     A45C7486216530EA5E88FE961534FA7EAE72A79C.mft (raw, json)
Hash identifier:          9KUAzDvBcIyBuBQDnAv/p6qMJUIaIwmk8US2XsdExVY=
Subject key identifier:   5F:FD:2F:A1:67:E6:08:7E:A3:1F:FB:16:D7:31:28:36:24:54:ED:D4
Authority key identifier: A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C
Certificate issuer:       /CN=A45C7486216530EA5E88FE961534FA7EAE72A79C
Certificate serial:       7E30C554B68D1A465007EB93B2ADD57DED063FA4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
Manifest number:          012D
Signing time:             Fri 05 Dec 2025 14:51:40 +0000
Manifest this update:     Fri 05 Dec 2025 14:46:40 +0000
Manifest next update:     Mon 08 Dec 2025 23:42:40 +0000
Files and hashes:         1: A45C7486216530EA5E88FE961534FA7EAE72A79C.crl (hash: EMqusyCh3lJRI2ZfORpDH+Svr/KqE3q/FsQ3oVlCBHE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl
                          rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:30:c5:54:b6:8d:1a:46:50:07:eb:93:b2:ad:d5:7d:ed:06:3f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45C7486216530EA5E88FE961534FA7EAE72A79C
        Validity
            Not Before: Dec  5 14:46:40 2025 GMT
            Not After : Dec  8 23:42:40 2025 GMT
        Subject: CN=5FFD2FA167E6087EA31FFB16D73128362454EDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:49:8a:dc:26:bf:94:bb:4e:e5:13:75:62:
                    e5:8b:d7:fb:dc:34:e9:69:e1:f9:e8:d4:c5:6d:1a:
                    e6:bf:4e:bc:cc:93:41:36:4d:b9:87:52:0b:8a:e0:
                    51:8a:46:5d:ed:2e:fd:d9:4d:82:ab:03:a7:c9:da:
                    2b:bd:a9:c0:35:a4:ac:29:1d:8e:1e:3d:75:28:c6:
                    92:53:39:5b:e9:d9:8d:49:5c:bd:d4:e1:67:74:46:
                    7c:20:df:10:7e:f4:cc:dd:af:2e:11:0c:0c:b2:d0:
                    1d:52:87:e4:8b:85:cf:ed:95:1b:80:7c:72:82:5d:
                    ad:2e:28:7e:e5:a4:7a:49:79:f3:0c:b3:6c:fa:91:
                    86:2f:16:cd:46:0f:93:0e:d4:ee:97:8d:70:87:71:
                    fc:b6:b7:66:a9:14:3b:e3:ae:b1:b2:b0:38:fa:6e:
                    b1:cd:53:2d:ee:bb:25:bb:40:31:cc:60:13:99:d0:
                    93:9a:52:90:4e:d1:6c:48:1c:cc:61:02:6a:f5:f6:
                    bc:74:fd:c1:c9:76:6d:46:15:f4:ea:bb:f0:5a:c8:
                    71:6e:17:26:db:b8:3b:dd:24:2b:32:7e:c7:d1:d5:
                    8e:30:ae:e1:29:9d:94:26:66:8b:ad:ba:58:4e:2a:
                    f1:c1:b2:e6:d0:8d:7d:89:db:62:13:48:a2:96:35:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FD:2F:A1:67:E6:08:7E:A3:1F:FB:16:D7:31:28:36:24:54:ED:D4
            X509v3 Authority Key Identifier:
                keyid:A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:75:e5:49:6f:c6:6c:31:b2:3a:3e:7e:dc:6d:17:2e:5d:ae:
         f1:5d:b2:05:32:31:f2:1c:10:b6:d2:d2:cc:70:3a:da:1c:76:
         36:67:09:22:af:6f:81:57:31:ee:04:72:8a:13:be:a8:20:e2:
         35:04:d4:55:75:0e:ca:d7:70:8a:8e:8a:0b:34:8c:d7:30:53:
         9e:32:82:6d:2c:eb:ee:7a:fc:49:8c:34:22:87:6d:f6:a2:60:
         1d:7f:f0:78:ad:cc:5c:b9:3f:9e:86:00:9f:ba:ad:2d:3c:89:
         72:95:52:c4:c5:f3:cb:56:0a:41:18:c3:03:fc:1a:56:10:26:
         d9:e4:cf:a0:8e:ed:91:ef:43:2d:44:c6:4c:ff:6a:20:a2:b5:
         4c:78:21:89:b9:e9:76:8d:bd:4c:b7:07:6f:56:1f:c4:1c:33:
         41:aa:d3:95:0c:61:fc:2b:53:52:c3:61:5a:42:ea:a9:03:d4:
         2d:2b:98:0e:1b:9b:23:b5:ac:13:f5:36:d4:19:10:47:8d:ce:
         95:d2:09:5c:ba:3e:bb:b9:5f:56:82:1d:81:d7:35:30:d1:c8:
         3a:73:73:e3:fe:7d:67:7c:1e:0f:d6:54:cb:83:3d:8c:be:73:
         63:eb:c0:cb:9a:81:9b:7c:53:0d:6b:2c:7f:93:32:83:20:21:
         30:98:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:50:27 2025 by rpki-client