This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
File:                     466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft (raw, json)
Hash identifier:          oa6G0eG7t88iyqg7AUoK3NfR4iipkfIx9vVLWcVdHgA=
Subject key identifier:   87:FE:F6:60:79:74:71:70:29:0C:C1:08:4A:4F:51:DB:51:37:1B:9B
Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Certificate issuer:       /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Certificate serial:       55DCBF9990CDEBF6478545D26E2302B14AC0891A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
Manifest number:          021C
Signing time:             Tue 16 Dec 2025 11:52:24 +0000
Manifest this update:     Tue 16 Dec 2025 11:47:24 +0000
Manifest next update:     Fri 19 Dec 2025 13:04:24 +0000
Files and hashes:         1: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: 1BptPYQTBVQCwnCGCAmQpdkJZuT5jDyDH1mIYb86asQ=)
                          2: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: k33UC/S59fL9YnbENocJ8tvAJ1sRtIu7ddJOWvA5ll8=)
                          3: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl (hash: tRY/dBypC4buGUEdo2H+NN2uUWGbi3PuONRM12Wk3bM=)
                          4: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
                          rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 13:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dc:bf:99:90:cd:eb:f6:47:85:45:d2:6e:23:02:b1:4a:c0:89:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
        Validity
            Not Before: Dec 16 11:47:24 2025 GMT
            Not After : Dec 19 13:04:24 2025 GMT
        Subject: CN=87FEF66079747170290CC1084A4F51DB51371B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:af:cd:72:d3:ab:9f:f1:ee:17:62:81:fc:
                    d0:ea:21:44:b0:ab:1d:1a:8b:7b:dd:16:0f:14:02:
                    dd:fb:90:25:df:28:c2:d8:70:de:38:8b:74:07:6c:
                    71:1d:be:ec:49:c8:bc:67:4e:d9:12:ac:28:cb:50:
                    38:2c:32:9f:8b:8d:01:d3:61:34:6b:6d:8b:bf:be:
                    a6:24:ca:5f:a4:ee:ba:46:e5:b0:fb:da:32:03:eb:
                    fb:c1:1d:05:f6:60:71:27:24:4a:6b:ee:5c:e9:22:
                    cc:2c:0d:17:7a:6e:da:3a:84:4b:1b:c3:67:f7:d2:
                    de:c2:50:40:fd:c8:b1:87:5a:48:60:08:37:80:3a:
                    e6:34:c2:94:e2:fa:68:bb:ff:45:01:36:ec:64:45:
                    bb:43:38:c7:e3:4c:df:87:f3:0b:0a:31:cc:06:6a:
                    0a:a6:74:2d:33:c8:5d:6a:42:02:5b:70:cb:01:8b:
                    da:18:db:f6:10:6e:b9:55:97:57:4f:f1:01:64:93:
                    23:b6:1d:1e:e0:6f:b8:c0:25:51:6e:4c:b9:93:75:
                    6f:f4:b4:ab:f2:81:a9:7c:24:b3:df:d3:b3:e4:3a:
                    de:94:52:00:52:3e:4a:b0:42:db:85:8a:05:16:5e:
                    c7:9e:53:7f:65:24:14:f4:28:4b:23:fe:8c:ac:c7:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FE:F6:60:79:74:71:70:29:0C:C1:08:4A:4F:51:DB:51:37:1B:9B
            X509v3 Authority Key Identifier:
                keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a3:97:6b:b0:0c:31:f0:64:7f:c9:00:a7:db:3c:f1:c0:04:
         f3:57:ab:5c:f6:5e:d9:6a:2b:25:e4:7d:4a:4b:0c:4c:48:00:
         68:55:bc:61:54:c2:22:89:c4:34:b1:e6:e7:a4:61:7a:31:55:
         ab:61:80:b0:6b:67:e3:9d:cb:71:08:97:e6:18:d3:cb:d9:34:
         76:33:d6:af:fd:6d:c0:19:54:49:3f:7c:af:67:9e:23:58:51:
         08:4b:da:f5:2b:7b:39:bd:97:3f:d1:73:52:2c:5b:53:30:ce:
         54:37:5f:23:5f:36:8a:88:d4:f9:85:da:24:67:36:d9:6d:a5:
         1a:ad:c8:3f:0f:00:17:a0:78:7b:f1:ff:c1:d2:e0:00:8b:46:
         91:6c:7d:68:24:ed:e2:da:72:7a:0f:66:ff:2a:65:bc:bd:d7:
         7e:0e:27:88:5f:7a:bc:20:ec:66:31:01:3d:17:c4:8a:c4:fe:
         e6:29:ff:84:a2:f8:79:b7:f8:d2:21:72:6f:95:ea:1d:f4:a5:
         9d:35:2b:66:af:c4:ce:48:20:1c:84:06:61:6d:ba:47:ac:f9:
         1e:5e:e8:cd:82:bf:ea:a5:fb:02:b6:33:bd:99:cc:98:b1:99:
         db:d1:ef:46:33:4f:57:b0:ab:12:2a:8b:10:e8:5b:8f:d7:44:
         34:b6:ce:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:48:03 2025 by rpki-client