This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
File:                     62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json)
Hash identifier:          Oow+jmDzNBZRokUjxUZnDIL3hk4WYpcngwL0ynt07Ik=
Subject key identifier:   24:BC:1E:B3:49:55:A3:3C:F4:99:57:97:8C:E5:0B:A2:EA:C5:B0:92
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Certificate issuer:       /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial:       0BD23F39D8E00C457F7FD71310611DF7B2350BB2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
Manifest number:          0100
Signing time:             Thu 25 Dec 2025 11:50:46 +0000
Manifest this update:     Thu 25 Dec 2025 11:45:46 +0000
Manifest next update:     Sun 28 Dec 2025 17:20:46 +0000
Files and hashes:         1: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: GWaWKRBrWSX+bUdESxh+m2otGWb/hOeTShn9gb95F3w=)
                          2: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Eu+4u02FPo/RfVFVxOIqvYkg8/wWVoya955tDIny+5E=)
                          3: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: OXZKLSDB29MZbZv2GF7k26ahZxZCRgoPDRQLXFm3IDA=)
                          4: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: SP12xLDyV/VP9N1xqFMD2+nxhDzqIZUfpt67MZUwfE8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
                          rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 17:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d2:3f:39:d8:e0:0c:45:7f:7f:d7:13:10:61:1d:f7:b2:35:0b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
        Validity
            Not Before: Dec 25 11:45:46 2025 GMT
            Not After : Dec 28 17:20:46 2025 GMT
        Subject: CN=24BC1EB34955A33CF49957978CE50BA2EAC5B092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:83:b3:37:c7:8b:36:c8:dd:73:39:6b:98:
                    5d:84:e4:e3:95:22:84:60:77:70:34:19:f9:bd:b6:
                    e5:63:16:ce:0d:38:71:a2:19:e0:d9:24:d8:10:3a:
                    4e:38:1e:43:e7:69:82:34:74:a2:26:64:da:e9:e5:
                    27:49:23:8a:63:98:40:08:1f:6e:25:2c:28:fb:18:
                    f7:ad:be:58:39:32:e9:34:43:43:c1:be:c5:94:a9:
                    8a:75:10:46:7a:f8:2c:8a:49:76:83:10:af:ae:77:
                    91:ed:71:33:01:dd:d8:c8:76:a8:61:76:ac:96:b7:
                    5d:e9:f4:b6:1b:bc:cb:1e:be:12:70:99:3c:1c:05:
                    f4:64:c0:ba:b7:d7:e4:46:78:a1:ce:37:bf:04:a9:
                    d8:ed:ea:ef:59:64:05:c3:33:f9:6e:a8:83:af:a6:
                    e4:e7:7d:09:a5:0b:60:ab:72:0c:3f:74:ae:c1:9e:
                    4a:28:fa:1a:3d:2e:a5:7f:f9:1e:32:f8:b1:f0:51:
                    ec:29:6d:27:05:37:68:91:2f:b0:15:40:14:b0:76:
                    76:ec:f3:e5:a4:72:37:5d:03:9a:47:a7:3e:98:39:
                    30:df:de:95:d5:8b:e1:46:c0:c7:f7:27:d3:de:50:
                    39:ab:6d:43:ed:2d:57:82:e7:6d:43:9c:ef:ed:d4:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BC:1E:B3:49:55:A3:3C:F4:99:57:97:8C:E5:0B:A2:EA:C5:B0:92
            X509v3 Authority Key Identifier:
                keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9f:6f:a1:af:33:10:d4:77:49:46:81:5a:ca:d0:e3:41:d5:
         02:97:ed:2e:5a:80:16:9e:90:d8:b6:3d:6e:19:f1:71:0f:4b:
         4d:c9:d8:77:99:bd:c2:8e:a4:f1:67:5c:fa:e1:d2:b6:35:a2:
         10:b6:52:5e:f2:e7:4e:0a:e8:c8:82:04:77:18:2a:8d:1c:e4:
         b6:ba:db:04:33:1c:d4:ed:cc:b6:6f:20:97:b1:b8:d5:9b:41:
         71:5c:07:54:4a:55:10:f5:96:f3:2d:e3:db:82:98:e9:4d:70:
         20:92:be:b8:95:5f:02:28:e7:4b:70:b9:11:a9:16:95:5f:25:
         2b:bf:48:a8:f6:86:e4:65:03:a7:76:63:06:74:00:60:7f:68:
         f6:cd:6b:b1:4e:78:07:26:e0:ca:f9:ff:3f:22:fc:af:7b:b5:
         96:f4:ee:ed:4b:24:51:7b:35:ca:a6:41:6c:7a:0d:ff:c8:e4:
         96:de:ea:58:df:3c:c9:38:f3:7e:63:58:a0:fd:36:9e:eb:04:
         7c:d1:ff:c6:18:c5:92:66:e4:d6:f2:50:24:e7:e6:cf:bd:1d:
         40:92:ed:21:15:0c:af:42:43:f8:e0:2e:01:28:db:8e:74:d2:
         63:c3:dd:d1:92:f1:77:45:93:65:fc:33:39:29:5b:67:fa:d5:
         42:ef:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:50:00 2025 by rpki-client