This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft
File:                     23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json)
Hash identifier:          nqLZ0TtHsRyHFPhmIqNHZYtii1NKQ4McQsZSosNywnM=
Subject key identifier:   75:75:1E:5E:33:6C:27:B4:96:B0:8D:8F:4C:44:C1:27:C4:1E:C1:28
Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36
Certificate issuer:       /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36
Certificate serial:       7CA5B2BD321C6BD070A150A8A504BF5390909D20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft
Manifest number:          F7
Signing time:             Thu 18 Dec 2025 21:21:18 +0000
Manifest this update:     Thu 18 Dec 2025 21:16:18 +0000
Manifest next update:     Sun 21 Dec 2025 22:43:18 +0000
Files and hashes:         1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: 5B+WFa7q1Jp2ZLt9azKB5sDRq/kdkK3MtcM1dp9WlgA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl
                          rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 22:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a5:b2:bd:32:1c:6b:d0:70:a1:50:a8:a5:04:bf:53:90:90:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36
        Validity
            Not Before: Dec 18 21:16:18 2025 GMT
            Not After : Dec 21 22:43:18 2025 GMT
        Subject: CN=75751E5E336C27B496B08D8F4C44C127C41EC128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:df:cb:b3:e4:07:f8:0b:80:0c:14:6e:75:7d:
                    c0:fc:f9:4b:03:02:a3:85:52:c0:ab:99:4b:16:fa:
                    fd:ec:a0:a4:ee:3a:8c:9e:53:48:5c:3d:b1:6b:9f:
                    bb:5d:1d:9d:19:68:e3:c0:7b:0d:84:ca:c5:a6:c2:
                    e6:fd:5d:e1:46:bd:13:26:d3:2b:ac:4a:79:ad:c5:
                    c6:be:84:c6:aa:ec:94:28:6f:4c:99:0d:a9:4c:f0:
                    6c:77:ae:02:2c:5c:b9:10:3f:fd:77:ae:c3:b3:f5:
                    84:a6:85:f8:6e:16:83:c3:22:ee:0c:5c:d4:9b:b4:
                    4d:a0:cf:a1:65:69:2d:c8:0a:64:ca:26:d6:7a:68:
                    cd:00:75:d3:cc:15:30:72:8a:4a:81:44:c9:76:3e:
                    7d:8e:94:92:09:de:65:2d:86:4a:8a:05:c7:52:2c:
                    b9:ea:32:2c:f7:e2:93:bd:ad:37:67:91:ac:1c:96:
                    6b:b7:a5:b9:19:46:30:66:a5:86:79:ce:a9:36:57:
                    ba:21:4a:24:7e:66:b2:a6:15:67:04:f8:fc:b8:f0:
                    c0:6f:c8:12:26:56:75:84:6a:f3:67:a5:64:a2:36:
                    7d:83:ee:e6:ec:9f:94:4c:dc:e3:d6:32:2c:32:73:
                    b5:20:ad:45:9f:39:78:03:67:74:3d:f3:fe:52:de:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:1E:5E:33:6C:27:B4:96:B0:8D:8F:4C:44:C1:27:C4:1E:C1:28
            X509v3 Authority Key Identifier:
                keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:ee:30:1a:2f:43:b2:24:f4:b3:df:03:db:52:ce:4e:6b:
         b3:97:ec:e6:50:5e:c7:a2:63:0d:6a:00:79:e5:32:3d:fa:f5:
         3f:29:c6:7a:2c:b1:73:cd:b5:8a:d5:d3:1b:d3:d8:87:67:d1:
         0b:50:24:4e:4f:85:7c:82:d8:11:2e:20:6f:fe:d3:2c:1e:88:
         69:e3:6c:64:a7:a6:12:24:97:44:57:ec:df:f4:e8:16:dd:34:
         03:35:02:20:cb:a0:25:cf:31:78:28:54:d3:0a:50:12:40:70:
         08:32:0d:d5:0b:dd:64:0d:0b:d5:24:35:8f:35:fb:6a:6f:80:
         f1:9d:50:a7:0e:26:db:22:2a:2e:b9:54:6c:81:c1:49:73:cf:
         70:2d:ad:a7:9e:90:4c:43:e6:55:26:fa:7d:26:4e:f2:f3:6c:
         0d:31:c5:7d:69:78:91:70:b5:ca:5c:48:69:3e:12:e4:27:73:
         1f:07:43:0d:8b:88:6c:28:3f:b8:02:02:e3:55:bd:23:1a:b8:
         3d:33:11:91:a1:8c:e9:26:86:79:d2:55:93:e1:b4:04:58:5d:
         7e:16:5f:e9:5b:e4:be:e1:dc:0e:e1:d9:6e:d1:3f:9c:e5:9e:
         06:d3:79:54:f0:bb:15:10:20:a6:4d:49:7b:69:82:fe:d8:5e:
         af:1d:19:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:18:40 2025 by rpki-client