This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft
File:                     132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json)
Hash identifier:          NyaxLpQIFG6FU5hXYXmJzlPrZVwr+hNENdJvlkzN1oA=
Subject key identifier:   7D:56:C0:E3:B6:B9:3D:80:F6:83:49:5B:E0:D5:42:EA:17:2D:EB:C5
Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8
Certificate issuer:       /CN=132FE11D02592F9985A978A727BF9B772762CDF8
Certificate serial:       306E216B8105F7FF87792EA138E94A686E2B7A7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft
Manifest number:          01E7
Signing time:             Tue 23 Dec 2025 23:50:04 +0000
Manifest this update:     Tue 23 Dec 2025 23:45:04 +0000
Manifest next update:     Sat 27 Dec 2025 03:00:04 +0000
Files and hashes:         1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: 3RotNsDIPafCaxWmIn5vdIZFPf2Dy7ra3P+Nq6IwA4k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl
                          rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 03:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6e:21:6b:81:05:f7:ff:87:79:2e:a1:38:e9:4a:68:6e:2b:7a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8
        Validity
            Not Before: Dec 23 23:45:04 2025 GMT
            Not After : Dec 27 03:00:04 2025 GMT
        Subject: CN=7D56C0E3B6B93D80F683495BE0D542EA172DEBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:9f:31:d3:69:d4:c8:64:2b:c9:8c:68:5c:
                    fd:69:9b:b0:4c:ea:71:6c:31:c0:7a:29:87:d0:ef:
                    bb:ba:cd:60:ce:4e:06:37:99:4a:5d:07:6f:95:7f:
                    1d:4e:38:51:96:76:4f:79:95:b3:7c:75:88:dc:f4:
                    6c:b3:7c:22:49:0b:a9:66:68:9e:44:25:a9:a2:e3:
                    ba:00:ff:91:e6:48:97:a2:71:58:89:82:cb:ae:9e:
                    fa:ae:c2:e6:fb:93:98:cd:ba:ba:81:46:e0:20:52:
                    e7:ac:56:37:a2:d1:7d:00:3c:ce:8b:8c:5e:24:60:
                    96:e2:04:37:01:5c:f5:f3:86:d5:dc:fe:e9:60:2d:
                    bc:36:6e:0e:2e:51:fc:22:2a:af:99:40:68:68:78:
                    0a:98:ba:67:2a:ca:ec:02:fa:a8:13:14:2f:0b:f3:
                    47:88:c1:8a:60:e2:65:20:7c:cd:79:4d:05:6c:3d:
                    58:51:0f:5f:ef:96:be:bf:3e:a8:96:79:f2:27:53:
                    9e:23:2b:f6:10:a5:30:60:72:81:b6:3a:c6:c9:3d:
                    72:c1:69:86:fc:78:7e:d0:af:2e:9c:da:0c:97:b5:
                    f3:0c:d4:23:b1:60:0b:70:10:8a:7b:93:58:ac:fa:
                    c7:5d:58:b3:b3:5f:c3:fa:ab:ce:a0:9f:68:e3:d8:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:C0:E3:B6:B9:3D:80:F6:83:49:5B:E0:D5:42:EA:17:2D:EB:C5
            X509v3 Authority Key Identifier:
                keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:5e:73:41:7d:27:d7:65:22:a7:89:67:9f:20:6b:ee:d8:
         7b:e0:be:96:10:9c:04:17:f0:e2:96:ef:82:7f:f2:b4:ad:60:
         4b:2c:b2:05:3e:ba:25:6b:eb:d5:b6:0b:d2:3b:3a:2c:9a:39:
         ce:cd:81:df:13:84:1e:29:ae:b7:6a:e1:4f:eb:da:79:f7:af:
         52:8b:71:f6:22:a0:c3:af:ac:75:74:f8:20:2c:c4:b7:0d:54:
         0f:4a:40:42:47:81:a1:b1:74:62:94:53:01:29:54:a5:85:8e:
         f0:7f:3b:a6:70:fa:3e:83:51:02:49:8d:cc:cb:de:33:52:57:
         0a:3a:a2:08:55:fb:67:2b:58:57:5d:5d:d3:b1:ce:69:56:aa:
         59:2e:19:ea:90:9e:6e:e6:57:e8:1f:84:24:d8:3a:f5:17:f2:
         02:d8:59:4a:87:a6:0e:25:8d:50:42:d2:09:1b:17:4c:0a:72:
         cb:be:43:e1:63:0e:7a:8b:d1:1e:80:3b:ca:d8:d9:61:06:fa:
         51:1f:d5:ed:34:b1:b7:6a:dd:b2:3b:fb:9c:87:57:00:19:46:
         f0:1e:76:09:c7:2a:3a:e0:00:13:6b:2d:8d:05:f4:48:4f:77:
         a4:8a:3d:4e:15:1a:90:5d:10:9b:b7:7c:6f:55:08:fc:a7:e1:
         c1:36:d4:20
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMG4ha4EF9/+HeS6hOOlKaG4renswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy
NzYyQ0RGODAeFw0yNTEyMjMyMzQ1MDRaFw0yNTEyMjcwMzAwMDRaMDMxMTAvBgNV
BAMTKDdENTZDMEUzQjZCOTNEODBGNjgzNDk1QkUwRDU0MkVBMTcyREVCQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wZ8x02nUyGQryYxoXP1pm7BM
6nFsMcB6KYfQ77u6zWDOTgY3mUpdB2+Vfx1OOFGWdk95lbN8dYjc9GyzfCJJC6lm
aJ5EJami47oA/5HmSJeicViJgsuunvquwub7k5jNurqBRuAgUuesVjei0X0APM6L
jF4kYJbiBDcBXPXzhtXc/ulgLbw2bg4uUfwiKq+ZQGhoeAqYumcqyuwC+qgTFC8L
80eIwYpg4mUgfM15TQVsPVhRD1/vlr6/PqiWefInU54jK/YQpTBgcoG2OsbJPXLB
aYb8eH7Qry6c2gyXtfMM1COxYAtwEIp7k1is+sddWLOzX8P6q86gn2jj2N0lAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfVbA47a5PYD2g0lb4NVC6hct68UwHwYDVR0j
BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy
NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy
Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm
M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC
NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI1HXnNBfSfXZSKniWefIGvu2HvgvpYQnAQX
8OKW74J/8rStYEsssgU+uiVr69W2C9I7OiyaOc7Ngd8ThB4prrdq4U/r2nn3r1KL
cfYioMOvrHV0+CAsxLcNVA9KQEJHgaGxdGKUUwEpVKWFjvB/O6Zw+j6DUQJJjczL
3jNSVwo6oghV+2crWFddXdOxzmlWqlkuGeqQnm7mV+gfhCTYOvUX8gLYWUqHpg4l
jVBC0gkbF0wKcsu+Q+FjDnqL0R6AO8rY2WEG+lEf1e00sbdq3bI7+5yHVwAZRvAe
dgnHKjrgABNrLY0F9EhPd6SKPU4VGpBdEJu3fG9VCPyn4cE21CA=
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:53 2025 by rpki-client