This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
File:                     357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json)
Hash identifier:          ctDNGO2iZKUnjtqOGtNUAtDY3pMttwZm8FHObQAJygs=
Subject key identifier:   0F:83:6B:59:3B:D8:19:7E:3F:7E:98:D5:48:11:1B:C7:EA:EC:C7:33
Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05
Certificate issuer:       /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605
Certificate serial:       72C8F84E3E51AE16C194DC28F011B7EF86980191
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
Manifest number:          04EF
Signing time:             Wed 24 Dec 2025 06:31:55 +0000
Manifest this update:     Wed 24 Dec 2025 06:26:55 +0000
Manifest next update:     Sat 27 Dec 2025 10:21:55 +0000
Files and hashes:         1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: y7rJPGwQssdHD1Wmb3TSWUnmmCNqlJ44IQ+GsU8XBYY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl
                          rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c8:f8:4e:3e:51:ae:16:c1:94:dc:28:f0:11:b7:ef:86:98:01:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605
        Validity
            Not Before: Dec 24 06:26:55 2025 GMT
            Not After : Dec 27 10:21:55 2025 GMT
        Subject: CN=0F836B593BD8197E3F7E98D548111BC7EAECC733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:51:86:2f:a8:10:3d:bb:9f:0d:73:c2:cd:
                    5d:f2:48:4f:ea:1f:96:4b:93:bb:30:34:df:13:7b:
                    58:c4:6d:46:e3:11:94:7f:f8:cf:6b:2d:64:63:45:
                    67:9c:3e:20:68:4d:0c:02:22:d5:ea:73:62:81:8e:
                    08:d1:5d:10:79:80:3c:f1:d6:fe:c8:e2:0a:65:1a:
                    5c:8b:e7:3f:97:f0:91:ff:34:8a:c2:97:14:e2:26:
                    78:ac:1c:49:3e:a7:97:5c:ab:89:d9:c3:36:c4:32:
                    44:ea:74:a8:9a:f9:c1:6e:3c:6e:b3:3b:ce:df:9a:
                    e6:c8:95:50:d9:6c:95:33:2b:db:01:c2:e4:11:9c:
                    57:b8:d9:bf:1f:32:90:8c:0a:3a:57:14:07:72:a1:
                    d8:db:72:ab:0f:72:b8:e5:56:51:85:4c:45:c5:c8:
                    d3:42:32:23:68:99:24:48:bc:26:21:50:8c:d7:93:
                    4c:90:66:2d:05:73:1a:e6:04:8e:90:ed:53:76:7a:
                    ba:3c:ec:32:24:36:79:cb:9e:ee:09:8b:c7:f7:9f:
                    e9:a8:89:47:8e:e7:2a:7f:89:d1:ba:c2:29:a6:ab:
                    20:ef:3b:c2:bd:1c:7f:1e:36:21:01:ef:6e:c4:86:
                    96:93:ae:54:98:f5:ef:78:3f:81:34:e5:2a:b2:50:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:6B:59:3B:D8:19:7E:3F:7E:98:D5:48:11:1B:C7:EA:EC:C7:33
            X509v3 Authority Key Identifier:
                keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:98:6f:89:35:d6:07:3e:c7:e5:94:c0:c9:e2:9e:ee:1b:
         12:9c:b7:ab:39:cb:91:cd:d6:ed:6d:83:cd:80:c2:8b:0c:23:
         f0:50:eb:d7:67:be:8f:c5:21:b7:b4:80:45:d7:99:32:19:4b:
         5f:2a:32:ed:65:42:a7:c8:d2:05:08:ad:05:86:47:14:42:80:
         7e:0c:20:6b:3d:1e:15:ca:55:47:b5:e4:0c:c9:c1:6a:49:b7:
         95:5f:1c:82:f9:5e:96:73:3f:58:f7:2f:ad:cb:b4:55:f9:05:
         79:9c:79:52:8c:64:38:7e:b5:89:3d:82:49:fb:aa:0d:59:7c:
         22:84:f7:81:5c:51:7a:20:2e:00:fd:03:96:19:f3:47:e1:f1:
         83:40:69:31:92:bb:77:71:65:1f:49:03:56:6b:c9:f7:c8:0c:
         00:4e:24:d9:40:72:ee:f4:cc:a1:2b:46:b6:dc:0c:8a:22:77:
         67:a1:6a:c3:5c:03:77:06:06:61:ee:91:73:2f:7f:e4:27:20:
         96:9d:95:ac:8c:af:74:ab:06:17:85:51:2b:1d:49:29:91:92:
         7f:a1:11:79:98:82:92:cc:41:da:8b:8d:e8:52:40:66:fa:0a:
         86:c3:36:90:1c:aa:09:16:58:7f:b5:63:dc:8c:96:93:0e:13:
         1a:ef:db:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:20:36 2025 by rpki-client