This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft
File:                     115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json)
Hash identifier:          04VoYpxKUB/FzcZ7AF2fTt2f3KE43DUc1sgKZcv7Tak=
Subject key identifier:   3E:E7:0A:D6:C7:1B:FF:41:A6:4E:3C:E0:15:41:3D:09:BF:EF:02:91
Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF
Certificate issuer:       /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF
Certificate serial:       4D63F49879E522F50480862E991665878E9935BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft
Manifest number:          01FE
Signing time:             Sun 28 Dec 2025 05:01:51 +0000
Manifest this update:     Sun 28 Dec 2025 04:56:51 +0000
Manifest next update:     Wed 31 Dec 2025 13:20:51 +0000
Files and hashes:         1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: 8O0w09UQPcMztQP5bvbXgKDmWrJ4TTwp26o1sfExRaI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl
                          rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 13:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:63:f4:98:79:e5:22:f5:04:80:86:2e:99:16:65:87:8e:99:35:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF
        Validity
            Not Before: Dec 28 04:56:51 2025 GMT
            Not After : Dec 31 13:20:51 2025 GMT
        Subject: CN=3EE70AD6C71BFF41A64E3CE015413D09BFEF0291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:e5:a1:89:d8:b8:21:cf:29:b2:b9:8b:30:
                    ac:9a:73:1d:d2:83:15:83:f5:79:ec:ea:5f:24:db:
                    54:19:71:96:ab:52:a0:3f:70:56:9b:1e:78:8b:55:
                    5c:df:85:d6:9a:71:d9:3e:14:c1:77:e4:27:7b:37:
                    85:7a:76:2d:a4:b1:c0:e4:b3:20:53:2f:7e:61:dd:
                    71:2e:50:a3:67:93:b5:17:00:8d:a3:bd:01:92:f1:
                    c3:83:77:6c:d5:39:95:7e:c8:91:0e:2d:d8:54:15:
                    5e:bb:ee:bb:d1:d7:0a:e6:2a:f4:b9:74:0a:11:7b:
                    37:61:24:41:c1:a0:f8:61:2d:cf:f2:58:83:c8:06:
                    00:91:e8:fe:08:bd:e7:2b:94:b3:60:8e:a8:59:62:
                    b1:5d:c3:b7:e5:cc:6f:ea:09:e7:67:c5:ef:57:a8:
                    b6:44:b7:3e:a6:cf:25:48:3b:43:8a:f9:62:9f:7e:
                    7b:f2:ab:72:2c:94:26:5b:4c:82:a9:22:90:06:aa:
                    7f:92:0f:88:ab:eb:62:16:bb:54:62:f2:f3:00:67:
                    f0:1c:d4:d4:66:e0:ef:04:8c:e9:93:71:e0:07:83:
                    8f:cc:2e:0b:f7:53:e3:88:e1:b5:37:78:4f:e5:7a:
                    bf:74:a5:af:3a:b8:aa:a9:71:36:38:28:51:3d:08:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:0A:D6:C7:1B:FF:41:A6:4E:3C:E0:15:41:3D:09:BF:EF:02:91
            X509v3 Authority Key Identifier:
                keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:60:a4:11:f3:81:e1:e3:54:33:93:ff:fc:1d:5e:5b:b3:2d:
         39:34:df:b8:08:f0:93:48:a5:90:df:45:03:35:ba:b8:ea:72:
         40:b9:15:4d:03:c4:2f:4d:c3:a6:d2:04:72:89:63:44:fa:4e:
         69:48:65:89:c9:84:ed:6d:ff:88:2c:9f:e6:f6:4b:66:d9:e4:
         6b:fc:42:01:0b:48:78:0a:ec:07:46:a3:47:a4:0c:b5:2e:b3:
         aa:c3:33:12:3a:06:43:ba:eb:d8:fb:2b:6d:56:18:a7:f5:d6:
         23:13:cc:69:f8:32:17:02:ad:1e:2d:c9:a6:a7:9b:fc:fa:5a:
         fc:0d:15:f1:47:ff:94:9b:c6:d7:3a:64:fd:3c:ab:58:5f:25:
         67:9c:6d:9a:0c:6c:a2:7f:6c:8b:1f:ad:41:47:85:d8:1f:6e:
         92:f8:8b:45:2b:83:d4:14:d2:85:37:d8:1b:05:21:33:c8:03:
         85:1e:56:9b:2c:dc:2c:ed:c0:49:ae:3c:8f:73:54:6b:56:9e:
         f3:5b:64:3d:1c:d5:b7:98:6e:d2:95:4a:66:c8:a8:d7:33:2d:
         98:60:79:e0:1e:c0:b8:06:14:08:ba:9b:2a:26:bf:e1:a8:d8:
         f8:69:a5:8f:95:c4:0b:e5:3c:aa:55:7c:0f:0b:39:3c:34:72:
         83:59:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 23:46:09 2025 by rpki-client