This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
File:                     C07911838F3BCDBB76B01070E127AA00CC27F991.mft (raw, json)
Hash identifier:          UUv2AspA9w5XWjZ9+ftqlanSWcbu7VGDk41t+J4iiy4=
Subject key identifier:   35:CB:AF:8A:58:A5:9C:51:C3:75:52:80:86:07:1C:71:1B:93:B9:5C
Authority key identifier: C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91
Certificate issuer:       /CN=C07911838F3BCDBB76B01070E127AA00CC27F991
Certificate serial:       1C094E9B3BD995565D66F14C162D057BAF2D2D7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
Manifest number:          ED
Signing time:             Sat 20 Dec 2025 23:32:21 +0000
Manifest this update:     Sat 20 Dec 2025 23:27:21 +0000
Manifest next update:     Wed 24 Dec 2025 02:59:21 +0000
Files and hashes:         1: C07911838F3BCDBB76B01070E127AA00CC27F991.crl (hash: ZUxtAKDo6P3OFztSoj/tseiBERMRTRlxIwmzacsE65E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl
                          rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 02:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:4e:9b:3b:d9:95:56:5d:66:f1:4c:16:2d:05:7b:af:2d:2d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C07911838F3BCDBB76B01070E127AA00CC27F991
        Validity
            Not Before: Dec 20 23:27:21 2025 GMT
            Not After : Dec 24 02:59:21 2025 GMT
        Subject: CN=35CBAF8A58A59C51C375528086071C711B93B95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9f:4c:98:5e:ea:38:6b:5a:f6:32:eb:9b:fc:
                    81:81:73:0b:48:d7:ad:9c:6c:fa:6d:4f:5c:78:3d:
                    6b:cc:bf:fc:f4:a0:4f:7e:49:0c:c0:8c:83:4b:31:
                    c6:89:bd:cd:2f:42:82:15:cd:16:ac:e2:ca:54:6b:
                    fb:b1:19:92:c5:ac:0c:e8:84:e2:d8:3d:4d:b3:82:
                    b6:fa:50:eb:7b:9b:5d:70:58:18:69:f0:4b:ba:b7:
                    3f:95:c6:ff:b7:3a:08:81:5a:26:94:44:ac:f4:55:
                    f7:55:23:0a:6c:56:95:27:1e:86:32:ee:e7:61:48:
                    1b:d6:f4:14:b3:ce:7d:b0:24:d7:9e:3f:82:e6:57:
                    c5:07:e2:1f:e8:c7:b4:bf:2d:08:f5:6d:6e:b2:c0:
                    91:66:29:1b:a6:2b:23:1d:e9:45:79:9f:52:1e:30:
                    85:63:86:d2:cd:70:49:62:95:ee:76:86:b7:e3:ec:
                    17:c8:63:d5:f6:2d:7b:f8:06:26:9b:1f:36:7a:eb:
                    6d:f8:cc:77:cc:75:0e:86:53:6c:8d:8b:2a:be:23:
                    de:a9:13:d2:81:1d:4f:a8:9e:48:bb:8c:31:0e:7e:
                    93:c3:60:eb:df:e1:b3:78:c1:88:32:ac:42:43:79:
                    3f:00:3a:d0:8f:a1:a5:76:de:1f:7f:34:df:3f:a1:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:AF:8A:58:A5:9C:51:C3:75:52:80:86:07:1C:71:1B:93:B9:5C
            X509v3 Authority Key Identifier:
                keyid:C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7a:0b:07:0e:82:5f:d6:99:fa:48:c8:8f:37:91:49:7f:48:
         fd:65:27:fe:b5:01:ed:2d:99:6c:cc:c7:26:38:1f:47:08:1a:
         87:9b:f8:a2:6f:95:96:c3:21:de:a9:f0:7e:5f:94:83:ec:0b:
         4c:95:b6:0c:a7:d2:22:47:bc:0b:ea:f6:bb:bf:93:b3:22:a4:
         7e:8f:70:0e:bd:13:d1:00:3a:bf:27:29:f5:89:e3:21:b1:2a:
         84:58:4b:fc:a3:d0:02:6e:ba:05:6f:eb:72:dc:a1:d9:32:5c:
         87:91:d1:5c:97:69:6e:90:48:d5:ad:6d:a3:a0:cb:1b:0b:d4:
         64:4b:56:14:77:85:27:3a:98:47:46:2f:f9:01:ef:ff:e9:18:
         3c:b4:0e:f2:8f:10:3e:c2:c8:b2:d4:14:1f:e1:db:21:8d:b0:
         f1:ce:8b:bc:7c:85:0c:d2:7a:f4:65:c7:e8:66:00:74:92:71:
         68:63:1d:84:6e:26:0f:e2:75:3a:47:c7:30:6e:e2:c8:8c:c4:
         b3:80:e3:8d:48:7e:22:bd:46:9c:b2:2f:f2:56:87:6e:c0:ea:
         5f:51:13:b6:48:40:8e:37:25:30:ce:75:02:cc:2e:a0:f2:d1:
         b2:b0:45:01:16:d0:59:73:53:33:af:03:7e:f3:3d:3a:7f:fa:
         0f:52:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:12:40 2025 by rpki-client