This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
File:                     C07911838F3BCDBB76B01070E127AA00CC27F991.mft (raw, json)
Hash identifier:          BmWzAZYDVkCZEDNzAXpFa/OBh+kf2OTfG9kwWb3YSeg=
Subject key identifier:   DE:E6:CC:CD:43:14:01:54:70:3F:78:2A:00:E6:8B:AB:31:02:8B:95
Authority key identifier: C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91
Certificate issuer:       /CN=C07911838F3BCDBB76B01070E127AA00CC27F991
Certificate serial:       3D311E98D728330110E9D13019CAC13064E65E05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
Manifest number:          EC
Signing time:             Thu 18 Dec 2025 21:33:49 +0000
Manifest this update:     Thu 18 Dec 2025 21:28:49 +0000
Manifest next update:     Sun 21 Dec 2025 23:24:49 +0000
Files and hashes:         1: C07911838F3BCDBB76B01070E127AA00CC27F991.crl (hash: /QAanRDm1YoXQhljof0M1MYzqZCzKa3fqMaD1680CiQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl
                          rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 23:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:31:1e:98:d7:28:33:01:10:e9:d1:30:19:ca:c1:30:64:e6:5e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C07911838F3BCDBB76B01070E127AA00CC27F991
        Validity
            Not Before: Dec 18 21:28:49 2025 GMT
            Not After : Dec 21 23:24:49 2025 GMT
        Subject: CN=DEE6CCCD43140154703F782A00E68BAB31028B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:44:3f:05:a0:d5:ee:58:00:c8:69:4e:42:
                    fe:51:7c:4d:98:c6:a8:41:63:7b:77:1f:3e:fd:ae:
                    13:e4:e4:b0:eb:95:08:43:89:a8:96:e2:6d:af:27:
                    53:56:94:b1:0b:ee:dc:fc:2d:c1:1a:19:03:0e:ac:
                    df:d3:0c:ce:72:4b:83:7e:23:3b:e6:c7:31:1d:61:
                    c5:e1:55:f1:1b:a6:dc:ff:2f:34:e2:6f:34:da:17:
                    2b:54:64:f0:a1:b6:58:b7:61:31:c4:3a:01:36:0d:
                    3f:68:eb:fd:e5:fe:74:80:9f:49:96:84:29:eb:cf:
                    03:db:67:f0:9e:f6:17:4c:dc:da:a1:11:10:da:ed:
                    27:c5:8d:56:12:19:f8:2e:0e:5c:b6:de:c0:06:f0:
                    b7:05:07:b3:3b:d0:53:27:3f:2e:31:61:53:a0:82:
                    2c:44:38:a4:64:0f:9c:0d:c2:05:67:76:07:9a:f5:
                    4e:85:f0:3e:8d:dd:3b:43:3b:0c:1e:a3:f1:21:d4:
                    fc:37:98:b3:8b:15:f0:d4:17:fd:cb:b3:66:1b:33:
                    7b:ee:30:09:ec:00:f1:c5:a2:8a:5d:d2:37:81:5a:
                    67:c7:0d:fd:0b:37:6c:c0:d9:7c:e0:15:8b:2b:0b:
                    7f:17:59:7e:e4:8d:48:35:8e:4c:68:d3:ac:e2:c3:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E6:CC:CD:43:14:01:54:70:3F:78:2A:00:E6:8B:AB:31:02:8B:95
            X509v3 Authority Key Identifier:
                keyid:C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:67:01:b9:77:b7:8f:3b:70:89:92:eb:32:21:04:53:44:5a:
         61:ba:9d:25:dc:07:14:3e:6e:36:67:01:62:c6:1e:39:15:1d:
         57:b3:5c:23:c3:3d:eb:31:db:64:b1:6a:a3:a4:83:7a:6f:c4:
         1a:2b:ad:12:a1:b7:0b:5e:03:08:9f:14:a9:03:3d:a7:94:90:
         ce:56:d7:d8:be:dc:c9:3e:ac:36:ee:d1:91:a9:d8:ff:e8:e5:
         72:7f:0f:7f:dd:47:4c:5b:a1:7f:ca:3e:31:56:b4:36:36:fe:
         01:8d:48:24:54:f0:c9:cc:bb:2a:a3:13:bc:79:40:25:92:c1:
         66:b8:fa:06:99:33:d5:b3:5c:69:e5:2f:62:5a:f4:3d:e9:37:
         7e:c5:63:b6:8b:52:4a:74:56:c0:bb:d6:b5:45:f4:f4:05:1c:
         8c:a7:9f:cf:10:10:de:aa:c3:0a:09:2e:40:43:71:8c:fd:ee:
         a9:a8:4c:ab:20:9b:8e:ff:ed:b0:bc:b7:af:ac:ef:3c:00:73:
         d1:8b:31:8c:23:c7:b7:35:a1:32:e5:59:d5:25:ce:95:67:a6:
         12:d2:e0:5d:86:4a:49:6b:a5:34:77:fe:d2:ac:0e:7d:a2:4d:
         42:bd:f7:e9:39:97:90:a5:cc:1b:76:8a:c6:00:24:f4:a7:65:
         61:64:47:5a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPTEemNcoMwEQ6dEwGcrBMGTmXgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBD
QzI3Rjk5MTAeFw0yNTEyMTgyMTI4NDlaFw0yNTEyMjEyMzI0NDlaMDMxMTAvBgNV
BAMTKERFRTZDQ0NENDMxNDAxNTQ3MDNGNzgyQTAwRTY4QkFCMzEwMjhCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4X0Q/BaDV7lgAyGlOQv5RfE2Y
xqhBY3t3Hz79rhPk5LDrlQhDiaiW4m2vJ1NWlLEL7tz8LcEaGQMOrN/TDM5yS4N+
IzvmxzEdYcXhVfEbptz/LzTibzTaFytUZPChtli3YTHEOgE2DT9o6/3l/nSAn0mW
hCnrzwPbZ/Ce9hdM3NqhERDa7SfFjVYSGfguDly23sAG8LcFB7M70FMnPy4xYVOg
gixEOKRkD5wNwgVndgea9U6F8D6N3TtDOwweo/Eh1Pw3mLOLFfDUF/3Ls2YbM3vu
MAnsAPHFoopd0jeBWmfHDf0LN2zA2XzgFYsrC38XWX7kjUg1jkxo06ziwygtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3ubMzUMUAVRwP3gqAOaLqzECi5UwHwYDVR0j
BBgwFoAUwHkRg487zbt2sBBw4SeqAMwn+ZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMS9DMDc5MTE4MzhG
M0JDREJCNzZCMDEwNzBFMTI3QUEwMENDMjdGOTkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBDQzI3
Rjk5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm
YjktZmQzOWYwOTE2NjlkLzEvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FB
MDBDQzI3Rjk5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAdnAbl3t487cImS6zIhBFNEWmG6nSXcBxQ+
bjZnAWLGHjkVHVezXCPDPesx22SxaqOkg3pvxBorrRKhtwteAwifFKkDPaeUkM5W
19i+3Mk+rDbu0ZGp2P/o5XJ/D3/dR0xboX/KPjFWtDY2/gGNSCRU8MnMuyqjE7x5
QCWSwWa4+gaZM9WzXGnlL2Ja9D3pN37FY7aLUkp0VsC71rVF9PQFHIynn88QEN6q
wwoJLkBDcYz97qmoTKsgm47/7bC8t6+s7zwAc9GLMYwjx7c1oTLlWdUlzpVnphLS
4F2GSklrpTR3/tKsDn2iTUK99+k5l5ClzBt2isYAJPSnZWFkR1o=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:11:35 2025 by rpki-client