This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft
File:                     F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json)
Hash identifier:          sRh1IGHU/JtFvXBmbHofYy3AwkYI51dxh7uu0yDmoV8=
Subject key identifier:   D4:87:82:19:FA:A4:9D:B0:BF:7D:D3:FD:44:50:3D:A3:1F:73:1E:DF
Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7
Certificate issuer:       /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7
Certificate serial:       472EA918EDC9B2C4160C9B7284ED4544C5F0CE33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft
Manifest number:          04E6
Signing time:             Wed 17 Dec 2025 13:01:08 +0000
Manifest this update:     Wed 17 Dec 2025 12:56:08 +0000
Manifest next update:     Sat 20 Dec 2025 18:39:08 +0000
Files and hashes:         1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: LaqihETGRZEk1ZOD00W2JUyrxOaHs4rBmZ2u1uAaAGQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl
                          rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 18:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2e:a9:18:ed:c9:b2:c4:16:0c:9b:72:84:ed:45:44:c5:f0:ce:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7
        Validity
            Not Before: Dec 17 12:56:08 2025 GMT
            Not After : Dec 20 18:39:08 2025 GMT
        Subject: CN=D4878219FAA49DB0BF7DD3FD44503DA31F731EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:46:6a:a2:52:f1:d8:bb:04:6c:9a:0a:ee:
                    c5:cc:7e:de:36:cf:15:d3:24:b6:ea:ef:d6:f0:16:
                    28:cd:79:86:3b:63:12:c9:1b:e9:b8:65:4b:ea:b0:
                    c5:c7:31:cb:50:37:e2:20:20:12:e5:2b:f3:ed:4b:
                    51:84:43:80:73:08:dd:7c:5c:3c:3c:42:3a:42:7f:
                    a7:7b:d2:9f:3c:c3:58:14:d8:08:eb:b0:d1:4c:51:
                    7b:6c:db:48:62:bd:63:80:5c:47:ff:f8:5f:31:11:
                    33:f1:89:7d:e7:76:bc:2a:2c:e7:d2:5c:41:a5:f9:
                    20:5b:78:5b:f5:d7:ad:1b:67:9a:e3:e2:3b:97:e8:
                    45:67:25:f9:87:76:c6:8d:dc:06:fe:cf:5d:3b:f5:
                    d5:1a:40:fc:d2:00:0e:39:f2:c9:0b:93:fc:5c:46:
                    a8:d1:3c:2d:11:d4:d8:e7:a3:dd:0f:c6:d5:f6:ed:
                    c1:f6:4b:da:3e:68:7e:b7:5d:f6:4d:2b:20:df:c8:
                    cb:c2:12:f5:ee:d9:df:e6:12:1a:9b:a3:a5:76:8c:
                    48:a7:cd:be:f9:e4:8b:d3:1d:87:92:91:b1:2c:d0:
                    d8:3c:b4:76:b2:34:7c:f2:86:94:b1:49:69:ca:fb:
                    13:ca:26:43:79:a1:3b:b5:40:66:5b:66:a1:e5:44:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:87:82:19:FA:A4:9D:B0:BF:7D:D3:FD:44:50:3D:A3:1F:73:1E:DF
            X509v3 Authority Key Identifier:
                keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:70:0c:ac:d5:b0:42:3a:13:60:31:36:a6:6f:c2:f9:98:41:
         cf:1f:80:c6:34:f1:7a:c7:fb:9c:0d:ca:85:f4:c7:8e:71:80:
         b7:fd:62:7f:1b:aa:43:c3:36:be:c6:93:b1:3c:7f:48:c9:bf:
         41:cc:37:56:94:32:1f:e0:c2:fe:5c:f4:ed:18:f0:a0:c5:8b:
         a6:fb:f4:9c:e3:f7:8d:0a:60:70:d0:24:e3:37:30:37:90:d2:
         50:26:df:73:ee:95:3e:0b:50:86:0a:3a:9c:43:37:cc:dd:31:
         ba:ae:70:52:2b:a3:5c:c1:fb:26:fb:7a:3b:97:6b:a3:5a:b5:
         18:ce:84:fc:ed:b0:e3:a2:dd:87:89:4b:a2:08:a9:3e:1d:35:
         60:4e:c8:99:6f:90:69:21:50:ba:7b:03:eb:2e:f9:85:2d:8b:
         7f:56:da:0b:be:de:9e:04:0e:67:bf:e6:7a:3b:3b:ab:91:dd:
         58:89:75:5a:94:f4:0a:4e:69:26:58:1d:2c:68:41:5b:bb:39:
         5f:e5:86:9e:fd:c9:24:71:8b:d6:c2:d2:41:2d:3a:ef:97:ac:
         aa:6c:c0:ca:a9:00:d9:05:a2:ae:d3:a1:64:5c:b6:39:17:02:
         48:cc:e2:44:91:63:10:f7:24:12:82:b6:05:f2:5e:87:ce:1c:
         d2:b8:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:02 2025 by rpki-client