This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft
File:                     483F366E1FE9C068ED4417FD71D5B18420D56B62.mft (raw, json)
Hash identifier:          ipA9AXSuI/T8G3ECCcvUITfrfd5NCZ2lvxUxh646wzk=
Subject key identifier:   23:61:33:EC:DD:EA:1B:3E:CD:EC:17:5D:2F:15:C6:71:17:E9:FB:13
Authority key identifier: 48:3F:36:6E:1F:E9:C0:68:ED:44:17:FD:71:D5:B1:84:20:D5:6B:62
Certificate issuer:       /CN=483F366E1FE9C068ED4417FD71D5B18420D56B62
Certificate serial:       54719299F34FF8D36C2104BFA3F346DDC47E2EE1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft
Manifest number:          04F8
Signing time:             Thu 18 Dec 2025 01:20:46 +0000
Manifest this update:     Thu 18 Dec 2025 01:15:46 +0000
Manifest next update:     Sun 21 Dec 2025 07:00:46 +0000
Files and hashes:         1: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: nJfbDfnLQ0hPzTdK1jvw4RWKNmgPHIKJaKdLROAz98U=)
                          2: 483F366E1FE9C068ED4417FD71D5B18420D56B62.crl (hash: VBQO2Mz9hFGzcW3TcJA+8LhjP025U7jB4HRnZYHC60E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.crl
                          rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:71:92:99:f3:4f:f8:d3:6c:21:04:bf:a3:f3:46:dd:c4:7e:2e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483F366E1FE9C068ED4417FD71D5B18420D56B62
        Validity
            Not Before: Dec 18 01:15:46 2025 GMT
            Not After : Dec 21 07:00:46 2025 GMT
        Subject: CN=236133ECDDEA1B3ECDEC175D2F15C67117E9FB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:6a:95:8f:11:05:aa:a6:ba:69:e7:ad:2e:
                    b4:80:58:98:79:ce:d2:a6:f9:85:69:c2:87:dc:7f:
                    ef:82:96:57:7d:a0:98:0b:57:6f:de:4c:5f:d9:7a:
                    ef:37:cc:29:26:5f:cd:ea:27:36:a8:80:3e:9a:d0:
                    a3:c9:d7:97:46:db:a5:07:6f:30:09:ae:85:eb:25:
                    b9:05:56:6a:a3:15:7f:53:36:22:2e:80:ea:41:25:
                    1c:58:eb:e6:b5:d8:49:5a:2d:36:89:dd:83:a1:de:
                    86:99:0f:36:7e:3a:ce:d9:9e:6a:50:c5:c9:05:f9:
                    9c:d1:8f:a1:26:00:17:a1:c4:6a:d9:04:c0:87:ef:
                    4a:1c:bd:6b:ec:e5:7b:a2:b9:af:c8:e3:28:b0:ac:
                    13:f8:7e:db:87:9b:01:fc:99:bd:41:87:48:10:35:
                    5a:ef:13:c8:e5:c4:39:22:85:d5:27:db:92:ee:b3:
                    0f:a3:c1:c1:bd:ab:f9:6b:e4:cc:40:14:79:bd:e1:
                    7b:cd:e7:d4:2a:0d:5f:5a:26:1d:70:d5:7f:1a:d5:
                    bd:c5:c9:bf:88:b3:ec:d9:b7:31:49:b1:0f:f4:ac:
                    91:96:ef:64:f7:00:fc:61:95:c4:ac:5e:09:d4:d8:
                    cf:76:16:73:70:62:ad:e3:06:58:a8:8f:93:74:7a:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:61:33:EC:DD:EA:1B:3E:CD:EC:17:5D:2F:15:C6:71:17:E9:FB:13
            X509v3 Authority Key Identifier:
                keyid:48:3F:36:6E:1F:E9:C0:68:ED:44:17:FD:71:D5:B1:84:20:D5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:89:41:ee:17:47:e9:4c:aa:38:92:9a:ac:a8:2e:cc:95:4f:
         a9:fd:81:08:21:0a:1d:a1:af:fb:6b:46:42:62:a2:7c:e7:c8:
         65:39:c5:16:3f:4c:7b:f2:96:7a:6b:84:c8:51:61:69:68:0b:
         51:7e:bf:40:b7:6d:0b:f8:a6:76:01:8c:b4:58:ff:91:f8:73:
         de:ec:9f:90:05:85:c8:b4:9b:60:9f:6d:25:5c:52:3f:d0:63:
         89:a4:98:1e:8e:58:56:c2:76:38:7b:d4:44:45:27:9c:c7:35:
         09:34:31:9c:d0:62:4f:22:42:1b:3c:70:67:6f:c7:73:e7:8d:
         03:e5:23:1a:60:27:d3:dd:4b:ca:b6:0a:ce:da:1f:ad:55:5a:
         73:02:b5:9f:04:ec:3b:83:96:1a:99:31:07:8f:75:7c:62:2e:
         b4:8a:7d:74:49:43:ab:ee:09:b5:ab:f3:f3:3b:53:60:5e:04:
         ab:84:0e:32:b8:95:60:27:b7:59:38:7c:1c:94:b0:a0:f6:b8:
         c5:00:70:1a:cc:c6:f5:d0:21:04:b3:31:8b:df:4d:bf:af:89:
         e3:29:20:bf:af:0c:fa:23:7c:ce:9b:ef:64:6c:b2:81:a8:86:
         e7:4b:3a:52:7d:f6:30:a5:b2:4c:5e:29:9d:c2:ff:35:c8:af:
         45:7c:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:23:51 2025 by rpki-client