This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
File:                     50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json)
Hash identifier:          n1R1u4SuDxXQPmqljAEKFAKpBMBSjpaPeB9VTOd4OhE=
Subject key identifier:   98:26:C3:81:30:36:98:A7:7E:AC:1D:DD:5D:3A:2E:D8:AC:E4:11:9E
Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A
Certificate issuer:       /CN=50D9825940B483F044841C179E5B7712607CAB2A
Certificate serial:       121753F274815CA9C165711B1DE716D3EC637E52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
Manifest number:          0247
Signing time:             Tue 23 Dec 2025 04:22:13 +0000
Manifest this update:     Tue 23 Dec 2025 04:17:13 +0000
Manifest next update:     Fri 26 Dec 2025 10:00:13 +0000
Files and hashes:         1: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: Si2XPO58WdgrrVsoRuITYEz1xHppBjuc5ODF09xj+uQ=)
                          2: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: 8ucdhC8+G/GM9sLgWMqJbTh8/P5IkKccW0COx5GovCw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl
                          rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 10:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:17:53:f2:74:81:5c:a9:c1:65:71:1b:1d:e7:16:d3:ec:63:7e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A
        Validity
            Not Before: Dec 23 04:17:13 2025 GMT
            Not After : Dec 26 10:00:13 2025 GMT
        Subject: CN=9826C381303698A77EAC1DDD5D3A2ED8ACE4119E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:ea:8e:a8:0c:4b:c1:58:24:93:83:81:96:
                    d6:50:9a:c9:a6:23:6f:19:99:d0:d3:e9:ab:65:91:
                    07:3a:b4:47:08:4b:40:dd:ed:b7:81:73:62:0a:9e:
                    80:81:d1:24:14:4a:f9:9f:bf:9a:da:19:13:f7:50:
                    b2:c0:42:1e:c0:71:47:82:73:ea:e2:02:d6:8a:b4:
                    ba:db:e6:aa:60:f9:47:4c:99:8d:d1:12:ea:3a:26:
                    b2:e5:5d:9b:b2:a0:94:c4:8a:a9:a7:25:15:92:5f:
                    5a:d9:20:7a:50:c4:65:50:cc:82:ea:91:45:ed:97:
                    31:01:d2:a0:9e:39:dc:26:29:8c:db:33:08:f9:31:
                    91:01:6c:a5:45:b4:a3:3e:68:d7:f4:fc:e4:91:82:
                    56:78:d7:de:6f:65:ab:cc:02:cb:79:3e:eb:17:08:
                    f2:c3:0d:9b:7f:83:ea:a5:f7:19:00:ff:09:fb:92:
                    dd:21:79:07:16:f8:04:4f:82:01:b5:a3:5d:b7:e3:
                    b8:56:58:57:cb:a1:fb:51:3f:11:09:25:b2:64:84:
                    eb:0a:66:8b:53:48:be:4d:49:f2:3f:fd:3f:6c:05:
                    dd:22:af:c0:9d:37:f9:5d:c1:bd:7c:29:48:eb:6a:
                    07:7a:7e:84:c9:04:6a:fe:87:02:a8:f1:bc:54:19:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:26:C3:81:30:36:98:A7:7E:AC:1D:DD:5D:3A:2E:D8:AC:E4:11:9E
            X509v3 Authority Key Identifier:
                keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b8:14:00:6e:54:bc:cf:59:56:b4:c2:11:f7:32:28:37:83:
         b0:c0:45:fb:cc:ca:c5:09:99:99:32:d3:43:02:bc:2b:05:c9:
         c4:f7:f0:15:b8:f2:8d:07:a3:da:63:00:3b:41:6c:ab:97:8c:
         86:69:95:55:f6:3f:5e:be:53:3a:37:ea:f4:ee:d2:d6:c1:e9:
         f8:b6:f1:54:44:88:25:a6:bd:a8:71:6c:88:29:7a:44:bd:7a:
         89:f1:93:8e:d5:94:61:67:ac:96:cb:57:bc:bb:d7:df:a7:62:
         b8:dd:4e:0d:a2:23:82:c5:8b:02:16:38:a8:c4:ae:25:6a:9d:
         56:35:9b:b3:a9:70:14:cf:c2:59:e7:c1:0d:a6:d2:7e:ae:aa:
         71:ef:9d:0e:62:03:02:3d:86:65:92:f5:7a:60:17:52:dd:a0:
         39:9e:59:b4:4c:ff:2a:d7:eb:b2:e7:b3:6f:0a:28:5f:d6:78:
         f4:88:bd:83:22:04:a1:9c:f3:36:4f:15:e5:36:b0:03:aa:4e:
         94:36:65:fb:28:c2:ce:d1:3e:42:c7:22:47:da:2d:30:94:06:
         37:fb:d8:03:d4:45:38:28:68:14:d4:f1:9f:c4:66:ea:9d:6c:
         13:32:05:0d:09:43:bf:6d:11:fc:24:20:ac:76:27:1b:3c:a0:
         a2:b7:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:25:18 2025 by rpki-client