This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
File:                     C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json)
Hash identifier:          EAOh0lKfWgrNatptXJJJFCqfMICzOM9ZKEtmBjRQ47U=
Subject key identifier:   B2:B5:BF:8B:22:5B:A7:6E:2A:D0:E7:03:1A:9D:95:3E:D0:A7:16:6D
Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
Certificate issuer:       /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Certificate serial:       62456DFABAF5C21F2DCF1ACF9C3338D124EE8BC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
Manifest number:          ED
Signing time:             Wed 17 Dec 2025 08:41:39 +0000
Manifest this update:     Wed 17 Dec 2025 08:36:39 +0000
Manifest next update:     Sat 20 Dec 2025 15:55:39 +0000
Files and hashes:         1: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: BaCudbD3tkteInBr/eTN2YBHR3RHaADfGbYYTJlsV+A=)
                          2: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
                          rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 09:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:45:6d:fa:ba:f5:c2:1f:2d:cf:1a:cf:9c:33:38:d1:24:ee:8b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
        Validity
            Not Before: Dec 17 08:36:39 2025 GMT
            Not After : Dec 20 15:55:39 2025 GMT
        Subject: CN=B2B5BF8B225BA76E2AD0E7031A9D953ED0A7166D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:21:e2:a5:bf:ab:67:fe:53:24:58:51:8f:ba:
                    91:c2:d4:b3:1f:93:19:c9:cc:a5:5d:e1:bf:7c:36:
                    4d:69:27:af:3f:af:3f:3a:0e:a8:64:38:9f:c2:8c:
                    46:67:53:5c:1d:39:84:2e:d6:10:03:7d:2b:6a:67:
                    38:89:73:5f:09:38:81:ae:3c:c2:f5:24:3a:41:77:
                    31:59:11:e0:59:21:7e:a5:d5:06:9f:7e:5f:0b:db:
                    87:49:db:f7:99:a9:95:8f:65:52:3d:2f:2f:99:52:
                    cd:0c:e6:fa:c0:97:10:9b:7c:98:8f:c2:32:df:35:
                    db:83:ae:9d:d7:bc:36:17:4e:2b:24:b8:f9:db:0b:
                    c9:df:9b:4e:6f:73:c6:e8:d0:cc:45:a7:ac:89:57:
                    43:dd:c1:ae:f3:01:2d:f1:bd:b7:c3:fc:4d:b8:91:
                    3d:19:00:6e:8d:bc:8a:6e:99:7e:1c:7e:4c:8a:eb:
                    ad:59:c7:28:4a:01:b4:41:0f:f6:09:45:46:59:17:
                    5a:6a:4d:82:ff:95:86:13:7d:53:52:56:2c:72:8d:
                    37:d9:9a:f8:6a:b2:bb:8f:4c:fd:fd:df:6e:30:c0:
                    8b:c3:7d:38:4a:ee:be:8c:b8:29:f6:7a:a7:8e:c4:
                    a6:6f:85:1c:6e:62:a4:f4:90:97:4b:2e:e7:96:51:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B5:BF:8B:22:5B:A7:6E:2A:D0:E7:03:1A:9D:95:3E:D0:A7:16:6D
            X509v3 Authority Key Identifier:
                keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:73:65:66:ac:62:89:92:22:d0:b2:7d:52:34:83:4f:a9:
         43:01:82:7e:21:a7:5d:4e:94:d3:5e:07:0f:ba:a4:de:32:47:
         58:0c:e9:f6:d7:c9:81:b4:88:80:74:6c:45:f2:e2:72:7d:e8:
         8c:66:22:1b:e6:92:e4:fa:21:b2:dd:5c:a7:37:59:74:e7:f9:
         27:3d:1a:67:fc:1c:ee:1f:cb:97:f7:38:f6:ec:c2:61:34:08:
         0a:e4:6d:bb:5a:cf:5e:bc:7d:bd:28:0d:75:57:d2:7f:1f:a5:
         2f:11:89:7a:64:83:7c:d5:c2:c3:7f:ec:b1:2e:95:68:53:98:
         67:1d:a2:96:6a:78:6a:c7:d6:3e:ae:7a:3a:c5:05:45:18:cf:
         55:82:4f:86:fc:e3:e5:6b:85:9e:1a:e1:dc:46:c5:b8:87:05:
         91:59:c9:77:6f:be:fe:5e:78:b5:72:e1:fb:4c:84:ab:86:d9:
         4f:fb:84:1f:bf:c7:a2:2f:e7:b0:5a:ba:a1:f0:08:2a:4b:3a:
         89:9e:ee:82:e7:d1:f9:fb:53:d6:81:c7:43:e3:ef:90:a2:a8:
         fe:62:43:24:db:65:d1:98:4c:2d:a5:06:2f:6d:97:89:ac:e8:
         c0:f7:19:0f:1b:8e:67:af:5d:cc:8b:0d:e2:b4:20:c7:37:2b:
         ba:5f:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:02:33 2025 by rpki-client