This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
File:                     A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json)
Hash identifier:          RQucbT7B50gsoz3Eso878vwsx8A4A4c1Kcy5M5y8SEg=
Subject key identifier:   0C:18:10:C7:C1:AF:68:9F:12:78:6A:D8:80:30:82:F7:D1:E8:9D:C2
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Certificate issuer:       /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial:       68741F3807BE5B36BDC27E32BC222C0401D61D78
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
Manifest number:          04E3
Signing time:             Mon 22 Dec 2025 17:20:40 +0000
Manifest this update:     Mon 22 Dec 2025 17:15:40 +0000
Manifest next update:     Thu 25 Dec 2025 20:59:40 +0000
Files and hashes:         1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: AVjEjl7VcTn1SCRL+7Wc9zDcnDwHe0HpST4qB1cIOPc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl
                          rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:74:1f:38:07:be:5b:36:bd:c2:7e:32:bc:22:2c:04:01:d6:1d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
        Validity
            Not Before: Dec 22 17:15:40 2025 GMT
            Not After : Dec 25 20:59:40 2025 GMT
        Subject: CN=0C1810C7C1AF689F12786AD8803082F7D1E89DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:96:38:aa:be:91:6f:83:62:66:17:0d:3a:
                    0f:63:ec:cf:41:b9:c2:90:8f:91:0c:2c:0c:64:bc:
                    21:0a:96:e2:0e:ad:03:5b:ff:b2:db:02:99:eb:1d:
                    fb:a1:fa:4c:9f:6c:11:97:4c:6e:ad:1a:b3:8c:99:
                    60:36:3e:83:c6:6e:c8:19:b2:ce:be:76:e9:16:99:
                    0f:48:a8:f4:08:07:85:52:09:65:98:d1:ec:75:7a:
                    5e:ec:58:70:20:20:d4:1e:5e:b9:9e:46:1b:8d:ea:
                    95:8d:5a:ba:00:f6:72:39:4d:8e:d7:09:f2:3f:7d:
                    e2:02:ff:8a:94:91:e1:e4:11:1f:ea:f3:0e:0d:16:
                    f9:6f:47:e5:5b:fe:7f:ed:7a:93:3d:d9:fa:38:73:
                    b2:ce:3d:e2:af:93:8b:6a:6c:5c:21:2c:30:ef:9d:
                    37:1d:32:22:c7:43:a8:67:94:88:a8:3f:ef:2d:b3:
                    47:9a:34:aa:93:07:88:a1:c3:9f:3d:bd:c6:ee:01:
                    36:26:b4:d9:6f:9e:1c:76:1a:86:f4:40:34:6d:34:
                    e4:80:b2:82:b8:53:19:16:47:f7:b5:b8:ed:31:26:
                    56:c6:72:a8:c7:a7:45:49:d6:34:5f:99:67:af:87:
                    cb:ab:94:e6:e1:04:37:91:0b:20:ed:da:83:9a:4e:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:18:10:C7:C1:AF:68:9F:12:78:6A:D8:80:30:82:F7:D1:E8:9D:C2
            X509v3 Authority Key Identifier:
                keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:95:ba:54:e6:0c:a7:52:4b:0c:4b:79:aa:0f:f9:1f:92:
         0c:cd:b2:23:e5:76:01:5b:b7:50:5e:53:75:d5:7c:93:37:b8:
         a7:64:bd:bd:1a:9a:47:8c:ad:e2:f9:55:93:97:64:f3:42:94:
         da:fd:88:3e:3b:19:2d:e9:1b:bf:af:5d:42:f5:6a:57:29:f9:
         e2:60:6c:5d:71:46:05:1a:c1:07:7b:bc:1a:c5:94:e6:e6:d8:
         b4:eb:fb:f0:61:42:d3:b1:f3:1a:e9:e2:d4:0a:6a:48:80:f5:
         62:e1:30:62:cf:e4:fd:a9:94:90:d5:15:f1:c3:7c:7b:0e:f3:
         ab:70:41:f5:97:e1:44:b3:5d:79:6e:24:40:c1:45:dc:3a:72:
         75:08:b6:ac:a8:fe:07:33:6c:6c:ea:c5:94:c6:1d:8b:d2:23:
         0c:e8:80:2b:bd:07:da:f8:69:d6:c3:19:da:c4:e2:e8:2c:cc:
         c4:5c:18:ad:15:61:c0:0b:6f:0c:f3:b6:2c:b0:7d:05:18:9f:
         e4:fc:27:d4:e0:a0:7d:8b:90:1f:03:e7:d3:6e:26:0e:8e:54:
         4b:1f:4f:ae:50:a5:12:75:d4:05:81:e4:6d:ae:c2:36:49:b1:
         80:0f:0c:22:fe:42:4d:32:1a:fc:93:3a:3d:52:9c:61:56:9f:
         56:a1:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:16:33 2025 by rpki-client