This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
File:                     247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json)
Hash identifier:          dKCBbYCv/B14RPnB0PsUz5yBM8fh6cOfLj1ga+jvkGM=
Subject key identifier:   95:CB:61:98:4D:92:57:94:65:55:18:30:3F:DD:E1:E1:C5:56:9B:C1
Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76
Certificate issuer:       /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
Certificate serial:       762E947F50EA67334B5FBA3A24D18C4BC2E2D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
Manifest number:          0323
Signing time:             Thu 18 Dec 2025 08:01:12 +0000
Manifest this update:     Thu 18 Dec 2025 07:56:12 +0000
Manifest next update:     Sun 21 Dec 2025 12:37:12 +0000
Files and hashes:         1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: xYrkf3DATHs0l2OkDf+vvwMGGCd7I+981hTjoNErPB4=)
                          2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl
                          rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 12:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2e:94:7f:50:ea:67:33:4b:5f:ba:3a:24:d1:8c:4b:c2:e2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
        Validity
            Not Before: Dec 18 07:56:12 2025 GMT
            Not After : Dec 21 12:37:12 2025 GMT
        Subject: CN=95CB61984D925794655518303FDDE1E1C5569BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:a2:5a:7e:9b:6f:6d:d3:06:b9:a9:91:38:
                    90:8f:02:04:4c:23:d7:1f:50:fc:10:47:47:4c:b9:
                    75:80:53:61:11:cd:b2:82:32:d8:0c:75:23:5b:5b:
                    a3:c5:47:e0:5b:d0:55:50:54:6f:b1:f3:db:e7:89:
                    47:42:cd:3f:26:2e:64:ae:21:04:a6:04:27:bc:40:
                    12:ae:4f:45:d3:b7:22:c6:75:4a:ab:80:24:72:f4:
                    02:02:cd:23:21:97:ab:4c:5e:f0:0d:4c:f4:36:93:
                    d2:e4:ae:7d:c2:24:7c:3b:74:90:6f:3e:3a:60:8f:
                    40:5c:bb:66:20:ac:6c:bb:f5:03:dc:51:44:96:09:
                    10:33:7f:c2:45:b2:74:50:dc:66:a3:72:33:ba:77:
                    73:f7:47:9f:55:7c:2d:ee:2e:c2:e8:ee:9b:4f:d7:
                    85:d9:53:c0:c3:50:d7:45:71:a1:1c:ad:dd:73:76:
                    ae:4d:4d:d0:08:6f:30:3d:d4:aa:bc:05:59:63:83:
                    4a:75:77:70:7b:6f:66:25:8e:a5:a5:2f:48:65:0e:
                    42:7c:1a:69:06:5e:a3:b0:a4:ee:d7:43:ff:48:2e:
                    3f:74:cd:50:2e:7e:64:11:e1:d6:3f:5e:5d:11:0c:
                    d6:20:ba:ed:41:e2:69:24:a1:54:36:94:73:27:ed:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:61:98:4D:92:57:94:65:55:18:30:3F:DD:E1:E1:C5:56:9B:C1
            X509v3 Authority Key Identifier:
                keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ec:7a:bc:db:99:90:db:3b:91:a0:9c:56:3d:26:e0:b8:52:
         ee:72:d1:b6:d5:e3:9c:6f:18:fa:fa:d3:ff:da:8b:7d:b6:6e:
         29:eb:de:5a:ab:6e:c9:e9:de:0a:e0:c1:02:ca:59:cd:c2:23:
         92:ff:d1:57:73:ea:49:14:42:69:7e:8e:27:82:b3:43:ae:c5:
         7d:87:13:f3:b9:50:3f:b9:05:f7:c5:8d:96:cf:50:a8:6b:a3:
         c7:79:1b:a8:1d:d6:08:fd:8b:05:01:a7:3d:ee:6d:b3:e4:5f:
         1b:49:41:9a:58:94:2c:79:39:80:60:4f:35:48:69:08:c7:db:
         29:08:a3:33:49:b0:a7:1b:d2:b4:4d:44:3a:9c:c6:08:95:40:
         5e:a6:7c:87:d3:68:86:3b:4c:3b:00:e6:64:36:0c:fc:6b:cd:
         75:6c:82:60:02:1a:5d:a2:ad:12:a6:d4:c2:a1:bd:7a:bd:18:
         24:92:29:d4:75:32:fe:db:56:ac:b6:4c:7b:a0:7b:fa:3c:82:
         e1:98:ed:81:0a:ba:d4:4c:41:da:32:c0:5f:ce:52:12:6d:74:
         f7:6e:49:e4:03:42:9b:83:90:1c:1f:e8:e7:35:40:36:ae:a6:
         71:37:ae:d9:fa:7a:df:2d:d9:22:6d:d7:df:91:37:6c:4f:3c:
         af:28:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:51 2025 by rpki-client