This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
File:                     D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json)
Hash identifier:          vCTlf2kbc+kN6Z7vvJ0NfKPSmdZ9h8njcKYaZChnB1c=
Subject key identifier:   4B:9E:1E:C6:A6:F4:1F:F6:18:2E:68:34:9D:8C:D4:8B:73:BC:6E:26
Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06
Certificate issuer:       /CN=D6FA07102C8726922074D42DFF59946144A13506
Certificate serial:       7681B281FCFD53C631F6E261567617FAF665438C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
Manifest number:          AA
Signing time:             Wed 17 Dec 2025 21:32:22 +0000
Manifest this update:     Wed 17 Dec 2025 21:27:22 +0000
Manifest next update:     Sun 21 Dec 2025 04:20:22 +0000
Files and hashes:         1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: BHPd3zpd4YMspe715+KaTLco9wdHSdc0n316nUKIjS4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl
                          rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 04:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:81:b2:81:fc:fd:53:c6:31:f6:e2:61:56:76:17:fa:f6:65:43:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506
        Validity
            Not Before: Dec 17 21:27:22 2025 GMT
            Not After : Dec 21 04:20:22 2025 GMT
        Subject: CN=4B9E1EC6A6F41FF6182E68349D8CD48B73BC6E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:ee:f4:00:a8:8a:d2:04:4a:de:fe:1b:17:
                    7d:09:4e:dc:1b:fa:e5:29:dc:a4:0c:6a:6d:f0:d8:
                    1f:a8:51:fd:82:da:b7:42:47:d7:ee:56:89:f3:e8:
                    a9:18:7c:65:6f:0e:8d:2b:6a:b6:af:cb:66:3b:c8:
                    4b:07:57:1a:d1:14:fd:c1:43:11:4b:e4:36:30:4c:
                    59:cb:f0:f3:1c:a0:ff:c4:ae:25:da:a5:d2:7b:09:
                    d3:51:7b:b2:8a:96:69:24:ed:3b:66:af:cf:08:2c:
                    f2:6d:33:61:ad:15:41:09:3e:d7:dd:8d:cd:2e:c1:
                    84:97:b7:dd:18:fa:bd:55:6c:06:85:6e:47:cb:04:
                    f0:35:07:8c:a5:ba:b6:62:72:c3:d4:66:3d:db:70:
                    ac:dd:e5:90:4d:ec:ce:74:4f:af:03:6b:de:74:6c:
                    63:88:59:c0:1f:2d:fd:ff:7e:04:8d:9a:13:34:c5:
                    50:fa:55:a0:7f:71:24:6e:a3:71:38:06:bf:6e:de:
                    38:c7:ff:a3:d4:5f:b8:43:3a:4d:7d:3b:bd:29:a1:
                    cf:b9:d2:f9:a0:45:55:ba:0c:be:5b:9c:e9:b0:9f:
                    b5:d4:e2:ba:7d:e4:23:f4:e4:c6:1e:e0:b3:ef:29:
                    63:62:f5:24:87:bf:86:4a:cd:a9:e9:a1:a8:ec:58:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9E:1E:C6:A6:F4:1F:F6:18:2E:68:34:9D:8C:D4:8B:73:BC:6E:26
            X509v3 Authority Key Identifier:
                keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:81:e2:4f:d2:7e:00:8b:0e:bc:a9:e1:a1:f7:16:82:57:
         91:23:51:5b:ef:8c:05:23:1c:1a:79:74:8c:75:5a:3a:5e:71:
         c3:e1:5e:72:93:2c:4f:10:54:2b:8e:f0:6d:50:c9:96:bd:04:
         0b:05:43:ba:9c:f4:e6:b6:cf:b0:7f:22:fe:30:08:c0:15:a4:
         67:59:f0:65:38:7a:d2:ec:24:ec:30:cd:ac:fa:fe:0f:60:14:
         cb:89:03:cd:35:35:63:ba:00:b5:43:bc:1d:68:0d:18:20:08:
         1b:59:ef:db:3f:76:ba:18:d3:5a:ac:0b:11:64:fa:78:1a:ee:
         47:40:06:be:6b:45:85:de:37:0b:0c:30:64:4c:c2:f2:ca:41:
         f0:00:c3:b8:82:bc:22:96:50:c9:95:90:c4:54:73:fb:45:34:
         79:2f:8c:2a:10:ea:c6:e5:1b:2b:92:79:6a:4c:51:80:10:53:
         af:50:bb:4f:b0:79:56:a6:85:5a:e9:da:16:4b:11:6b:38:5d:
         42:bf:6d:03:a2:48:75:e7:74:d7:27:9d:8a:78:f2:61:49:69:
         e5:0d:4d:e1:cc:a8:a2:26:38:af:c7:6a:d1:f8:67:b2:d8:d6:
         98:0a:b8:67:9a:5f:9f:de:c1:97:6c:72:c4:c9:c9:1a:db:1f:
         c0:31:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:58:59 2025 by rpki-client