This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
File:                     F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json)
Hash identifier:          Uv0FkQ71OqYJds5i6seEo4FVOM4jhrx5KhP31V4C4z4=
Subject key identifier:   1D:52:84:8C:C0:14:DA:26:FD:9D:3E:67:79:58:CB:33:EB:7E:36:87
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Certificate issuer:       /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial:       2493F5A1653B49F55EC6D9BFD8593BC90D8E6271
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
Manifest number:          0492
Signing time:             Thu 18 Dec 2025 22:22:20 +0000
Manifest this update:     Thu 18 Dec 2025 22:17:20 +0000
Manifest next update:     Mon 22 Dec 2025 01:53:20 +0000
Files and hashes:         1: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: tWY/6umjYIKYO4Yi6unWY6z8ANffH061XFtZ500p3RI=)
                          2: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: 0BDcpOLIRVqH1LqrD2HTtyqqS166kEUq73to5WDYQTw=)
                          3: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: s5iztTFk3ebLSZ+KCquw2eFlDY3GHpQZHp4b4nSoOls=)
                          4: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: YDn+UkbOnA22nwNbzvw75sJ6kzbC7kgwQ8ntSkUIEQE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
                          rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 01:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:93:f5:a1:65:3b:49:f5:5e:c6:d9:bf:d8:59:3b:c9:0d:8e:62:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
        Validity
            Not Before: Dec 18 22:17:20 2025 GMT
            Not After : Dec 22 01:53:20 2025 GMT
        Subject: CN=1D52848CC014DA26FD9D3E677958CB33EB7E3687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:4a:26:da:bf:9a:a7:d7:e7:eb:84:06:9f:
                    73:8d:7b:a0:f0:6a:e8:19:fc:6d:e3:3d:dc:55:ea:
                    46:ea:e4:2d:a9:31:5b:78:08:42:38:9e:aa:f5:f2:
                    c0:02:7a:40:93:c4:30:c1:06:8e:2a:4d:fc:2b:db:
                    c9:7f:8f:af:ea:41:7d:3f:82:04:e8:10:fc:55:20:
                    46:83:7e:07:39:35:36:76:b7:42:5e:c4:c1:52:cb:
                    94:e9:ff:94:66:d2:14:f7:46:ed:c1:a4:f1:68:4e:
                    e8:91:58:29:c6:2e:2a:58:a7:4f:0a:2a:a4:fc:58:
                    f6:ad:1c:a9:5b:e2:70:be:10:9d:ea:99:a9:cc:20:
                    96:89:c7:91:ac:cc:54:26:da:30:a6:19:49:6a:4f:
                    6d:19:c7:b5:c8:d1:c4:25:4d:03:9d:08:1b:b2:28:
                    3e:bd:ba:30:62:5c:95:58:fc:58:e8:a0:ed:0d:15:
                    ee:68:2a:f3:f0:c8:83:8d:e7:e8:95:71:16:a7:8a:
                    06:ed:5f:d9:31:dc:92:cd:47:38:93:54:c6:17:6e:
                    2e:8b:45:98:b2:4c:80:24:22:61:c6:28:93:09:fb:
                    9f:9d:4f:27:55:5b:4c:15:b4:ea:f7:80:a3:a3:e5:
                    32:25:56:8b:d2:78:fb:05:39:d9:fd:8c:bf:39:6a:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:52:84:8C:C0:14:DA:26:FD:9D:3E:67:79:58:CB:33:EB:7E:36:87
            X509v3 Authority Key Identifier:
                keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:44:0d:de:c0:17:5c:ce:21:ee:35:cc:50:3d:4a:4b:f7:
         ba:72:d5:d5:8d:cd:06:08:89:28:fb:96:c1:06:0f:53:09:9c:
         2b:d5:ab:c3:62:a0:9a:17:2f:88:cb:fe:c6:7c:1c:19:57:f0:
         67:45:69:db:95:c2:98:5b:74:ab:f0:cb:f6:de:96:d0:97:0a:
         cc:20:0b:20:51:ff:90:a3:65:d8:89:ae:7d:19:cc:1c:df:1c:
         4a:24:f7:46:de:4a:19:7f:22:29:3e:cc:c9:b5:d3:b4:a3:bc:
         1f:55:f8:60:6c:75:61:59:fc:8d:ec:07:2c:72:da:e5:ec:29:
         73:f4:10:91:a4:41:e0:3e:ef:ff:f1:87:02:a7:f1:d9:ff:25:
         0d:8c:e9:5b:97:23:ec:36:ee:ef:b6:1b:e2:f7:18:25:fc:7f:
         be:7f:4a:45:f7:af:db:5a:da:13:97:ee:33:33:14:0e:91:eb:
         66:49:c7:85:9d:61:0a:e0:6f:c8:5e:e3:37:ac:1c:00:9b:eb:
         a9:01:74:5b:81:ee:f1:08:cb:29:3e:01:a0:35:92:e3:22:7d:
         dd:99:4e:7c:1d:0d:89:ae:13:c1:94:f3:86:7c:e0:1b:72:a5:
         48:18:d0:7e:f9:5f:01:60:9c:e4:6d:c6:b9:4e:9f:9b:7e:1f:
         59:04:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:23:46 2025 by rpki-client