This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
File:                     4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json)
Hash identifier:          VlXucnOhErd6V+Kq+k28Pt6AyeefqcFOE4qYvd+A3Ik=
Subject key identifier:   D1:F8:50:95:58:05:7F:7D:4C:3C:5D:77:FD:77:7B:B6:CC:A5:DA:61
Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
Certificate issuer:       /CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Certificate serial:       6C2F824BF0FE73463166AC7668547CA38E02D061
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
Manifest number:          A7
Signing time:             Fri 19 Dec 2025 11:01:30 +0000
Manifest this update:     Fri 19 Dec 2025 10:56:30 +0000
Manifest next update:     Mon 22 Dec 2025 11:17:30 +0000
Files and hashes:         1: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: BHmsJEkrkcMsGHfAJB1USiIzpDsoBE6tolXaxxWWYuo=)
                          2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: ZyJrdfvAEVZbeVLqPiqVTGVt7Z4QPKAa+3EvCLOTlmU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
                          rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 11:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2f:82:4b:f0:fe:73:46:31:66:ac:76:68:54:7c:a3:8e:02:d0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B
        Validity
            Not Before: Dec 19 10:56:30 2025 GMT
            Not After : Dec 22 11:17:30 2025 GMT
        Subject: CN=D1F8509558057F7D4C3C5D77FD777BB6CCA5DA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:3e:8a:f1:fe:d0:75:ef:5f:36:27:e1:ff:
                    7a:c5:9f:dc:be:02:21:9a:95:f5:a9:a6:7c:5e:5b:
                    5b:1d:f3:08:85:15:e1:f0:68:39:09:dc:eb:8b:3e:
                    f1:75:45:3a:75:dc:49:b5:5b:40:da:04:4d:05:a0:
                    fe:13:6d:33:f6:fa:d4:d3:06:be:f9:03:54:6d:5e:
                    5c:a4:8e:40:8f:1e:f4:99:61:7b:06:40:1b:66:0c:
                    3f:e3:b2:bd:7d:8c:ee:12:73:74:96:26:1d:1a:2a:
                    d2:e5:29:cf:a9:2f:07:8c:1d:61:83:e2:0d:68:d6:
                    44:1f:f1:82:0c:28:5a:ab:a8:f7:36:5c:db:9b:d5:
                    f2:be:a6:e3:0e:3f:5b:5e:a0:7c:80:9d:d3:44:2a:
                    ea:42:4e:f2:ce:59:b4:bb:d6:e3:93:5a:33:b5:cf:
                    73:99:ad:c3:b5:ff:8d:ff:c4:b8:05:da:06:a8:4c:
                    54:87:e6:80:18:b4:b5:3f:95:f3:d5:8d:fd:27:c5:
                    e7:41:cb:42:bb:47:30:ba:e6:fb:15:f5:ee:7e:60:
                    dc:0c:c7:73:17:b8:76:c5:60:a9:0c:d9:58:37:f1:
                    d7:21:ab:14:31:be:fa:cf:62:b3:07:03:d6:aa:8d:
                    de:f8:2c:65:fc:3b:50:4b:e6:ad:a1:6b:34:0a:3b:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:50:95:58:05:7F:7D:4C:3C:5D:77:FD:77:7B:B6:CC:A5:DA:61
            X509v3 Authority Key Identifier:
                keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:82:10:9d:a4:90:5a:c8:65:8a:41:4c:f3:c7:7b:74:0d:a1:
         85:c0:b8:96:57:86:a2:2d:c1:9f:f0:61:a2:25:f1:7c:d5:69:
         dd:e2:99:15:8f:1e:8c:f5:fd:38:3c:71:14:58:aa:3d:79:3b:
         a5:1e:5e:b9:83:63:b8:d9:47:de:e2:e7:7c:82:26:9f:99:d6:
         9b:c1:19:85:28:c5:c1:37:9d:48:25:74:e3:c4:06:dc:16:cd:
         83:c0:c7:32:af:83:25:f7:d0:60:92:d2:ed:fd:32:97:3c:ef:
         8c:c2:e0:bf:7c:76:0c:72:da:e4:53:bc:f2:a3:e5:23:d0:bc:
         da:12:af:b9:17:bb:87:2e:34:a7:b6:c6:9c:24:d3:89:d4:75:
         87:ad:e1:e2:d4:4c:e3:6e:02:17:09:98:84:a9:7a:84:02:47:
         89:ec:6d:12:f0:e4:4a:7d:a5:40:88:d9:85:5e:db:82:a5:b7:
         5e:5d:10:01:32:bb:ec:85:e5:d1:f8:02:8f:d6:35:58:4b:ac:
         38:f1:31:df:78:35:13:ab:aa:62:f1:5d:4d:62:06:87:44:32:
         a7:a2:87:11:3c:da:ad:87:48:a0:7b:26:d2:25:f7:9e:64:31:
         2d:be:e2:c7:04:21:37:81:19:aa:17:5c:8d:e8:35:78:f0:14:
         65:e6:63:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:10:59 2025 by rpki-client