This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft
File:                     C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json)
Hash identifier:          zfN3evnZ3sOEBYhnhztBIIaA/L8Woz7i7dPWKH1n6GE=
Subject key identifier:   7F:57:14:17:5E:47:B0:1A:39:1A:70:06:64:B6:CF:A3:19:1B:13:FA
Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40
Certificate issuer:       /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540
Certificate serial:       4767D63D624F836C84F415CF383A4E7BFB785836
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft
Manifest number:          FB
Signing time:             Wed 17 Dec 2025 21:31:26 +0000
Manifest this update:     Wed 17 Dec 2025 21:26:26 +0000
Manifest next update:     Sat 20 Dec 2025 23:14:26 +0000
Files and hashes:         1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: EZDZKOHDl/frAtyb1Ya+QwfWN4QIhj7Mr/MBSNqkKoY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl
                          rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 23:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:67:d6:3d:62:4f:83:6c:84:f4:15:cf:38:3a:4e:7b:fb:78:58:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540
        Validity
            Not Before: Dec 17 21:26:26 2025 GMT
            Not After : Dec 20 23:14:26 2025 GMT
        Subject: CN=7F5714175E47B01A391A700664B6CFA3191B13FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:8f:60:fa:34:da:7c:64:1c:41:d9:9c:92:
                    37:70:d6:8a:9e:c5:0f:c6:2a:bf:57:cd:50:75:24:
                    e7:cf:94:f5:a0:cc:6d:ed:25:dc:12:9d:da:49:8a:
                    b6:40:00:3a:a5:34:ef:a1:5c:81:0f:e4:9f:8e:15:
                    36:12:1b:25:09:6b:2e:c6:76:03:7d:0c:e3:c4:c2:
                    d7:1a:96:72:08:80:5e:b8:77:cd:99:b0:c1:7a:87:
                    e3:af:be:c2:30:b0:ce:e7:54:76:60:5e:5d:57:42:
                    be:d9:63:b6:7a:2a:ae:39:a8:a7:51:aa:68:87:49:
                    83:5d:ed:b6:56:43:65:c0:55:7f:f7:4c:a0:0a:c2:
                    2b:e1:7e:dd:a1:e1:c1:d4:2c:77:cf:0b:70:2b:a0:
                    fc:37:38:3a:e7:74:db:48:3f:17:3a:4f:6a:7d:c3:
                    49:76:d0:0a:d4:44:b4:f1:6d:9d:1e:e7:c2:04:7f:
                    24:8e:f2:61:ad:4a:b6:81:26:3d:ae:4d:6c:c4:b9:
                    c0:59:e6:cf:62:ba:2a:68:70:a9:1c:ca:22:61:37:
                    80:62:d4:df:89:ee:88:f2:7c:f9:e9:c8:0e:57:8b:
                    92:af:c9:02:93:f2:15:8e:55:03:82:6c:fe:d6:9c:
                    89:4d:a6:6a:f3:c7:a1:4c:84:28:21:1e:be:41:28:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:57:14:17:5E:47:B0:1A:39:1A:70:06:64:B6:CF:A3:19:1B:13:FA
            X509v3 Authority Key Identifier:
                keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:96:4c:f1:05:03:51:15:fb:1a:d3:95:65:66:9b:02:a2:35:
         85:4f:18:34:6c:39:ea:62:99:98:be:3e:70:e3:8f:b6:45:54:
         9b:bd:88:d7:74:15:e3:f8:34:f0:bf:20:18:56:61:b3:04:90:
         32:5e:c4:cf:7b:02:1b:5b:85:f1:e6:11:c6:c9:1e:a6:e9:93:
         a6:00:e0:ee:d4:69:c9:67:ec:f9:84:bf:07:2f:80:41:13:73:
         1a:55:11:77:ae:80:3a:eb:cb:2e:6d:61:10:b4:f5:f8:bb:52:
         87:35:a4:53:e4:2e:44:74:ba:26:24:d2:55:21:19:b8:0c:a4:
         49:d3:44:87:55:90:e1:dd:e9:32:e8:6c:e8:0a:7d:2c:65:b6:
         49:33:ab:9e:e7:4b:43:5c:a4:54:ae:75:52:21:1b:33:d7:88:
         80:58:1e:56:7b:c3:bf:8e:47:2b:6c:4c:f9:b4:6d:de:e8:b8:
         52:b6:ca:7d:1f:77:cf:39:72:6c:e1:ea:63:d1:59:7f:b4:6c:
         f8:f2:c9:4b:ec:40:00:88:f5:e0:0c:77:5e:87:7b:ec:db:63:
         d0:d4:9c:0f:f9:d8:e1:e5:24:c9:2a:1a:08:5f:27:2e:99:d3:
         ca:f7:da:3e:e8:c5:c8:14:5c:ce:e5:96:5a:09:5e:98:bf:7a:
         a6:bb:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:17 2025 by rpki-client