This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft
File:                     469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft (raw, json)
Hash identifier:          DpymsbRdTwuSbsFji0nCGql/yIqdoI2isgXBnXUlMKE=
Subject key identifier:   5E:C7:77:67:03:36:0B:05:6D:FE:5E:5E:6C:FC:35:EC:E5:0D:A3:D6
Authority key identifier: 46:9E:6F:E6:72:57:09:FD:0C:DC:D1:6B:0C:F8:46:82:AF:BC:BF:76
Certificate issuer:       /CN=469E6FE6725709FD0CDCD16B0CF84682AFBCBF76
Certificate serial:       047FDB71498C562E04DBFB0E44B027BFC090E1E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft
Manifest number:          0148
Signing time:             Thu 18 Dec 2025 07:10:54 +0000
Manifest this update:     Thu 18 Dec 2025 07:05:54 +0000
Manifest next update:     Sun 21 Dec 2025 10:43:54 +0000
Files and hashes:         1: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: pdmfugYEj65Crz309oxNUT8Zr4xfygCpSwRusfz0tXY=)
                          2: 469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.crl (hash: A1GJZ4MEwEo/1wpBbobT+3hYabQvd7uBV0IGruIcWwE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.crl
                          rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 10:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7f:db:71:49:8c:56:2e:04:db:fb:0e:44:b0:27:bf:c0:90:e1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469E6FE6725709FD0CDCD16B0CF84682AFBCBF76
        Validity
            Not Before: Dec 18 07:05:54 2025 GMT
            Not After : Dec 21 10:43:54 2025 GMT
        Subject: CN=5EC7776703360B056DFE5E5E6CFC35ECE50DA3D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2f:31:df:87:7f:20:42:c4:5c:be:d4:83:f9:
                    80:c0:30:f1:9d:c6:15:22:71:4d:d4:c0:4a:f8:f1:
                    1d:65:e3:b4:63:4a:de:51:9d:e1:ad:18:c0:95:f4:
                    cb:00:ca:f5:12:33:51:f4:da:e7:32:a8:59:94:b2:
                    62:66:d9:94:f2:85:b1:d1:78:c7:ae:65:92:ed:bd:
                    cb:7b:72:2a:c8:05:1f:84:dd:7a:0f:6a:ff:0a:7a:
                    21:4c:fb:32:05:d6:a9:88:36:65:53:86:d6:00:8a:
                    73:28:32:1a:9e:2e:cc:db:4f:4f:fa:d7:38:8b:f7:
                    a7:62:63:d6:ad:ff:6c:9f:95:64:84:1f:6f:56:a6:
                    a0:1b:a6:cb:75:33:83:fc:98:72:78:28:d7:77:9c:
                    b4:90:b8:36:21:ab:0d:9e:12:23:f8:72:3e:d7:04:
                    7b:65:d1:9b:14:33:19:df:1c:05:ad:6a:85:e3:2e:
                    c9:27:f4:c2:22:fb:19:dc:db:4c:db:f3:53:56:cc:
                    21:15:8a:2b:f6:92:95:13:97:5b:f7:1f:25:8a:8a:
                    52:f9:59:f1:27:27:73:2d:c9:06:89:30:df:6a:1d:
                    e3:35:5f:da:78:08:b7:c6:62:ce:d8:8f:84:85:33:
                    cd:0a:7a:e6:7b:cb:ed:9c:a6:a6:a4:7d:0d:8b:1b:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C7:77:67:03:36:0B:05:6D:FE:5E:5E:6C:FC:35:EC:E5:0D:A3:D6
            X509v3 Authority Key Identifier:
                keyid:46:9E:6F:E6:72:57:09:FD:0C:DC:D1:6B:0C:F8:46:82:AF:BC:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:99:ea:8e:a0:8c:0a:9e:88:9e:0c:11:56:47:98:c2:fa:ed:
         c1:e3:28:5d:47:d0:36:3d:26:60:82:48:0b:3a:34:cf:ce:d6:
         54:d5:54:31:83:87:3b:fa:17:2c:c2:06:78:18:21:c3:72:f8:
         c6:a9:60:04:f9:e9:53:62:dc:9f:62:f0:99:63:b1:37:02:d6:
         f6:58:f7:92:ce:63:6b:bf:09:90:c9:fe:0f:38:b7:d4:9e:f1:
         0e:b2:cb:88:92:25:f9:c5:7b:bb:56:85:02:ec:c1:84:50:21:
         3a:f6:f3:cd:10:7a:0d:4f:33:18:f2:74:8f:fc:59:68:d6:42:
         0f:96:38:8b:80:54:f5:74:de:44:2e:09:22:e8:ff:80:6d:64:
         5e:d2:64:47:87:bc:50:7e:aa:c3:dc:30:34:e4:99:49:36:0d:
         db:f9:40:56:53:0a:a0:9a:68:bc:eb:a8:7d:61:67:67:05:b6:
         38:ff:de:db:ee:cc:b2:3e:72:43:2e:00:ab:a0:2b:74:1a:d6:
         3f:65:7a:87:f8:17:76:51:a4:80:7f:9c:df:30:d1:59:9d:ff:
         05:09:8e:50:0c:4e:26:54:8a:6c:04:96:28:8e:52:57:03:78:
         56:f9:c6:fb:84:07:79:07:c6:b6:bc:ca:4a:a2:3f:6f:e8:11:
         8d:7a:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:29 2025 by rpki-client