This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft
File:                     611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json)
Hash identifier:          auKGCAdREI4KMG4GQOubBPZv0O1SDSNftgQwKlw1HF8=
Subject key identifier:   E8:7C:14:6E:6F:A1:CA:DC:7C:26:E7:C2:B1:BB:5B:AB:E7:2A:FF:3F
Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29
Certificate issuer:       /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129
Certificate serial:       51B55CA9C1283D5427AFC0232DADB35050E8380B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft
Manifest number:          0118
Signing time:             Sat 27 Dec 2025 05:42:09 +0000
Manifest this update:     Sat 27 Dec 2025 05:37:09 +0000
Manifest next update:     Tue 30 Dec 2025 14:08:09 +0000
Files and hashes:         1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: fys0OSQQJ5kmjYRu/1ZwbYTNx29rLFPW0JAnyi5lV7I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl
                          rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 14:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b5:5c:a9:c1:28:3d:54:27:af:c0:23:2d:ad:b3:50:50:e8:38:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129
        Validity
            Not Before: Dec 27 05:37:09 2025 GMT
            Not After : Dec 30 14:08:09 2025 GMT
        Subject: CN=E87C146E6FA1CADC7C26E7C2B1BB5BABE72AFF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:98:fe:67:02:cd:0d:10:f7:ea:37:5f:8d:
                    ba:00:a1:d8:a3:7b:16:12:ce:94:00:0e:b3:fa:17:
                    80:26:1a:d8:fd:40:80:8a:4c:9b:37:b4:4c:87:d6:
                    6d:1a:d4:94:d7:40:67:30:a7:d6:72:9a:b4:a8:33:
                    ad:77:4d:92:04:83:65:13:f7:4a:40:76:df:fb:d1:
                    1b:6c:ea:5d:bc:61:ad:44:fd:d4:32:e6:bc:ee:43:
                    ef:d1:60:ff:10:b4:a3:ff:f0:ba:5f:f2:2e:a4:08:
                    56:d4:e8:c9:48:db:8e:7a:f8:7f:e0:4e:20:cc:eb:
                    75:41:d0:a9:42:6f:12:63:29:ac:58:60:5c:27:32:
                    8d:26:e4:80:71:6a:49:71:bc:8b:e7:6f:5a:d5:73:
                    08:f3:83:3f:f3:20:15:d3:a9:dd:af:6f:f8:56:86:
                    a1:80:d0:5e:fa:91:8c:1b:28:c5:d9:93:f1:34:ed:
                    9f:ac:2e:78:00:91:a2:70:8c:17:75:ad:31:c2:c1:
                    89:f4:32:d4:7c:c7:2f:41:2d:44:b9:2c:8b:b6:6c:
                    91:ed:61:4d:14:ac:ef:73:64:7e:e0:f8:05:72:84:
                    33:dc:db:d0:dc:12:2f:6b:cb:cf:c2:a0:3d:87:df:
                    e0:f3:9c:db:47:0b:38:a8:7b:7f:9f:1d:2e:f4:9c:
                    d3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:14:6E:6F:A1:CA:DC:7C:26:E7:C2:B1:BB:5B:AB:E7:2A:FF:3F
            X509v3 Authority Key Identifier:
                keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c3:3b:69:ae:29:52:1b:86:0c:b2:9a:05:c7:b7:5a:d9:2a:
         bb:1e:ca:34:e7:d3:97:40:0b:5b:bc:80:39:5f:d6:96:0b:08:
         0f:8b:c8:bb:2c:b7:41:51:f0:0a:3c:2c:7e:e8:06:61:ab:c5:
         d5:c0:03:af:3d:b9:d3:25:3a:1a:ce:38:1f:d7:fe:c8:ec:a1:
         7e:7f:5a:de:91:8a:ae:42:38:43:86:02:c1:41:2c:df:ee:eb:
         7c:5a:22:7e:fc:a8:36:16:3b:cc:93:44:96:84:a7:5d:15:e9:
         ad:96:6b:fc:cf:ad:5e:1e:be:f9:ad:9f:42:7c:af:e8:5a:7d:
         6d:b0:ec:bd:74:69:ce:75:65:bf:2e:db:a9:86:01:81:4f:22:
         0e:01:34:d0:9e:ea:84:75:71:64:fc:19:c1:1a:bd:e1:e3:a6:
         60:fb:25:da:cf:17:7e:04:8f:08:cd:12:76:41:77:fd:b8:89:
         73:61:cc:62:b7:aa:7b:69:0d:46:e3:9d:53:01:5a:ed:56:0b:
         09:30:d3:52:db:ac:4a:0e:14:bc:85:20:16:ec:72:da:6c:60:
         72:4f:61:97:3f:2c:ae:13:63:12:cc:9d:8f:fb:92:f1:6a:db:
         88:8c:74:a2:59:11:41:19:98:09:a4:ee:b2:d6:b9:f5:83:15:
         4b:ff:9a:55
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUbVcqcEoPVQnr8AjLa2zUFDoOAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC
NTdFNDEyOTAeFw0yNTEyMjcwNTM3MDlaFw0yNTEyMzAxNDA4MDlaMDMxMTAvBgNV
BAMTKEU4N0MxNDZFNkZBMUNBREM3QzI2RTdDMkIxQkI1QkFCRTcyQUZGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYZj+ZwLNDRD36jdfjboAodij
exYSzpQADrP6F4AmGtj9QICKTJs3tEyH1m0a1JTXQGcwp9ZymrSoM613TZIEg2UT
90pAdt/70Rts6l28Ya1E/dQy5rzuQ+/RYP8QtKP/8Lpf8i6kCFbU6MlI2456+H/g
TiDM63VB0KlCbxJjKaxYYFwnMo0m5IBxaklxvIvnb1rVcwjzgz/zIBXTqd2vb/hW
hqGA0F76kYwbKMXZk/E07Z+sLngAkaJwjBd1rTHCwYn0MtR8xy9BLUS5LIu2bJHt
YU0UrO9zZH7g+AVyhDPc29DcEi9ry8/CoD2H3+DznNtHCzioe3+fHS70nNO7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6HwUbm+hytx8JufCsbtbq+cq/z8wHwYDVR0j
BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB
NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF
NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz
ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB
RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK7DO2muKVIbhgyymgXHt1rZKrseyjTn05dA
C1u8gDlf1pYLCA+LyLsst0FR8Ao8LH7oBmGrxdXAA689udMlOhrOOB/X/sjsoX5/
Wt6Riq5COEOGAsFBLN/u63xaIn78qDYWO8yTRJaEp10V6a2Wa/zPrV4evvmtn0J8
r+hafW2w7L10ac51Zb8u26mGAYFPIg4BNNCe6oR1cWT8GcEaveHjpmD7JdrPF34E
jwjNEnZBd/24iXNhzGK3qntpDUbjnVMBWu1WCwkw01LbrEoOFLyFIBbsctpsYHJP
YZc/LK4TYxLMnY/7kvFq24iMdKJZEUEZmAmk7rLWufWDFUv/mlU=
-----END CERTIFICATE-----
Generated at Mon Dec 29 10:14:42 2025 by rpki-client