This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
File:                     4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json)
Hash identifier:          4q21V5t5uv5bB6in+59n/x3R/IL0LBIiG+riwFSsTN0=
Subject key identifier:   A3:B4:9A:1D:B8:3B:41:61:B3:48:DA:58:DC:AE:4A:A2:A1:5C:A9:ED
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Certificate issuer:       /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial:       46827279E02F915FF06B2F4B79FDA190EE8208F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
Manifest number:          0230
Signing time:             Fri 26 Dec 2025 10:01:15 +0000
Manifest this update:     Fri 26 Dec 2025 09:56:15 +0000
Manifest next update:     Mon 29 Dec 2025 10:51:15 +0000
Files and hashes:         1: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: dRjy7hOVJtr8zPM1q7gBT4hkU3MWqMqHLoRDLlLoZ94=)
                          2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
                          rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 10:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:82:72:79:e0:2f:91:5f:f0:6b:2f:4b:79:fd:a1:90:ee:82:08:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
        Validity
            Not Before: Dec 26 09:56:15 2025 GMT
            Not After : Dec 29 10:51:15 2025 GMT
        Subject: CN=A3B49A1DB83B4161B348DA58DCAE4AA2A15CA9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:d8:01:fe:9b:be:c1:a9:c1:80:6a:f0:4d:
                    93:2b:49:e4:ab:a3:fc:85:a0:4d:97:ca:0b:c4:19:
                    88:d0:7c:7d:37:3a:c1:4c:0f:03:8d:5f:ae:a5:fe:
                    4a:f5:15:06:22:86:08:e5:9c:30:9f:30:05:0b:67:
                    d4:94:21:20:19:7d:66:3d:43:3d:b7:f2:ae:3f:46:
                    05:65:4a:ec:e0:0d:a9:83:cb:7e:51:58:4e:ed:b0:
                    c5:a2:01:7e:19:32:c2:dd:df:aa:e8:32:2f:82:52:
                    08:12:6f:b3:84:43:45:15:3e:de:7c:8e:de:d5:66:
                    46:c4:01:71:0b:f2:4c:23:41:26:86:87:64:69:d5:
                    70:d4:43:89:5b:4d:20:8a:a3:47:58:d4:a0:83:8d:
                    84:73:0d:9d:0a:08:74:97:30:c7:2a:76:41:66:2b:
                    8b:34:b3:08:5e:3e:26:d0:d1:ec:e8:8c:a7:6e:12:
                    31:6a:e0:75:cb:1d:97:41:43:99:dd:3f:34:73:b6:
                    61:a2:39:0c:16:c6:2d:8f:ae:4a:be:96:64:66:55:
                    10:e2:77:4b:96:13:eb:33:94:62:08:bb:a2:f8:49:
                    4e:a0:d8:64:53:20:6a:a0:4a:af:a2:eb:87:2b:5c:
                    e0:13:26:f1:f2:6b:52:e1:6c:3f:a6:8f:62:39:8b:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B4:9A:1D:B8:3B:41:61:B3:48:DA:58:DC:AE:4A:A2:A1:5C:A9:ED
            X509v3 Authority Key Identifier:
                keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:01:ec:cb:9d:49:8e:2e:09:ab:48:0f:d9:55:e9:8e:68:ac:
         b0:43:ee:78:2a:d4:ea:09:0a:d7:0e:14:92:1f:39:a3:44:a9:
         b8:95:87:3e:a3:4b:4f:14:d5:e6:31:4d:88:2f:b4:d5:bd:b6:
         d8:64:30:5c:66:60:ee:85:0d:84:22:54:24:8b:7e:c3:cc:a0:
         4c:11:14:95:f9:fa:e8:91:50:d5:b0:e6:d8:6d:de:6f:26:d0:
         ff:53:43:aa:7b:2d:8e:2f:67:91:31:7f:b2:8a:be:43:a7:c0:
         74:94:b8:24:0c:72:32:0e:af:c1:fc:fc:62:4a:00:c4:07:b7:
         4d:8d:72:2c:87:cc:08:f0:45:d6:8c:42:d4:fe:7f:df:20:0e:
         3b:56:c4:00:7a:5a:5c:3d:87:91:a8:50:ed:14:90:bd:08:0e:
         5e:9b:98:da:e5:50:48:3b:22:4f:28:0e:ca:73:a0:94:2d:6b:
         73:f0:62:30:94:14:50:8f:a0:ea:74:b6:a0:7e:96:49:61:9a:
         41:ac:2c:43:65:f0:4f:5c:d2:c1:7c:70:28:0c:b5:6c:f2:9a:
         ba:cb:da:f8:56:7d:5c:e8:da:70:6e:1f:82:72:63:bf:ed:d4:
         a0:4b:2f:8a:74:b9:50:c7:5b:0c:bc:c1:be:23:5c:2c:8c:a6:
         31:55:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 07:17:26 2025 by rpki-client