This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft
File:                     AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json)
Hash identifier:          vRg+6M+cTt5NG6UYEXNwpZr0m67bE/tJOr8x2288g0Y=
Subject key identifier:   C1:40:7E:69:45:08:CB:E4:87:BD:4E:9C:55:FA:74:A5:7C:24:FF:96
Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3
Certificate issuer:       /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3
Certificate serial:       3EC2623248960728FB37536196BD6EC92D9EBACB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft
Manifest number:          011B
Signing time:             Mon 22 Dec 2025 21:11:47 +0000
Manifest this update:     Mon 22 Dec 2025 21:06:47 +0000
Manifest next update:     Fri 26 Dec 2025 01:11:47 +0000
Files and hashes:         1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: UcS7JV3HfYNUTb4oUfQdR9WkoS99UirfXGs2ucZYVa8=)
                          2: 3135372e31302e3138312e302f32342d3234203d3e20313432333832.roa (hash: Tq6eQwWr1rdCCJNVIsGIEm3Uh/gJAzWFs05ZKzvmuow=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c2:62:32:48:96:07:28:fb:37:53:61:96:bd:6e:c9:2d:9e:ba:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3
        Validity
            Not Before: Dec 22 21:06:47 2025 GMT
            Not After : Dec 26 01:11:47 2025 GMT
        Subject: CN=C1407E694508CBE487BD4E9C55FA74A57C24FF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:63:f4:f4:fd:fb:89:28:79:b6:df:c9:97:
                    fd:2b:6f:00:72:11:96:bd:ab:57:1c:8c:bf:b0:09:
                    c8:d9:01:3c:5b:73:08:8b:de:46:79:43:67:22:70:
                    73:69:a6:e9:58:6e:e1:c5:c8:89:07:07:f8:a5:9e:
                    ce:11:3d:90:05:a0:97:6b:ef:1c:d4:e5:de:80:77:
                    f3:c1:b0:3c:74:19:52:f6:5a:b6:39:fc:52:1d:8b:
                    ca:ef:09:61:8c:3b:17:82:4d:73:15:c4:0e:1a:94:
                    2a:04:76:d2:b4:0d:fc:68:26:c9:64:65:23:3d:17:
                    3b:02:51:a5:72:49:92:5d:bd:79:74:2f:1f:18:e0:
                    04:e2:32:eb:c9:9c:86:5e:39:5d:94:10:e8:a7:f4:
                    04:6a:07:f2:c1:c5:70:82:e3:0b:30:39:55:c6:0c:
                    2a:61:15:c9:d4:98:8b:90:85:d9:c1:2d:be:5c:65:
                    d1:07:03:be:4f:14:dc:d9:2e:5f:ff:5f:f5:00:ee:
                    ca:91:75:de:c5:f1:ad:3e:c4:1a:ea:1e:2f:ac:11:
                    10:b2:98:be:d5:9a:6f:67:45:09:f8:23:27:3d:cf:
                    12:ef:de:66:3f:d9:7d:62:e3:c7:14:4b:5a:5c:e7:
                    95:d4:bf:3b:be:7a:6d:c5:61:41:18:9e:06:c8:73:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:40:7E:69:45:08:CB:E4:87:BD:4E:9C:55:FA:74:A5:7C:24:FF:96
            X509v3 Authority Key Identifier:
                keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:71:4d:d3:57:3b:6c:f7:45:cb:52:ee:cb:03:00:ea:01:c8:
         25:6c:ff:e0:02:12:5e:ec:8d:5e:7a:66:91:98:bd:53:94:2c:
         fc:3b:6e:fb:79:1d:2f:f2:7b:b7:80:ea:0b:ef:9c:fe:83:6a:
         57:f7:db:72:21:0f:37:d3:2d:e7:bf:60:4d:98:4c:12:b2:bb:
         89:14:b3:68:d3:2e:7d:73:44:6f:24:c6:cd:5b:17:62:68:91:
         a9:2a:c7:da:85:e3:1a:3a:b0:1a:97:91:d7:58:56:2a:8a:90:
         ed:48:ae:ea:fe:5b:49:50:f1:98:03:c8:d7:f8:49:0c:2e:0a:
         68:18:35:07:f2:fe:da:af:03:4f:b7:1c:48:1a:97:38:cc:9b:
         f2:9a:aa:66:50:bd:49:f5:41:be:3d:a9:c9:87:22:3b:fe:43:
         61:91:b7:1b:65:a5:0d:c4:b4:8d:10:c2:35:1a:62:c6:e2:ca:
         3a:59:7b:f2:91:62:97:46:96:83:10:35:b3:a2:ea:88:9e:55:
         b7:1a:cc:6f:df:b7:a8:7d:52:4f:fb:df:5b:90:7f:b5:64:f9:
         42:2e:05:ec:25:84:b7:d0:62:8a:da:37:8d:6f:f9:fb:c5:16:
         42:a0:60:e0:23:0f:ba:43:25:09:bc:c5:57:e7:cb:46:a1:b2:
         42:da:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----