This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft
File:                     0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json)
Hash identifier:          k6TxyX8T6z5/Z/D80FVk7RLutHTaDUKc61pDW/tn0MA=
Subject key identifier:   56:9F:BA:48:0B:5E:F0:45:BE:2C:56:56:F3:6B:07:0F:0F:4C:BD:BF
Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB
Certificate issuer:       /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB
Certificate serial:       0A81094EEA699B93C75F6F2CB01C2C971FD26E49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft
Manifest number:          C3
Signing time:             Tue 23 Dec 2025 17:21:39 +0000
Manifest this update:     Tue 23 Dec 2025 17:16:39 +0000
Manifest next update:     Fri 26 Dec 2025 22:03:39 +0000
Files and hashes:         1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: pIElhjHPakK1BbzWfBq5/+IsjGQo7PZ2vlXon1nenyA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl
                          rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 22:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:81:09:4e:ea:69:9b:93:c7:5f:6f:2c:b0:1c:2c:97:1f:d2:6e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB
        Validity
            Not Before: Dec 23 17:16:39 2025 GMT
            Not After : Dec 26 22:03:39 2025 GMT
        Subject: CN=569FBA480B5EF045BE2C5656F36B070F0F4CBDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:c2:03:b9:4b:b9:f4:0f:ac:52:25:b6:8f:
                    1f:40:6f:86:71:94:4b:4c:2b:e8:fc:40:a0:7d:9f:
                    de:7a:60:85:7f:f4:c9:57:86:c2:ea:32:9a:04:33:
                    51:e7:d7:6e:14:cf:f0:8e:4a:e2:c7:bf:be:7e:d3:
                    1e:67:1e:33:dc:fc:cf:03:03:09:40:8d:4f:7d:9e:
                    c6:31:25:d7:70:d8:69:79:cf:f5:85:bd:67:f1:a0:
                    a8:f2:40:69:48:47:8b:47:f8:39:bc:b2:c1:ef:ec:
                    14:20:4a:90:8f:70:be:f7:2c:b8:9d:66:83:35:8f:
                    85:eb:bf:7f:f0:2d:54:01:e3:48:d1:7f:d8:eb:ad:
                    56:2f:b3:8b:97:56:34:25:30:ef:75:e2:72:99:63:
                    b8:6a:70:b9:bd:7d:5f:31:fb:22:14:1d:ea:9c:0d:
                    10:0f:6f:25:37:61:df:c0:b0:28:47:86:a6:c5:c4:
                    fa:1d:82:39:f4:44:62:57:8c:8d:4d:25:67:df:8f:
                    9c:df:80:ed:ad:27:4b:d1:1a:79:ed:14:79:d0:62:
                    58:e0:7e:87:60:7c:04:c9:d4:69:14:ce:b6:ab:11:
                    c1:b4:26:70:24:3f:1a:f8:18:79:3a:31:41:0f:89:
                    65:33:a8:89:5d:23:34:be:c8:9f:db:7c:1b:ed:f9:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9F:BA:48:0B:5E:F0:45:BE:2C:56:56:F3:6B:07:0F:0F:4C:BD:BF
            X509v3 Authority Key Identifier:
                keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:43:a4:ba:8d:0f:7b:59:02:13:03:48:03:05:78:b8:66:
         bf:7b:3c:7b:08:c7:9e:d0:89:b2:ff:b9:ef:89:f4:5b:0e:49:
         98:88:b6:58:f6:3e:0b:ab:08:e5:b8:74:1c:fb:24:a7:7c:59:
         40:9b:37:31:33:32:73:02:ca:84:8b:ae:fc:55:33:cc:85:45:
         1d:00:f2:06:41:37:dc:b4:45:f2:d7:a7:4d:50:6c:f7:8a:00:
         60:46:df:0a:cc:11:51:9c:16:c9:fb:9a:32:a1:0a:f6:1e:23:
         66:08:6f:43:88:07:b0:6b:ff:14:7b:c1:76:ca:16:57:f9:28:
         d0:cc:63:16:f9:b3:b1:1e:69:49:6b:d9:7d:a7:98:fc:fd:98:
         65:17:82:94:92:86:69:ea:69:3e:c5:4f:99:14:e8:4c:2e:bd:
         a2:fb:a8:87:5a:2a:ed:d7:57:29:32:b9:01:51:36:62:27:cd:
         28:34:d1:b9:e1:8e:e9:a2:9c:50:b6:9e:bd:a0:5d:96:ba:4e:
         c7:ec:3a:d9:19:fe:44:1c:e5:c0:92:c2:72:26:5c:3e:46:99:
         60:50:42:45:d2:fb:7c:c5:41:0f:1e:b8:c6:a5:90:4b:7b:1e:
         ad:03:a9:cc:5c:1e:c7:98:f7:1b:c4:76:81:5e:e1:da:b8:29:
         aa:73:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:07:01 2025 by rpki-client