This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
File:                     4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json)
Hash identifier:          kl8GGUzLwEHT9LObnDQO4gls2+8XkYjYywFtM+MV5Tk=
Subject key identifier:   66:A1:6B:FD:8A:B3:7C:18:8A:11:F3:9E:09:F6:2E:FB:E3:5D:D3:47
Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB
Certificate issuer:       /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB
Certificate serial:       3E987B9341D19280A19EA140A9901384A889D71A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
Manifest number:          04C2
Signing time:             Thu 18 Dec 2025 12:41:32 +0000
Manifest this update:     Thu 18 Dec 2025 12:36:32 +0000
Manifest next update:     Sun 21 Dec 2025 22:20:32 +0000
Files and hashes:         1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: mvMsi9CE/pJxJgADSyEOk1hZ0fMx30N8O2Zy2Zn7Auc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl
                          rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 22:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:98:7b:93:41:d1:92:80:a1:9e:a1:40:a9:90:13:84:a8:89:d7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB
        Validity
            Not Before: Dec 18 12:36:32 2025 GMT
            Not After : Dec 21 22:20:32 2025 GMT
        Subject: CN=66A16BFD8AB37C188A11F39E09F62EFBE35DD347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:00:bb:0f:26:c8:d4:30:0b:02:36:2a:34:
                    9d:14:21:1c:63:83:6c:56:bd:0d:32:46:2d:a5:c7:
                    81:8e:8b:a4:4c:fe:2a:67:30:f0:78:d7:17:7d:aa:
                    bc:e3:a4:ce:65:15:64:60:42:6d:72:42:21:1e:3d:
                    bc:63:66:44:10:16:43:ec:fa:8e:ae:af:3b:5e:1f:
                    c8:77:2f:fb:16:67:7e:65:96:da:78:1c:ce:c5:cf:
                    ba:87:52:e5:8a:05:23:87:81:c0:6c:cd:69:d1:4b:
                    36:76:67:13:88:ab:10:d3:20:8f:b6:92:b6:48:c4:
                    20:b7:d9:18:7b:95:e0:99:f9:7e:2d:54:67:84:98:
                    93:d8:73:64:7d:fa:36:84:cb:ed:ff:cc:63:c5:0a:
                    5e:fd:02:d8:11:2e:f0:45:ee:af:97:9f:4b:8b:e4:
                    ee:66:4f:ed:5a:06:b2:69:ba:69:fc:cd:8f:54:38:
                    bd:e2:46:88:b5:ea:5d:a6:e5:b6:37:b7:fb:c3:1a:
                    e0:75:01:c3:43:cb:ab:0e:0d:d9:fb:f6:b6:92:2d:
                    ed:69:1f:c9:78:41:83:f8:d6:cd:8a:d0:22:88:07:
                    a5:55:a1:12:f8:50:55:c9:52:c0:2a:4f:98:de:44:
                    ad:19:b3:5f:13:09:71:2b:fd:b1:00:14:65:df:2c:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A1:6B:FD:8A:B3:7C:18:8A:11:F3:9E:09:F6:2E:FB:E3:5D:D3:47
            X509v3 Authority Key Identifier:
                keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:99:e2:cb:2a:5d:93:f5:93:cc:be:05:cd:ef:e9:8d:8e:
         1b:26:df:c6:33:82:9b:dd:6e:8f:bc:99:58:ce:06:ae:46:69:
         87:b5:4a:fe:13:c8:d0:89:9b:3f:b9:27:bd:16:1b:74:ca:65:
         cc:f8:4a:2c:b0:7f:fd:af:c4:4d:0e:6c:6b:c4:4c:c5:32:d2:
         7f:7f:97:dd:7f:93:77:50:c9:09:6b:c8:cd:1b:e2:6f:0b:ac:
         79:bb:d4:2b:91:50:03:dd:4d:97:eb:d6:34:7e:a4:0b:65:e0:
         6c:45:0d:43:52:24:5b:ba:c5:ef:04:bb:d3:fa:cd:a4:ed:45:
         fe:8e:71:10:1f:42:ad:20:a6:2d:e0:3d:11:4e:27:75:96:6d:
         f9:7a:1b:75:32:e4:a2:b4:d6:08:9c:e0:56:0c:d9:08:c9:18:
         37:56:1c:9e:1f:42:5f:d6:c1:34:d4:71:27:e4:34:dd:6f:74:
         22:3c:f4:32:c6:f7:4c:c7:fc:40:cb:72:3b:35:f3:70:65:b2:
         8a:03:3b:9d:34:92:2f:05:e9:50:ab:9b:eb:0c:4e:0b:e1:df:
         39:56:60:25:36:a7:d9:91:ef:52:4e:15:8c:c4:0f:4e:38:4d:
         09:49:90:4e:62:d0:ce:1d:0c:a2:b4:1e:50:75:0a:cb:94:0a:
         f6:a1:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:05:38 2025 by rpki-client