This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
File:                     77629696624E40462330DA2AF610D32809C89E5A.mft (raw, json)
Hash identifier:          Lv1H+VzzA/S6/NlA3rddifjnacaPTASPTJOyzgsP37M=
Subject key identifier:   20:C5:82:15:2B:06:FA:CD:1A:A1:4E:63:BB:0E:7D:CF:0C:61:B6:E7
Authority key identifier: 77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
Certificate issuer:       /CN=77629696624E40462330DA2AF610D32809C89E5A
Certificate serial:       700AD1A90601CD8F433DDF47CD17016CE8A8C29E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
Manifest number:          0532
Signing time:             Thu 18 Dec 2025 14:40:41 +0000
Manifest this update:     Thu 18 Dec 2025 14:35:41 +0000
Manifest next update:     Sun 21 Dec 2025 15:37:41 +0000
Files and hashes:         1: 77629696624E40462330DA2AF610D32809C89E5A.crl (hash: AtTPgavGDmTVlMR1dE8sAbTHe0KOF/09cwX9dOWHLC4=)
                          2: 3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (hash: MZpBnWfk42SFeduiN6RL28Su7KTp0RDTjQY3tu04WHo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl
                          rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 15:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0a:d1:a9:06:01:cd:8f:43:3d:df:47:cd:17:01:6c:e8:a8:c2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77629696624E40462330DA2AF610D32809C89E5A
        Validity
            Not Before: Dec 18 14:35:41 2025 GMT
            Not After : Dec 21 15:37:41 2025 GMT
        Subject: CN=20C582152B06FACD1AA14E63BB0E7DCF0C61B6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:c8:cc:54:f5:bf:73:1d:23:a9:16:6e:b4:
                    8c:9a:fa:ca:08:2b:ff:49:d3:72:ec:8b:60:09:61:
                    4b:e8:48:23:34:a7:42:e9:6d:b6:31:0e:50:12:be:
                    05:c4:ed:0a:24:14:36:35:b4:29:86:73:09:70:43:
                    3b:f1:1f:71:48:7a:40:81:6e:32:de:8d:b8:7c:79:
                    cb:d5:af:a5:6d:9b:6f:1c:91:d8:9a:af:07:0c:02:
                    4e:0b:81:3d:32:e8:f8:f3:7e:79:b6:b5:ed:1a:6a:
                    85:a9:8a:d6:ce:62:83:6b:e5:f0:f7:23:39:e5:50:
                    2d:28:64:bf:c0:88:a1:c0:d2:e4:8e:03:d2:f5:e5:
                    00:4a:1d:c6:eb:61:39:98:84:17:15:f8:73:da:6d:
                    1e:76:93:2c:86:51:ba:fd:b9:fd:3d:a6:72:a9:2e:
                    89:03:e0:a2:34:73:74:a8:7b:fa:b0:89:b2:29:4c:
                    53:44:a4:e8:7d:7e:12:ef:ce:25:05:30:00:aa:7a:
                    e7:21:4d:27:4d:68:f8:c7:65:53:06:74:4c:a7:2b:
                    5e:f9:66:8e:1c:37:d9:b9:d1:1a:2f:b3:b1:8a:c0:
                    b8:95:31:b7:f7:86:8b:75:04:78:6a:a8:19:c4:31:
                    fc:e5:d1:e5:ee:da:c5:c2:b4:33:20:ce:7b:47:1d:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C5:82:15:2B:06:FA:CD:1A:A1:4E:63:BB:0E:7D:CF:0C:61:B6:E7
            X509v3 Authority Key Identifier:
                keyid:77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:18:f9:1a:1e:a5:e3:bb:cd:d8:20:85:96:65:4b:4a:52:92:
         52:45:c9:d7:3f:e9:d3:cf:8d:5b:e6:e5:1e:31:e1:6c:af:8b:
         dd:75:23:d9:c7:43:04:14:8e:39:c0:02:4d:5e:d5:b3:7d:d4:
         37:ef:d8:a3:59:1f:09:d6:bf:4d:36:cb:bc:6b:dc:01:20:45:
         02:ab:41:bf:8a:e9:94:5e:9a:c3:a1:dc:8f:46:50:b3:7c:5b:
         71:67:8d:9e:6b:32:22:fd:bf:ff:18:42:d1:bf:70:53:85:ec:
         31:d4:23:4e:b2:08:5e:e0:f3:16:68:3b:87:c4:62:44:fc:e5:
         45:5e:44:b4:bb:1a:a0:a4:b9:11:66:ad:19:38:04:64:d5:ee:
         47:ee:d6:1a:cc:44:ee:e4:12:72:cc:7f:f0:07:7a:d0:c3:e4:
         5e:0f:8d:f4:5e:72:f9:28:2f:04:dd:a5:06:c8:aa:50:46:dd:
         87:75:c4:5c:29:bd:d2:87:59:b7:1a:b2:f3:1f:2c:04:53:a8:
         bd:9f:9e:39:00:e8:a3:4e:38:21:de:d4:68:52:4a:b1:fc:96:
         0d:ca:66:e3:65:ce:12:e9:d0:f6:89:d1:fc:cf:fd:34:e9:aa:
         63:ba:17:98:76:7a:73:9f:0b:da:25:3a:18:0a:c0:1e:5f:e5:
         d7:8b:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:12:47 2025 by rpki-client