This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft
File:                     8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json)
Hash identifier:          leCaf0e/AOn3B7gKTEuyNfEWX0nbcD1OXBpFu0xnOnk=
Subject key identifier:   1E:D5:D7:8C:34:F6:45:24:49:AA:12:58:58:F4:51:3D:23:B2:6F:CA
Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC
Certificate issuer:       /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC
Certificate serial:       6B6A01CF6BC90C4BDBBE58F05CC0FE6398DADF54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft
Manifest number:          58
Signing time:             Tue 16 Dec 2025 18:21:15 +0000
Manifest this update:     Tue 16 Dec 2025 18:16:15 +0000
Manifest next update:     Sat 20 Dec 2025 04:00:15 +0000
Files and hashes:         1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: fTEaUbdvPE7flZu5DFnBbZwNg1QETQrJCG3kg2M8At8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl
                          rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:01:cf:6b:c9:0c:4b:db:be:58:f0:5c:c0:fe:63:98:da:df:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC
        Validity
            Not Before: Dec 16 18:16:15 2025 GMT
            Not After : Dec 20 04:00:15 2025 GMT
        Subject: CN=1ED5D78C34F6452449AA125858F4513D23B26FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:45:c0:ec:2b:98:c5:ea:db:a2:4a:7e:20:d5:
                    9d:ab:bc:97:f3:10:84:fa:26:fa:eb:8f:9d:f3:a1:
                    2a:ab:b5:db:54:7f:1f:8b:06:cf:4f:1b:24:8d:2e:
                    3f:44:70:aa:48:de:c2:6b:35:30:fd:4b:67:d9:57:
                    bd:37:6e:99:b8:09:dd:51:d3:a4:0a:ea:3d:28:45:
                    02:e2:1f:e7:d1:b2:2c:d5:67:77:90:2b:90:a7:99:
                    c6:53:d9:d4:34:a7:52:34:80:65:38:2a:46:5d:d0:
                    2f:18:88:6c:60:36:f3:62:45:1c:54:0c:78:01:d3:
                    ad:27:30:70:1b:1a:e1:9b:9b:6b:71:8d:68:cc:50:
                    62:aa:22:3c:e7:1a:b3:46:11:7d:5a:c5:cc:ec:ae:
                    a0:e7:d4:1a:40:88:4a:e3:aa:14:25:49:7a:36:a9:
                    4e:7c:69:cb:a3:d7:30:c4:0f:49:b7:9b:83:4d:a3:
                    b8:08:0e:29:44:e7:c0:f6:a7:31:93:f5:e9:ea:7e:
                    f1:d2:24:0f:cf:4b:d8:28:9a:b5:4b:da:f9:51:f0:
                    07:59:6e:f8:07:39:6b:2e:20:f3:14:c6:89:19:27:
                    c5:74:24:17:f3:ea:a1:19:2b:32:0f:7c:74:c5:90:
                    24:ec:ae:4d:2e:d9:57:24:fd:a8:87:0b:bc:c5:16:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D5:D7:8C:34:F6:45:24:49:AA:12:58:58:F4:51:3D:23:B2:6F:CA
            X509v3 Authority Key Identifier:
                keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:53:5f:53:4f:9b:3f:18:ee:97:79:af:68:63:f1:6e:b2:
         f5:4d:a7:90:eb:c8:10:23:1d:b3:45:43:d5:14:e1:a5:1a:f0:
         12:b5:f9:0c:c1:92:33:81:35:e1:7e:f3:16:67:aa:7c:2f:6e:
         66:05:0f:26:f9:bc:96:c0:2e:02:fd:80:a3:49:80:8b:9e:d8:
         c4:2d:cc:8b:4b:c1:b1:74:a4:f3:97:18:e1:6b:38:01:b9:8b:
         d1:0e:6d:50:09:5c:8c:1d:07:c8:ca:35:7d:83:9c:06:55:ef:
         0a:8b:80:96:86:61:7f:06:66:06:99:ec:3c:1d:b7:c0:90:6c:
         30:f5:84:02:c6:21:82:d8:af:fa:9d:03:4a:4c:87:ed:8e:44:
         2b:0f:3d:d2:0f:e3:f4:0c:f8:67:fb:81:f0:b9:9f:25:3a:c8:
         78:00:c2:42:22:b6:68:e7:70:06:1b:62:34:74:33:8b:43:dc:
         cc:17:0d:57:54:66:68:02:97:89:80:13:92:4f:34:82:db:2f:
         16:01:72:45:9e:81:d1:e2:29:2b:89:95:3c:9f:a7:54:a8:34:
         ef:a3:80:66:02:f6:02:cd:b4:f1:2a:79:83:fc:84:42:2c:27:
         4e:c9:6b:5a:6a:38:f7:ee:05:16:aa:98:fe:9e:2d:9c:7b:87:
         4c:0c:0c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:17:32 2025 by rpki-client