This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
File:                     A45C7486216530EA5E88FE961534FA7EAE72A79C.mft (raw, json)
Hash identifier:          AXZ3cemq4FTmPlqPWwHaStej0HC2YSaTsqv3T4a6iJk=
Subject key identifier:   9E:05:B6:EA:CB:92:F8:2B:03:FD:D3:7B:FF:37:D2:A1:A3:09:65:14
Authority key identifier: A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C
Certificate issuer:       /CN=A45C7486216530EA5E88FE961534FA7EAE72A79C
Certificate serial:       2D3294FD719ACA0E7D11A71A4FCC099D044D38C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
Manifest number:          0132
Signing time:             Wed 17 Dec 2025 11:21:38 +0000
Manifest this update:     Wed 17 Dec 2025 11:16:38 +0000
Manifest next update:     Sat 20 Dec 2025 11:33:38 +0000
Files and hashes:         1: A45C7486216530EA5E88FE961534FA7EAE72A79C.crl (hash: D55CC+RxuHc8lhw7IBTQoBlSIfSkO62IrlW20WmC2QU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl
                          rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 11:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:32:94:fd:71:9a:ca:0e:7d:11:a7:1a:4f:cc:09:9d:04:4d:38:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45C7486216530EA5E88FE961534FA7EAE72A79C
        Validity
            Not Before: Dec 17 11:16:38 2025 GMT
            Not After : Dec 20 11:33:38 2025 GMT
        Subject: CN=9E05B6EACB92F82B03FDD37BFF37D2A1A3096514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:79:29:3d:cb:7f:b6:6a:f9:0f:5d:e4:d4:
                    99:2e:49:aa:0b:1c:fa:5d:8e:c4:c4:cb:47:81:ce:
                    8b:32:26:64:13:9a:37:24:53:6a:24:6d:db:7d:38:
                    da:21:52:7d:ad:c3:7d:98:a4:06:20:d3:dd:9c:35:
                    4a:94:70:ce:3a:0b:ac:0c:d0:e8:51:08:d6:83:54:
                    f1:4d:d5:3b:94:01:53:4d:61:df:cd:24:8e:9e:4e:
                    b5:29:60:09:da:27:85:1f:26:ad:08:69:78:b6:ec:
                    28:b3:04:d1:d8:e7:fd:d0:cb:bd:1d:65:8c:b2:5d:
                    80:2f:73:81:85:6b:13:63:6e:e0:38:53:b4:c8:ed:
                    a5:81:91:6f:28:fa:9f:c2:6f:16:ff:49:d1:0b:6a:
                    68:c3:ab:ec:aa:7a:87:35:0d:27:ba:74:2d:19:30:
                    a8:06:26:e5:09:05:72:7f:08:5f:c0:d2:68:52:8c:
                    88:0f:b4:65:54:85:bf:e0:8d:04:21:fd:2f:6d:d0:
                    1b:f8:1a:59:c3:aa:fe:05:e6:0e:c2:9e:5c:de:e2:
                    15:f7:c5:44:c5:0e:89:84:b0:9b:6d:18:dd:59:a0:
                    d2:4f:a5:97:b5:1b:4d:8a:62:b9:b7:fe:04:1c:8f:
                    d2:0f:c8:f6:ed:21:0d:35:ce:7d:c2:8d:39:30:e4:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:B6:EA:CB:92:F8:2B:03:FD:D3:7B:FF:37:D2:A1:A3:09:65:14
            X509v3 Authority Key Identifier:
                keyid:A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:72:9a:af:d3:66:78:d4:86:d5:a2:e4:02:98:fb:e9:c7:ab:
         27:4c:e2:7f:49:ac:41:31:cc:0e:f0:03:00:7e:1f:1b:3e:54:
         93:f7:e2:59:c6:2c:ff:a9:91:4a:37:ed:e7:57:44:cd:83:85:
         a7:2a:3a:6d:71:81:19:27:77:dc:83:61:9b:68:c2:95:e3:04:
         e1:f9:5a:53:8b:29:15:0b:9b:68:68:5f:39:00:92:ab:ab:6c:
         e1:ef:65:b3:50:67:61:1b:87:10:1b:34:b8:98:4a:80:18:7d:
         d2:30:69:89:de:28:6d:b2:f6:59:c8:d4:e2:a8:48:cd:d1:16:
         f1:3b:d2:78:64:68:ed:2d:ae:e9:44:88:cc:ac:0f:09:12:36:
         76:53:f4:76:d5:76:5a:78:0d:ea:e1:5b:4d:44:6f:24:ae:24:
         28:94:fe:69:88:b0:2a:5f:60:fb:af:59:4d:26:13:93:71:7d:
         fb:4e:7d:c6:a6:17:16:7c:90:d6:3a:70:8e:ed:51:4a:97:d9:
         f7:ec:57:46:45:c1:3f:16:7e:05:7b:70:98:4e:e1:de:2a:15:
         92:20:80:84:37:56:60:85:73:81:59:b9:e3:2f:d1:2f:5e:24:
         c4:b3:b9:68:00:4d:b8:9e:f8:aa:fa:ba:fb:4f:91:fe:00:55:
         2d:f6:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:24:50 2025 by rpki-client