This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
File:                     027DBEC91021154263BB0CF1565833705023D987.mft (raw, json)
Hash identifier:          nfLOE9pXM4zz+7kjVxipiM20uQE/6qi0Ga3b/vYrXyk=
Subject key identifier:   67:E9:E6:D7:D9:D1:3F:EA:B4:9C:74:6B:B4:35:38:0F:1A:1F:33:98
Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
Certificate issuer:       /CN=027DBEC91021154263BB0CF1565833705023D987
Certificate serial:       7D620089AE07FE93862393DCDC0A71DBDDADD57D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
Manifest number:          01AE
Signing time:             Tue 02 Dec 2025 02:03:43 +0000
Manifest this update:     Tue 02 Dec 2025 01:58:43 +0000
Manifest next update:     Fri 05 Dec 2025 06:17:43 +0000
Files and hashes:         1: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: Ii8+o74eFW6DeCXmGlc2cHv6uIuNl0rOf5xa1IQbg00=)
                          2: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: 2BQG0lP9Zs1EjExB89HW6Zq7y6r/wXETmMZ3S/1VixI=)
                          3: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: U7L8CMVLZEavXmnK/mp5PFEjMg9cgSL8vuQSoK3hk4M=)
                          4: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: +8j/+dJRSTef74GymJkmGO/MtwJTWy9qHlKrlCS2oR4=)
                          5: 3230322e3136302e3133392e302f32342d3234203d3e20313334363337.roa (hash: yivIGajIGBwCERemZ/qApItbcLMFzhrw+o0muoO7pyo=)
                          6: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: r6mE1hwqe5AJWkOHIz2I388PWuZTnmkeKpmw8+YPM38=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
                          rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 06:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:62:00:89:ae:07:fe:93:86:23:93:dc:dc:0a:71:db:dd:ad:d5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027DBEC91021154263BB0CF1565833705023D987
        Validity
            Not Before: Dec  2 01:58:43 2025 GMT
            Not After : Dec  5 06:17:43 2025 GMT
        Subject: CN=67E9E6D7D9D13FEAB49C746BB435380F1A1F3398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:18:4d:49:be:f0:5a:51:be:c4:7c:6b:77:
                    af:27:93:fb:5f:86:c2:e5:69:90:7e:cb:f0:eb:91:
                    f8:89:51:da:78:20:01:e2:3a:86:f8:23:0b:c3:07:
                    e8:c1:7e:8e:0c:f5:c8:05:31:97:f6:48:71:bc:46:
                    c7:18:0d:ed:33:75:48:e4:3f:63:5e:9d:17:5d:2b:
                    08:50:ee:a5:b9:c1:89:33:04:bf:34:8d:fb:9c:fb:
                    cc:13:cb:72:09:40:a5:52:b8:31:86:5d:fe:46:70:
                    f6:97:aa:08:40:10:79:c4:8e:00:f3:c0:56:d5:3f:
                    9c:68:40:4e:f1:ae:cf:7d:c3:e9:b1:40:e9:c9:1f:
                    03:c6:9e:ae:63:9a:50:67:24:e5:de:e0:16:78:c4:
                    8a:13:af:e8:31:f0:c9:01:e7:81:ea:05:0c:f7:e8:
                    00:dc:ca:44:da:a8:61:b8:d8:74:4f:73:6a:6c:57:
                    62:9e:9f:40:41:cd:cd:33:76:61:f4:86:3f:bb:7a:
                    93:ac:a5:f4:65:1a:7e:61:85:0e:d5:1e:3c:ce:91:
                    d7:4e:31:55:d6:ad:95:0b:0a:1d:21:58:a9:a5:43:
                    01:f2:10:b5:97:ec:47:56:e4:dc:31:b4:6d:7c:6c:
                    b2:17:b9:a4:a7:b3:2d:a7:5e:38:8e:f8:c9:92:42:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E9:E6:D7:D9:D1:3F:EA:B4:9C:74:6B:B4:35:38:0F:1A:1F:33:98
            X509v3 Authority Key Identifier:
                keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bc:e8:30:99:6b:bd:d2:e1:ce:a0:68:45:eb:13:f3:f3:ce:
         9a:a2:b1:c9:72:c4:27:69:7b:d3:19:17:50:99:65:e5:fd:49:
         19:92:fb:93:25:4b:05:98:87:19:4a:54:17:5b:00:cf:17:45:
         9f:8a:ba:7f:14:18:74:dd:5c:79:a3:e7:34:09:37:94:c2:b5:
         f2:8d:d6:d7:d7:70:60:02:29:95:47:ca:7b:86:3f:1c:73:f8:
         70:0b:16:d8:f1:7c:65:3a:7b:0b:35:31:cf:bd:65:72:37:cc:
         15:67:81:ed:a4:87:9e:09:0f:15:46:a2:f9:ee:14:ff:bd:58:
         b8:77:3b:03:d8:fc:89:6b:de:f8:7b:25:04:7a:4c:28:50:fc:
         6f:03:67:36:86:4c:90:c4:79:ed:b5:6c:d3:70:f7:08:64:61:
         b3:88:90:5e:ad:c7:b4:14:9e:6e:79:e7:b8:37:cb:4a:4b:6e:
         a3:a4:76:bf:01:93:20:36:1a:9c:56:8c:98:ad:33:2c:08:d8:
         25:66:c1:3e:c8:a5:cf:5a:ec:1b:f7:f1:56:d9:3d:92:db:b7:
         fa:3d:6a:12:2b:6b:07:77:bc:c7:72:db:14:af:f4:c1:71:d5:
         2d:a8:22:31:28:e8:62:26:ac:82:75:fc:ba:22:33:d7:e8:fe:
         e8:5a:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:23 2025 by rpki-client