This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
File:                     62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json)
Hash identifier:          SDgsHNCnBwsGMez4syMEwWS8tz8DxmFpVfW7NnHa1t8=
Subject key identifier:   D6:DE:87:95:A8:AC:5E:F1:11:9E:2B:F6:F3:04:E2:8F:09:95:E1:39
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Certificate issuer:       /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial:       597278692E5CA1E02AA406293254AFC1A2DC1E3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
Manifest number:          FD
Signing time:             Thu 18 Dec 2025 13:00:46 +0000
Manifest this update:     Thu 18 Dec 2025 12:55:46 +0000
Manifest next update:     Mon 22 Dec 2025 00:02:46 +0000
Files and hashes:         1: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: SP12xLDyV/VP9N1xqFMD2+nxhDzqIZUfpt67MZUwfE8=)
                          2: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Eu+4u02FPo/RfVFVxOIqvYkg8/wWVoya955tDIny+5E=)
                          3: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: j5hTo/DSQVw3IwzMjsPYtT7K868Ie1XAMjzk971bLXE=)
                          4: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: GWaWKRBrWSX+bUdESxh+m2otGWb/hOeTShn9gb95F3w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
                          rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 00:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:72:78:69:2e:5c:a1:e0:2a:a4:06:29:32:54:af:c1:a2:dc:1e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
        Validity
            Not Before: Dec 18 12:55:46 2025 GMT
            Not After : Dec 22 00:02:46 2025 GMT
        Subject: CN=D6DE8795A8AC5EF1119E2BF6F304E28F0995E139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:97:95:92:28:06:03:5d:e6:e3:80:91:e9:
                    3f:d1:2f:5a:96:8e:ca:0d:24:44:6b:af:f3:51:09:
                    7e:f9:f1:79:da:cf:05:75:0e:89:73:bd:a0:46:54:
                    9a:3f:73:48:6e:f7:f3:be:be:73:60:b5:72:f9:80:
                    c0:83:3f:02:16:62:04:57:e5:a2:f4:a5:99:10:f3:
                    53:a3:10:6d:0c:4a:dc:53:fd:c1:5e:c9:28:03:62:
                    bb:8e:bd:45:2d:73:8b:27:97:e0:8e:19:88:03:0b:
                    80:76:02:ba:f8:76:81:00:7a:5d:9e:95:17:3a:0b:
                    21:3a:23:e4:86:c9:79:43:9e:d8:e6:8d:e6:89:28:
                    2b:8e:8c:dd:b0:93:73:50:8e:54:42:97:39:38:6a:
                    44:47:b5:0a:d4:c4:b8:4d:b7:5f:d7:f2:44:2d:b6:
                    02:8f:82:b4:ca:b6:97:c9:79:f0:62:b0:ed:80:a9:
                    67:20:a3:de:f0:6f:3c:2d:9f:98:68:c2:e7:da:de:
                    1b:fb:c2:3d:e3:c0:4c:eb:3f:70:99:bc:c2:26:0e:
                    3f:cf:20:93:a3:1a:96:54:05:a8:a0:cb:16:ad:ed:
                    c6:77:4f:f1:d1:a2:eb:b9:45:6a:da:e3:a0:f8:f1:
                    f1:49:04:fe:3f:6c:63:1b:8b:30:47:5d:c8:b9:2a:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DE:87:95:A8:AC:5E:F1:11:9E:2B:F6:F3:04:E2:8F:09:95:E1:39
            X509v3 Authority Key Identifier:
                keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:12:90:4f:b3:70:99:fd:f9:60:5b:89:06:e2:e4:0d:32:fe:
         84:c8:86:ff:1c:72:51:b9:7d:b9:19:8d:02:c2:c5:17:0b:28:
         b2:e9:a2:59:57:a3:05:92:43:bd:51:ca:f2:7e:e2:d1:8b:d3:
         59:e5:df:dd:80:63:a3:6d:e4:d4:cd:c4:16:4b:59:28:43:d4:
         a6:dc:bc:4b:2b:e6:7e:de:e0:75:42:bd:3b:0d:3a:dc:83:fe:
         0c:72:39:34:05:82:ea:a6:c7:cb:94:53:4f:a1:a8:ff:dc:89:
         32:bf:93:a5:61:ed:8a:f3:ba:8f:70:10:e7:c9:76:4c:98:5f:
         04:8c:49:e0:a3:24:d7:ce:6a:e4:e1:f0:a4:9a:83:fc:0e:d1:
         a2:63:e6:e8:54:5e:0a:ec:00:99:d0:97:70:57:2a:3d:39:37:
         db:b7:4f:20:55:9b:5a:2f:f8:12:06:de:20:8b:f3:3b:8a:a8:
         7c:c5:c8:9e:3c:8d:c9:10:94:af:bb:a8:dd:d3:12:d6:cf:36:
         a9:17:d6:89:33:5d:da:b1:4c:19:9b:d3:da:62:b1:41:82:1b:
         3e:3c:29:d4:12:12:07:09:2c:3b:b3:96:b1:c1:84:da:99:b4:
         d0:b4:f4:71:7d:09:b0:1d:33:0a:e7:b5:c0:80:2f:4a:5b:d1:
         1d:a6:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:14:17 2025 by rpki-client