This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft
File:                     4E27F034334E73C4B659862D683F564DB3AA9069.mft (raw, json)
Hash identifier:          yuteQIWnLbFP/vhiQNHJn/lj5rI2QvzAItm288Og5/g=
Subject key identifier:   B1:CF:F8:76:15:42:6C:91:D2:72:BD:D4:CF:19:93:F2:66:37:B3:B8
Authority key identifier: 4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69
Certificate issuer:       /CN=4E27F034334E73C4B659862D683F564DB3AA9069
Certificate serial:       18AF62C76A7C644106EABD8558907ABCD8AF9DCC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft
Manifest number:          01AE
Signing time:             Tue 02 Dec 2025 12:20:05 +0000
Manifest this update:     Tue 02 Dec 2025 12:15:05 +0000
Manifest next update:     Fri 05 Dec 2025 16:53:05 +0000
Files and hashes:         1: 4E27F034334E73C4B659862D683F564DB3AA9069.crl (hash: IAVapH+efVGSrJ5KzyknKUULC1sJtL9vFD4vvwqG9Mc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl
                          rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:af:62:c7:6a:7c:64:41:06:ea:bd:85:58:90:7a:bc:d8:af:9d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E27F034334E73C4B659862D683F564DB3AA9069
        Validity
            Not Before: Dec  2 12:15:05 2025 GMT
            Not After : Dec  5 16:53:05 2025 GMT
        Subject: CN=B1CFF87615426C91D272BDD4CF1993F26637B3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:94:d2:2b:c5:96:4d:9d:20:10:8e:8f:48:58:
                    69:b4:00:6e:76:ab:73:d5:94:35:96:0b:bf:9c:c8:
                    b6:dd:4b:3e:16:e5:92:de:c8:7f:70:bf:62:df:d6:
                    64:30:81:08:0c:57:cc:29:04:38:64:54:d0:07:e6:
                    f1:00:9b:d4:dc:21:c7:77:56:b6:43:33:dd:f1:e4:
                    a0:f6:61:f9:e6:48:02:d3:e3:f2:ed:1b:bf:ec:ab:
                    d3:46:84:9f:3f:71:90:08:f7:b9:91:c6:a0:76:f5:
                    d2:1d:08:2b:9c:6d:43:95:c0:8c:6d:85:62:5a:98:
                    c9:3a:26:e3:fa:2c:57:08:b7:89:b9:68:16:a6:dc:
                    e7:ec:8e:67:fc:5f:86:27:f1:77:05:ef:dd:a3:4e:
                    e1:3c:90:93:79:d4:71:eb:d2:bd:e7:f7:33:45:3a:
                    d0:72:ea:ec:7e:2c:89:0a:b6:06:eb:33:c4:b5:e7:
                    77:68:e9:c8:a1:0a:ee:aa:07:36:5e:ff:a2:6c:ce:
                    e5:13:5b:9b:30:d1:c2:11:1b:45:1f:cd:64:6e:5a:
                    0f:bd:ca:16:ce:36:f4:fe:4e:63:4d:d7:a9:62:79:
                    db:05:73:45:1b:c1:14:94:8c:c5:92:a7:55:aa:78:
                    76:16:bb:92:97:7c:85:43:ec:e4:7c:47:bd:c2:b7:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CF:F8:76:15:42:6C:91:D2:72:BD:D4:CF:19:93:F2:66:37:B3:B8
            X509v3 Authority Key Identifier:
                keyid:4E:27:F0:34:33:4E:73:C4:B6:59:86:2D:68:3F:56:4D:B3:AA:90:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E27F034334E73C4B659862D683F564DB3AA9069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/4E27F034334E73C4B659862D683F564DB3AA9069.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:f8:2a:ee:cf:a9:88:db:d7:b7:b9:cf:08:63:da:4a:71:
         5c:9b:5c:ec:57:46:53:75:f4:4a:49:8f:cd:92:30:4b:c1:d5:
         de:b7:b8:3b:97:22:a6:6a:dd:db:10:9f:84:dd:f4:c0:ca:18:
         7b:3b:8e:d7:af:2f:21:0f:5a:c1:de:0a:02:2a:52:04:0f:c7:
         7a:e5:49:d1:f8:dc:e3:61:18:d2:e4:ba:bd:15:e4:eb:31:50:
         0a:71:24:17:e0:83:80:f1:0b:7a:7b:78:14:c6:00:c5:07:8d:
         6b:68:47:7b:77:b9:d6:3f:15:9e:84:d0:60:24:c4:f4:b1:22:
         25:bb:c2:dc:30:fa:23:be:8a:ec:ac:60:d5:e8:7b:63:77:8e:
         02:3a:0b:4c:ba:bb:42:40:f6:c4:67:36:fe:4b:b1:ca:6e:29:
         a3:95:44:e9:fd:16:66:be:1f:8b:13:09:14:55:0d:76:b6:d7:
         f7:8b:88:ef:6e:58:7a:10:9d:8f:18:79:fb:22:fe:fc:71:f0:
         66:af:5a:46:91:03:7a:71:37:e2:06:b3:1b:f9:0b:f1:77:ed:
         0f:70:4d:e4:05:cb:98:2d:4d:67:7e:f7:ca:ea:43:56:d3:ec:
         5a:4e:a1:f5:b0:8a:71:ee:42:08:86:01:8f:b7:50:c3:e9:70:
         83:50:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:43 2025 by rpki-client