This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft
File:                     454DBC52C30315358534B20532037D549238F4C9.mft (raw, json)
Hash identifier:          eAU1ba9TNoliQgFbpMuosaDEP1WalFkBqp2jKyya2og=
Subject key identifier:   DA:8C:25:CA:BF:5B:26:7F:BF:1A:3F:E0:5C:5D:E6:AA:17:2E:99:AE
Authority key identifier: 45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9
Certificate issuer:       /CN=454DBC52C30315358534B20532037D549238F4C9
Certificate serial:       6128F637098E96C3C4281D29F9FEDA42BE5E91D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft
Manifest number:          80
Signing time:             Wed 03 Dec 2025 03:41:36 +0000
Manifest this update:     Wed 03 Dec 2025 03:36:36 +0000
Manifest next update:     Sat 06 Dec 2025 11:56:36 +0000
Files and hashes:         1: 454DBC52C30315358534B20532037D549238F4C9.crl (hash: 5FqQTJhm4eKNpeJ6sPFpgvjiuOYk+VLDrT/yp+vEUis=)
                          2: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: HMKdgPohDB0xWBN1Oc1VU1UzcfxKyNuGEiE2CnpRGEY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl
                          rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 11:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:28:f6:37:09:8e:96:c3:c4:28:1d:29:f9:fe:da:42:be:5e:91:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454DBC52C30315358534B20532037D549238F4C9
        Validity
            Not Before: Dec  3 03:36:36 2025 GMT
            Not After : Dec  6 11:56:36 2025 GMT
        Subject: CN=DA8C25CABF5B267FBF1A3FE05C5DE6AA172E99AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c8:68:91:c6:ed:8d:6e:fb:e1:f2:2e:9f:30:
                    25:8a:d9:f0:14:b8:42:dc:c3:96:71:41:d8:7a:89:
                    7e:c9:41:41:98:8d:68:14:dc:d8:cd:43:91:00:13:
                    dd:52:a7:2f:8c:02:0c:a4:ff:cc:28:c2:9c:6a:21:
                    0b:67:05:74:0e:72:15:11:4d:34:21:0f:ad:3b:3f:
                    e8:92:b4:ee:a4:13:68:7f:76:15:fe:7a:f0:5d:de:
                    8c:d3:58:98:c9:dc:c7:b4:7d:81:4f:8e:a3:dc:3d:
                    a6:03:b6:49:74:90:ab:13:ec:98:08:9e:0b:29:3b:
                    f1:53:44:f5:7f:da:98:bf:b8:97:33:40:f7:d8:bc:
                    d3:21:00:07:27:2e:97:5b:00:48:7a:25:d9:96:ff:
                    be:3f:da:65:0a:8f:92:ef:92:c3:fe:b8:78:d1:d7:
                    0d:57:bf:8a:33:74:8d:03:6a:8a:6b:da:47:10:1b:
                    3a:61:c1:7f:9c:5d:8d:05:8b:55:92:9c:ba:ac:05:
                    85:08:44:4d:a8:08:e2:b1:45:c1:61:28:01:01:4d:
                    1c:15:c6:86:07:70:b5:67:e2:ff:54:ce:95:6c:e5:
                    cc:b2:4d:ef:67:69:7b:ed:b3:28:b4:ed:71:4a:d1:
                    e5:b4:6e:6f:fe:57:c1:a1:56:c7:b1:aa:91:4f:db:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:25:CA:BF:5B:26:7F:BF:1A:3F:E0:5C:5D:E6:AA:17:2E:99:AE
            X509v3 Authority Key Identifier:
                keyid:45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:21:4c:98:10:d0:9e:43:6d:bc:44:0d:45:da:c1:20:7e:
         7d:66:9b:bd:82:86:7f:92:9c:7d:89:e4:60:64:e5:d7:7f:97:
         7c:7a:f3:a7:bb:d6:3c:a7:6e:6b:d4:b9:bf:10:12:fa:99:7b:
         f0:79:90:0a:55:18:63:06:2d:93:eb:91:c5:98:c3:54:04:c8:
         bd:ba:5d:a2:23:9c:d8:77:72:88:b2:dd:75:2c:d2:94:a8:0f:
         c0:f5:95:51:01:f7:89:0e:64:fd:20:8e:8d:ac:f9:c8:1d:85:
         59:c0:1b:a2:98:99:7b:e7:0c:e9:d0:40:1b:97:6d:f6:94:64:
         dd:59:55:29:58:97:61:da:cc:62:62:ef:e7:4b:a9:c9:46:e8:
         a4:0c:8c:3b:74:49:b0:ea:7e:be:70:12:ef:de:fd:89:db:b2:
         30:9f:aa:e1:8f:1a:b5:b5:b9:e7:34:a2:3e:88:ac:c4:8a:40:
         72:e4:c1:08:79:21:dd:a6:a1:21:90:db:ba:3d:a2:9b:30:68:
         76:2b:25:c8:24:ba:66:16:24:98:59:68:17:ce:7d:1a:54:8c:
         95:93:cd:3b:d7:91:9a:70:a7:b0:72:21:42:ea:95:d3:34:37:
         31:2c:de:a1:71:db:4d:31:69:b8:eb:41:2d:b7:b4:c4:e1:d8:
         e3:7e:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:57:20 2025 by rpki-client