This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
File:                     619EF55758C22775EDCEBA183A59715E1452FD8B.mft (raw, json)
Hash identifier:          4huqeRL6iJDP2Oosm3RDxQEdAzTS4B3oNSie28hYJw0=
Subject key identifier:   45:2E:0D:F9:69:0F:BD:78:AD:C5:19:94:A4:04:E7:86:74:F6:0E:D9
Authority key identifier: 61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B
Certificate issuer:       /CN=619EF55758C22775EDCEBA183A59715E1452FD8B
Certificate serial:       65D41606475A894046CC66ED0DBC96C33AF84FE4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
Manifest number:          01FA
Signing time:             Tue 02 Dec 2025 17:51:16 +0000
Manifest this update:     Tue 02 Dec 2025 17:46:16 +0000
Manifest next update:     Sat 06 Dec 2025 04:02:16 +0000
Files and hashes:         1: 619EF55758C22775EDCEBA183A59715E1452FD8B.crl (hash: CvPVQeMG8tTHCVFq52xWZ6HZqU5oIWTNVPoJnRlWTGQ=)
                          2: 3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (hash: XOCdIAMKDMLBpRxTU+JgAZ5zHO8OEenWLT9fS6FfdlU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl
                          rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 04:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d4:16:06:47:5a:89:40:46:cc:66:ed:0d:bc:96:c3:3a:f8:4f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619EF55758C22775EDCEBA183A59715E1452FD8B
        Validity
            Not Before: Dec  2 17:46:16 2025 GMT
            Not After : Dec  6 04:02:16 2025 GMT
        Subject: CN=452E0DF9690FBD78ADC51994A404E78674F60ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:bc:73:50:13:3e:55:23:54:09:57:b1:09:
                    32:bd:fd:24:dd:d3:5f:0b:75:75:dc:fe:f9:da:49:
                    b8:4f:b2:58:93:2f:3b:f5:b6:73:5c:f5:1b:16:90:
                    2e:2a:31:e8:9c:78:a8:b6:d4:53:6b:1f:33:69:be:
                    25:71:06:0a:e2:cc:b6:a1:52:b5:85:e7:78:ef:48:
                    44:55:1c:18:8a:9d:d4:9e:0c:14:cf:b9:21:f6:c4:
                    2d:29:44:1a:1c:ff:cc:4b:8f:9e:ab:e4:fd:a9:20:
                    a2:59:0c:19:4d:50:b9:85:05:37:1d:00:c1:85:be:
                    1e:2a:fc:56:52:78:01:3f:8a:f3:85:17:74:19:e6:
                    c9:6e:9d:de:44:45:da:13:f7:00:de:96:39:7f:08:
                    26:b3:8e:c6:a7:1f:af:13:e0:30:b2:f4:7f:7a:ee:
                    3a:da:12:25:5a:c1:f2:f3:6c:79:8e:9e:64:36:9d:
                    72:1f:6e:73:53:ba:a5:45:c4:18:7e:a7:f2:37:59:
                    fe:91:8d:03:9f:b9:7f:9d:0e:c6:cf:3f:0f:40:9a:
                    be:5f:88:c8:a0:d5:52:5f:2c:89:e9:54:ff:0c:07:
                    b3:65:ad:13:23:1e:b8:7b:ae:b3:a3:57:e4:a4:5c:
                    a5:00:eb:36:2d:06:67:b4:f9:87:2f:0c:71:c8:e0:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2E:0D:F9:69:0F:BD:78:AD:C5:19:94:A4:04:E7:86:74:F6:0E:D9
            X509v3 Authority Key Identifier:
                keyid:61:9E:F5:57:58:C2:27:75:ED:CE:BA:18:3A:59:71:5E:14:52:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/619EF55758C22775EDCEBA183A59715E1452FD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/619EF55758C22775EDCEBA183A59715E1452FD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6e:32:f5:87:2d:c7:46:7f:1c:9a:dd:40:68:2f:dd:a4:6e:
         94:fd:c1:a6:5f:06:d7:a4:4e:42:db:db:ae:ed:63:8c:e5:1b:
         a6:bd:33:0b:87:ee:b8:45:bd:8e:91:9b:45:f2:04:a1:d6:42:
         49:66:84:df:5a:28:8b:ef:84:a2:f5:05:f3:2a:9c:ed:e8:d4:
         1d:34:7b:d2:b8:9c:50:e8:a5:39:7d:dd:7a:b4:a2:92:68:2a:
         aa:82:90:04:c2:8a:72:37:e4:91:c5:ae:7d:78:a5:f0:b3:38:
         04:d3:f7:7c:21:17:59:59:ab:06:63:c3:e0:a1:1f:80:ab:77:
         83:6e:71:2c:e7:50:8f:86:a5:53:d9:51:a7:58:3d:9e:ab:8f:
         22:22:7e:bd:a8:e2:78:90:22:f2:86:2d:a3:84:12:1e:3a:80:
         b1:d7:7b:14:86:05:d5:e9:ef:80:c1:63:84:d2:3a:24:38:53:
         1c:29:0d:52:2d:09:c2:a1:63:ff:89:36:0f:b4:28:eb:96:84:
         7c:11:f0:2b:dd:7d:5d:bc:fa:d1:dc:4c:66:d3:f1:c4:f6:ed:
         d1:c4:fa:17:34:0d:48:a0:3b:a9:e8:08:69:62:be:89:a6:1b:
         12:3d:8b:ed:b3:27:d6:be:48:53:b5:1e:c0:14:9c:0b:2b:08:
         4b:4b:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:42 2025 by rpki-client