This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft
File:                     132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json)
Hash identifier:          0LPODY3j1jazDAqHQTsryVtOH2uJM6NnPaycd1XoiG8=
Subject key identifier:   75:99:35:7D:CD:40:54:3C:78:8F:D0:D3:57:F0:4D:19:94:51:FD:78
Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8
Certificate issuer:       /CN=132FE11D02592F9985A978A727BF9B772762CDF8
Certificate serial:       163F51673AA4C7793A3CA864C2EF78C145118490
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft
Manifest number:          01DD
Signing time:             Mon 01 Dec 2025 18:00:03 +0000
Manifest this update:     Mon 01 Dec 2025 17:55:03 +0000
Manifest next update:     Thu 04 Dec 2025 22:57:03 +0000
Files and hashes:         1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: 9+zZ2pm1wUapaCYshMfUdGcwHdlmfODzZcfOQF5hK8U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl
                          rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 22:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3f:51:67:3a:a4:c7:79:3a:3c:a8:64:c2:ef:78:c1:45:11:84:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8
        Validity
            Not Before: Dec  1 17:55:03 2025 GMT
            Not After : Dec  4 22:57:03 2025 GMT
        Subject: CN=7599357DCD40543C788FD0D357F04D199451FD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:6b:cc:ef:00:5e:3d:c1:5a:05:ac:54:0b:
                    58:76:9f:5f:db:3e:20:c2:48:56:21:ff:22:6e:b7:
                    6b:79:dc:01:81:ef:7e:51:f7:05:26:6a:ea:15:5f:
                    6d:30:f1:ca:bc:fa:9f:6b:88:2a:ff:7f:74:64:31:
                    3d:45:e4:b0:da:c8:99:3b:35:d3:3f:4e:fe:8b:6f:
                    d6:aa:e9:20:08:c5:85:2f:e3:3e:e3:a2:54:85:c9:
                    e9:2c:ec:3b:7c:8a:00:18:48:c4:b4:67:3b:c7:08:
                    ae:ff:74:74:10:fe:49:5a:45:80:6b:25:70:84:20:
                    5f:12:26:f5:0f:74:1a:f9:71:9d:a3:52:a5:46:71:
                    da:db:dd:95:4a:3a:e1:84:05:8a:ed:8b:a1:cb:de:
                    ef:9f:40:93:36:64:09:4a:b6:9d:83:2a:f9:20:58:
                    fd:f3:93:4f:54:0f:fe:b4:03:30:75:61:4a:12:26:
                    ed:4f:5c:5b:e4:65:b2:c1:73:86:c8:9e:e5:79:f9:
                    63:04:f7:52:22:b7:40:e7:ce:aa:31:ba:71:ae:4f:
                    45:e3:32:ee:5e:ab:b9:96:7c:b1:02:8c:e0:5a:99:
                    fd:58:be:8c:2c:50:3a:85:0b:f8:e8:7a:da:89:60:
                    d7:dd:51:22:e4:fd:88:38:82:d5:9f:08:83:eb:34:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:35:7D:CD:40:54:3C:78:8F:D0:D3:57:F0:4D:19:94:51:FD:78
            X509v3 Authority Key Identifier:
                keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:67:75:48:d1:1d:94:17:c7:13:64:3b:78:c8:bb:70:b2:
         87:5e:44:c4:10:a0:30:8e:ac:56:82:12:8c:c0:75:e9:7b:d4:
         40:d8:e8:2f:08:32:3e:f8:9b:d5:86:8e:b5:d2:30:42:30:59:
         a8:c7:69:be:69:c3:3d:5d:72:89:26:55:54:dd:07:24:4b:42:
         61:18:9e:2f:89:25:3e:34:38:31:6b:8c:99:8a:d1:4e:20:92:
         49:1b:9e:af:ca:85:67:ae:62:e7:9f:99:fa:7f:87:13:b4:15:
         63:66:e7:a0:00:0d:6f:99:c0:98:59:13:e4:87:37:d5:7f:35:
         4e:a5:ae:d6:7e:3e:dd:c2:1e:87:2d:5c:c2:0b:83:e6:c3:a7:
         3f:43:c8:5a:2f:ec:d9:1d:1f:c3:f8:04:1a:1f:be:32:bc:77:
         e7:f7:66:a1:f4:2a:be:1a:2e:3d:16:ea:34:9d:e7:23:1e:dd:
         cb:db:0a:e6:f3:fe:56:49:d9:70:3f:43:df:21:b2:41:27:fd:
         02:24:90:85:ce:29:ed:98:1c:5a:c8:0a:47:b5:68:e0:74:60:
         8f:8f:e8:75:f5:3b:22:26:93:e6:a2:c3:00:cf:9f:fa:0d:74:
         4d:b6:9b:04:39:ed:64:1e:de:2d:bd:bc:07:a4:0a:f5:51:07:
         4a:dc:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:11 2025 by rpki-client