This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
File:                     1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json)
Hash identifier:          TltPN2ooxCLWHAkA1yH0EQITzbgGldtQ8W2iMFbTibQ=
Subject key identifier:   1F:0E:DB:E5:63:D0:6E:6C:98:53:6A:44:63:43:AD:3F:B8:D0:90:A6
Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8
Certificate issuer:       /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8
Certificate serial:       38CC64EA415EBDC2B6DC3E6195115742294DB672
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
Manifest number:          FB
Signing time:             Wed 03 Dec 2025 08:50:05 +0000
Manifest this update:     Wed 03 Dec 2025 08:45:05 +0000
Manifest next update:     Sat 06 Dec 2025 11:17:05 +0000
Files and hashes:         1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: +kp/xPyUCYz8EqY/pKMLnpiDSimdGvGUsLiJV+sJyDY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl
                          rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 11:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cc:64:ea:41:5e:bd:c2:b6:dc:3e:61:95:11:57:42:29:4d:b6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8
        Validity
            Not Before: Dec  3 08:45:05 2025 GMT
            Not After : Dec  6 11:17:05 2025 GMT
        Subject: CN=1F0EDBE563D06E6C98536A446343AD3FB8D090A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:d5:8f:0b:5d:8e:a2:53:b4:3b:1b:ac:65:
                    8f:73:65:64:20:66:25:cc:37:8c:fd:42:56:a6:5c:
                    51:ff:5e:b2:e2:6b:d2:c9:76:c3:53:b6:a8:5b:29:
                    be:9e:8c:b0:6c:bf:85:32:b8:7f:8b:34:01:35:c4:
                    3d:8a:8a:d8:27:2e:e2:23:50:91:9c:6b:31:b1:63:
                    20:28:04:98:c5:4c:2a:e2:15:e9:9a:a4:71:3a:7c:
                    d1:7f:6c:cf:a8:2c:ee:79:22:56:a9:b8:6d:e4:39:
                    47:d0:37:00:24:8e:be:85:5c:cc:85:83:1b:9f:b6:
                    ea:88:6c:71:29:bc:b6:9c:a8:e4:f1:4f:de:a4:4f:
                    67:b4:aa:24:d4:d8:a6:c4:48:b4:aa:0a:9e:3e:c6:
                    fa:58:b7:80:db:2c:3d:78:ff:8d:e7:52:75:3f:83:
                    c7:b7:fc:ea:5c:a6:a4:b7:fb:57:4b:e7:90:1c:7b:
                    d8:50:77:e7:12:3b:a5:98:73:43:1e:08:19:53:e1:
                    73:39:6a:17:e0:e3:73:8d:a2:9c:a8:1a:83:9f:75:
                    ad:f6:de:94:40:9f:d2:6a:01:ad:3f:29:4c:42:25:
                    f4:64:d3:91:d7:43:19:6a:fa:27:71:f9:2e:6b:56:
                    8e:93:9c:08:e2:70:d3:cd:14:d2:12:6d:28:41:47:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:DB:E5:63:D0:6E:6C:98:53:6A:44:63:43:AD:3F:B8:D0:90:A6
            X509v3 Authority Key Identifier:
                keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b5:59:81:30:20:d0:70:c9:8c:56:b7:2d:b5:bd:b8:2c:45:
         23:de:57:49:46:a8:cb:83:5d:0a:0a:c0:f2:3e:01:fc:90:a6:
         44:9c:5e:af:ec:85:bb:88:1c:d2:7d:52:36:78:e5:8f:28:32:
         4f:54:4d:a7:6d:60:3c:3e:39:6c:73:cc:e8:27:ce:f6:2d:1d:
         ca:e0:ac:a6:1c:21:94:95:00:ed:1a:37:de:b8:83:09:2f:09:
         e3:86:ef:07:b2:66:8c:63:60:82:1c:9d:7f:2b:9c:04:5b:91:
         e5:16:75:c0:1d:c5:72:ef:5d:3f:11:8e:a7:85:f9:96:03:ce:
         a6:0a:78:05:3b:b2:ad:cb:f3:e3:31:4e:5f:45:0a:6c:45:a1:
         42:33:2d:96:a1:3b:ee:3b:a7:43:32:5b:62:5b:b8:4b:37:44:
         30:bf:d1:d7:58:3b:75:dd:06:1d:e5:2b:f2:48:7b:ac:b7:eb:
         43:af:91:71:6c:ad:83:cf:dd:33:de:83:59:b5:45:36:ea:95:
         db:46:d7:46:eb:21:34:9f:b3:e5:97:f1:96:fd:25:65:ac:9c:
         55:0f:5e:5d:e0:f1:d0:0c:01:04:8e:db:9f:06:62:96:e3:0c:
         fe:b2:f3:e5:e5:81:1c:8f:13:c6:a6:51:fc:7a:fe:d4:89:be:
         86:31:64:ab
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOMxk6kFevcK23D5hlRFXQilNtnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx
MzY5N0FEODAeFw0yNTEyMDMwODQ1MDVaFw0yNTEyMDYxMTE3MDVaMDMxMTAvBgNV
BAMTKDFGMEVEQkU1NjNEMDZFNkM5ODUzNkE0NDYzNDNBRDNGQjhEMDkwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS29WPC12OolO0OxusZY9zZWQg
ZiXMN4z9QlamXFH/XrLia9LJdsNTtqhbKb6ejLBsv4UyuH+LNAE1xD2KitgnLuIj
UJGcazGxYyAoBJjFTCriFemapHE6fNF/bM+oLO55IlapuG3kOUfQNwAkjr6FXMyF
gxuftuqIbHEpvLacqOTxT96kT2e0qiTU2KbESLSqCp4+xvpYt4DbLD14/43nUnU/
g8e3/OpcpqS3+1dL55Ace9hQd+cSO6WYc0MeCBlT4XM5ahfg43ONopyoGoOfda32
3pRAn9JqAa0/KUxCJfRk05HXQxlq+idx+S5rVo6TnAjicNPNFNISbShBRxN5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHw7b5WPQbmyYU2pEY0OtP7jQkKYwHwYDVR0j
BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB
OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5
N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5
N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE
QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKS1WYEwINBwyYxWty21vbgsRSPeV0lGqMuD
XQoKwPI+AfyQpkScXq/shbuIHNJ9UjZ45Y8oMk9UTadtYDw+OWxzzOgnzvYtHcrg
rKYcIZSVAO0aN964gwkvCeOG7weyZoxjYIIcnX8rnARbkeUWdcAdxXLvXT8RjqeF
+ZYDzqYKeAU7sq3L8+MxTl9FCmxFoUIzLZahO+47p0MyW2JbuEs3RDC/0ddYO3Xd
Bh3lK/JIe6y360OvkXFsrYPP3TPeg1m1RTbqldtG10brITSfs+WX8Zb9JWWsnFUP
Xl3g8dAMAQSO258GYpbjDP6y8+XlgRyPE8amUfx6/tSJvoYxZKs=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:44 2025 by rpki-client