This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
File:                     E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json)
Hash identifier:          HBz0Qjn1INqNpSYem+DEAIfO//+v0s14fNNbc1KKEtw=
Subject key identifier:   78:D0:82:34:21:1D:65:5F:B3:E3:22:53:C2:31:CE:F9:B3:DF:9B:8C
Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C
Certificate issuer:       /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C
Certificate serial:       27A2674AEC87A091B409939FC76BC8509292390C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
Manifest number:          012E
Signing time:             Tue 02 Dec 2025 08:02:14 +0000
Manifest this update:     Tue 02 Dec 2025 07:57:14 +0000
Manifest next update:     Fri 05 Dec 2025 18:32:14 +0000
Files and hashes:         1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: 0/JQ4iVyDXYlMI53am1tN0B03toeVXibKlPv3+Xy1ac=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl
                          rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 18:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a2:67:4a:ec:87:a0:91:b4:09:93:9f:c7:6b:c8:50:92:92:39:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C
        Validity
            Not Before: Dec  2 07:57:14 2025 GMT
            Not After : Dec  5 18:32:14 2025 GMT
        Subject: CN=78D08234211D655FB3E32253C231CEF9B3DF9B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:56:be:1e:df:a6:06:c3:48:ac:9b:0e:4f:
                    b4:6e:04:1b:93:6f:79:a5:a9:8b:d1:4e:a1:56:96:
                    25:92:40:97:4f:ef:d6:47:05:80:37:c8:14:c7:9e:
                    a2:24:64:ed:15:06:ad:28:08:b6:8d:7e:73:3b:1e:
                    d9:95:e9:f2:9b:51:87:e0:12:15:ac:98:a1:e5:91:
                    24:24:b7:37:ce:1c:93:fb:a1:40:b9:a8:14:96:d7:
                    14:6f:f0:e2:9d:6a:8d:56:62:48:4b:01:dd:d1:c7:
                    3c:cb:ca:b2:db:ba:ee:81:f3:d1:5d:db:4c:1c:17:
                    4d:ca:bc:bb:98:d9:07:29:41:77:09:9e:7d:ee:2e:
                    47:e0:51:5d:8e:75:e2:bd:b9:30:9c:a5:8b:2a:ba:
                    df:80:64:4b:b5:45:50:cc:a0:5e:39:ab:2f:31:e4:
                    a4:e6:aa:c7:26:69:2b:99:40:e7:f1:2c:3f:4f:d1:
                    66:08:84:56:62:9f:78:c1:0f:2c:7d:35:ae:d8:3a:
                    82:9d:87:13:91:f9:ff:56:71:62:59:40:07:dd:97:
                    07:89:35:3e:40:60:29:a6:bf:71:82:c0:6b:f9:22:
                    0e:13:ce:c5:91:32:91:51:4a:1f:dc:27:f0:41:52:
                    95:39:cb:3d:91:12:2e:ac:a3:5a:81:1c:c9:cf:4e:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D0:82:34:21:1D:65:5F:B3:E3:22:53:C2:31:CE:F9:B3:DF:9B:8C
            X509v3 Authority Key Identifier:
                keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:55:7d:37:bc:e2:f5:67:bd:bf:90:e5:1b:61:5a:9a:68:7b:
         a5:89:cc:b1:bb:f3:87:c2:3d:7f:88:f1:ac:7c:68:5e:b9:07:
         01:91:fd:20:9d:5d:f3:65:02:12:66:c3:00:67:27:f6:4b:d7:
         b8:f3:01:d8:ac:72:27:27:0e:99:70:77:69:e4:eb:55:5a:97:
         e9:04:ed:f0:8f:98:4f:23:a1:84:66:33:74:81:76:ee:5c:88:
         47:d3:b3:e0:97:ad:39:bd:18:57:a4:cf:54:03:41:3c:b5:b2:
         dc:2d:83:64:42:98:07:82:d8:2d:a2:cc:be:5e:fa:56:a9:79:
         af:69:55:7e:da:22:8f:d1:6a:c1:bb:a0:4b:7d:a0:a8:e8:a0:
         93:35:33:5a:19:63:62:c9:a4:e1:af:c0:78:0b:b3:13:04:3e:
         5d:8d:36:bc:dd:f4:b7:0d:67:2f:70:db:75:06:12:dd:3c:cd:
         3a:6e:a3:61:23:df:3e:6e:32:01:d5:f1:cc:e8:5e:09:a1:71:
         01:ea:d1:5e:25:23:72:84:90:bf:eb:ca:0e:6b:c3:12:03:1e:
         9a:d3:e6:ea:86:1c:6b:c1:c8:c4:e4:db:86:b6:71:af:97:a5:
         e7:87:4b:c4:80:60:8d:0d:ff:9c:fd:81:ea:ce:9b:18:44:33:
         dd:f1:f0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:30 2025 by rpki-client