This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft
File:                     4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json)
Hash identifier:          pyS7b5MWh3Ae+LqsHPHd1fG5pJcJaJicN9wdgfDQu04=
Subject key identifier:   81:43:D7:F1:E2:62:C2:41:E1:4B:7F:1D:A3:70:ED:F7:BC:44:C3:B2
Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD
Certificate issuer:       /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD
Certificate serial:       7AE1DA2E8260E4557C0F8EFFCAB381B831DD1F25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft
Manifest number:          02AD
Signing time:             Wed 03 Dec 2025 08:21:08 +0000
Manifest this update:     Wed 03 Dec 2025 08:16:08 +0000
Manifest next update:     Sat 06 Dec 2025 16:26:08 +0000
Files and hashes:         1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: 11tgJtFQ4EeQHRKTgQXdGKeF5oZj/+mjjl1w8ImDRbA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl
                          rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e1:da:2e:82:60:e4:55:7c:0f:8e:ff:ca:b3:81:b8:31:dd:1f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD
        Validity
            Not Before: Dec  3 08:16:08 2025 GMT
            Not After : Dec  6 16:26:08 2025 GMT
        Subject: CN=8143D7F1E262C241E14B7F1DA370EDF7BC44C3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0d:65:4c:3a:6d:87:d2:44:35:f3:19:a6:a3:
                    86:70:34:a9:0f:c8:b5:bf:62:e6:76:ab:a8:ae:29:
                    61:53:a1:09:ca:e9:e0:fe:f7:45:4f:6c:fe:16:c4:
                    b6:4a:7d:e9:2d:ef:e0:dd:fe:af:68:e1:b8:c5:c3:
                    2f:e0:48:b8:62:c2:ab:dd:2e:74:48:ec:cf:61:0a:
                    c8:9a:05:86:cf:74:16:6b:63:bb:ca:83:b8:07:d1:
                    d1:4b:c6:be:85:77:30:72:4d:b1:61:79:34:b5:2b:
                    42:4a:df:17:2d:d7:b0:94:13:ce:2b:00:bd:3a:f2:
                    13:a8:a2:f7:75:d9:5a:cc:f7:25:22:aa:f7:b6:0d:
                    60:01:f9:e7:61:bb:7a:19:63:aa:f2:43:d4:44:6e:
                    7f:3f:80:6e:a4:ab:fb:c1:d8:f5:23:9d:13:54:0a:
                    99:79:42:9d:73:4d:4d:47:6a:50:d0:16:3d:23:0e:
                    9e:2a:a8:95:f4:41:6a:e0:cb:ea:28:2a:b7:a6:91:
                    4d:46:51:e7:53:7e:f2:f5:bd:c2:b8:ab:b4:ed:25:
                    cb:c0:3b:a6:7a:71:30:b8:67:13:f9:8b:77:a7:76:
                    2d:63:32:fe:a7:18:3d:28:f8:e6:7f:e4:06:8e:3b:
                    f6:e0:c4:a9:38:c5:5b:de:1f:b3:f5:97:21:1c:cf:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:43:D7:F1:E2:62:C2:41:E1:4B:7F:1D:A3:70:ED:F7:BC:44:C3:B2
            X509v3 Authority Key Identifier:
                keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:44:09:e8:7f:c5:24:a0:09:bc:9b:5f:94:d8:3a:32:40:6a:
         c2:c7:ef:9a:77:97:cc:9b:3e:09:71:da:35:b4:ea:b5:10:f5:
         49:bb:7c:77:1e:91:63:3d:2e:ec:64:4d:06:87:2c:63:58:59:
         f8:60:6f:cc:40:0a:3b:f8:44:24:2d:0d:92:69:fa:4d:c0:0b:
         14:21:d5:f1:ed:01:61:03:34:db:ae:68:73:0f:d6:18:59:c0:
         7a:3b:98:a0:12:df:6e:f2:8c:dc:f2:86:5a:c5:06:f4:02:d6:
         c5:b8:e1:b2:8d:c6:df:26:7a:c1:66:42:67:7f:2d:d7:80:72:
         50:de:10:b9:ef:83:9a:97:9b:8d:ff:c9:d5:c6:39:be:ff:f2:
         6a:ec:ed:b3:66:3c:75:ff:06:2e:e7:03:ae:d3:32:f7:ed:e9:
         93:1f:00:a2:23:da:36:62:1b:52:3d:e6:1a:d5:41:ec:f1:e7:
         53:27:bc:bd:7f:e3:c2:79:fb:8e:38:15:e4:e6:6a:d8:f1:fc:
         c2:42:64:67:c7:66:71:67:b8:8f:b1:d1:5f:06:68:fe:0d:a9:
         79:69:3d:a2:2e:f4:17:15:1e:53:9d:c0:9b:d5:dd:01:78:12:
         99:e4:3b:ee:70:60:67:14:5a:99:0f:52:e9:f6:e2:c8:55:ee:
         a5:b1:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:57 2025 by rpki-client