This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
File:                     7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json)
Hash identifier:          6wBdvCTAKllDoO+KKUtRF+hDFTYx+ThZA2gtqLynXYw=
Subject key identifier:   59:BA:34:78:2B:84:EF:3B:8E:65:23:30:F6:8D:F8:E8:18:0D:4B:02
Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04
Certificate issuer:       /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504
Certificate serial:       04CD9AB0BF9E04C909F5A30C51C7CB16ADF00383
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
Manifest number:          32
Signing time:             Tue 02 Dec 2025 05:21:33 +0000
Manifest this update:     Tue 02 Dec 2025 05:16:33 +0000
Manifest next update:     Fri 05 Dec 2025 16:23:33 +0000
Files and hashes:         1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: fQc/MOR4GL+bba0jE9mlRDOdT6fPGGTRyvge6P7O0u8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl
                          rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cd:9a:b0:bf:9e:04:c9:09:f5:a3:0c:51:c7:cb:16:ad:f0:03:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504
        Validity
            Not Before: Dec  2 05:16:33 2025 GMT
            Not After : Dec  5 16:23:33 2025 GMT
        Subject: CN=59BA34782B84EF3B8E652330F68DF8E8180D4B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:7d:ff:d6:33:96:17:bc:36:dc:76:7e:4f:
                    48:59:41:86:67:f7:bf:21:e4:da:7a:b9:53:c4:40:
                    47:52:74:4a:4f:f7:f4:50:ad:50:14:52:ca:f1:8e:
                    53:b4:80:ec:16:b8:8f:a2:b2:d5:04:f4:50:67:a8:
                    2b:1a:c1:69:9a:54:8f:34:5c:a6:89:34:e4:13:46:
                    5f:60:97:d4:19:63:dc:04:85:2e:a7:f9:7e:71:5a:
                    2b:d9:78:24:49:0c:52:cb:89:21:4f:a8:f6:44:53:
                    03:3b:2d:e5:76:d3:8e:ee:72:bb:6f:5a:36:21:19:
                    fc:04:3e:f0:ef:6a:7c:8b:83:1f:37:ad:f7:21:c4:
                    ec:08:72:b9:65:6f:4a:8d:5e:5b:4c:23:49:6a:61:
                    39:84:5b:eb:40:75:d0:ab:50:33:32:ef:41:7e:40:
                    ca:54:37:e9:9c:98:74:5c:79:40:80:57:dc:86:22:
                    66:7d:bd:07:07:3f:ff:5a:af:aa:84:dc:d9:e8:5f:
                    06:b6:53:9d:46:b2:91:3d:ef:85:36:f0:5c:5e:95:
                    f7:11:ea:20:2a:e2:cc:ce:9e:32:a5:aa:c3:2e:d6:
                    b4:8b:3e:62:4c:ea:e9:66:dc:b5:6f:bb:1b:42:31:
                    18:48:89:b4:7a:2e:09:12:9d:a2:73:d9:d4:59:b1:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:34:78:2B:84:EF:3B:8E:65:23:30:F6:8D:F8:E8:18:0D:4B:02
            X509v3 Authority Key Identifier:
                keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:37:8e:f5:d1:22:33:73:48:1c:d3:ce:89:d7:b8:9c:10:
         92:b0:dc:5f:2b:d5:1a:17:ce:22:4b:9b:12:48:98:44:b2:ec:
         af:59:21:1d:e5:3c:d4:94:2f:30:e3:63:e0:7e:67:fa:af:39:
         4c:b9:c6:c7:7a:86:9c:4b:02:fd:56:c5:67:bb:9c:63:cc:9a:
         82:08:f1:3b:ca:10:1e:e1:9b:a1:d8:b0:7b:eb:2d:8d:e6:19:
         33:ba:15:6f:d1:27:ee:b4:fa:8d:f4:37:63:11:b3:ea:cf:eb:
         67:85:f2:b1:0b:70:66:65:61:f8:5f:fc:62:50:dc:4f:c0:22:
         09:c4:b1:cd:04:3c:df:03:1e:4f:94:45:f4:fd:98:5f:dd:66:
         77:1f:2e:07:46:42:bf:18:ea:8b:79:fa:44:2a:0d:3c:f2:f7:
         e9:af:ac:a5:f1:28:85:fa:14:e3:9d:c4:b0:fe:b3:e3:96:c8:
         1c:68:4d:b3:22:b4:3a:78:f1:fe:62:db:03:80:6a:c3:ad:66:
         af:2c:dc:92:a2:c6:bf:5e:04:05:0a:4e:4c:5f:3d:82:1e:a6:
         d2:77:82:e3:ef:cd:ec:2a:f1:bf:e6:4b:59:e7:ac:df:a6:e0:
         c2:85:ba:29:7c:2c:b1:44:f5:84:a2:16:be:08:24:ea:3d:d4:
         a5:8a:f7:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBM2asL+eBMkJ9aMMUcfLFq3wA4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0RE
MkUzMjUwNDAeFw0yNTEyMDIwNTE2MzNaFw0yNTEyMDUxNjIzMzNaMDMxMTAvBgNV
BAMTKDU5QkEzNDc4MkI4NEVGM0I4RTY1MjMzMEY2OERGOEU4MTgwRDRCMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwH3/1jOWF7w23HZ+T0hZQYZn
978h5Np6uVPEQEdSdEpP9/RQrVAUUsrxjlO0gOwWuI+istUE9FBnqCsawWmaVI80
XKaJNOQTRl9gl9QZY9wEhS6n+X5xWivZeCRJDFLLiSFPqPZEUwM7LeV2047ucrtv
WjYhGfwEPvDvanyLgx83rfchxOwIcrllb0qNXltMI0lqYTmEW+tAddCrUDMy70F+
QMpUN+mcmHRceUCAV9yGImZ9vQcHP/9ar6qE3NnoXwa2U51GspE974U28FxelfcR
6iAq4szOnjKlqsMu1rSLPmJM6ulm3LVvuxtCMRhIibR6LgkSnaJz2dRZsbrfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWbo0eCuE7zuOZSMw9o346BgNSwIwHwYDVR0j
BBgwFoAUcnFlXWMY7LC3l7Rsbs+8PdLjJQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NjhkZTkxYi02MzZiLTRkYTQtYjFkMC03MjYzMmNmY2YyMzUvMC83MjcxNjU1RDYz
MThFQ0IwQjc5N0I0NkM2RUNGQkMzREQyRTMyNTA0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0REMkUz
MjUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx
ZDAtNzI2MzJjZmNmMjM1LzAvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJD
M0REMkUzMjUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ/oN4710SIzc0gc086J17icEJKw3F8r1RoX
ziJLmxJImESy7K9ZIR3lPNSULzDjY+B+Z/qvOUy5xsd6hpxLAv1WxWe7nGPMmoII
8TvKEB7hm6HYsHvrLY3mGTO6FW/RJ+60+o30N2MRs+rP62eF8rELcGZlYfhf/GJQ
3E/AIgnEsc0EPN8DHk+URfT9mF/dZncfLgdGQr8Y6ot5+kQqDTzy9+mvrKXxKIX6
FOOdxLD+s+OWyBxoTbMitDp48f5i2wOAasOtZq8s3JKixr9eBAUKTkxfPYIeptJ3
guPvzewq8b/mS1nnrN+m4MKFuil8LLFE9YSiFr4IJOo91KWK958=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:34 2025 by rpki-client