This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
File:                     85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json)
Hash identifier:          rLpLhPfl6DlOo3Mp0rp8aQ+FgRvPZpH6m4QeUp4Smp8=
Subject key identifier:   14:81:3E:1A:F7:80:83:B7:33:F9:4F:8C:BF:C4:0C:9C:16:84:5F:AD
Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
Certificate issuer:       /CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Certificate serial:       43430BEA973FBF92DC2CDEFD00FDC661394367FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
Manifest number:          052F
Signing time:             Tue 02 Dec 2025 22:52:22 +0000
Manifest this update:     Tue 02 Dec 2025 22:47:22 +0000
Manifest next update:     Sat 06 Dec 2025 08:06:22 +0000
Files and hashes:         1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: f6mBmBOmWo+2HtTjAZaGwW5XmgbAOHTNF9/UbquUpjQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl
                          rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 08:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:43:0b:ea:97:3f:bf:92:dc:2c:de:fd:00:fd:c6:61:39:43:67:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6
        Validity
            Not Before: Dec  2 22:47:22 2025 GMT
            Not After : Dec  6 08:06:22 2025 GMT
        Subject: CN=14813E1AF78083B733F94F8CBFC40C9C16845FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:72:43:89:36:fe:f0:2f:25:fe:89:34:74:
                    b4:6a:2d:3e:62:cb:17:cd:c7:06:21:57:e7:c1:4c:
                    06:27:57:4a:ce:38:64:19:99:1a:ca:84:19:89:ca:
                    60:17:b4:40:3d:58:ec:da:33:26:f7:9a:ab:ce:61:
                    a0:fd:9e:38:02:0c:de:4e:aa:9c:cc:d0:ef:93:f8:
                    56:d2:2c:5f:4a:ca:26:3e:f7:ab:9c:8c:42:37:11:
                    65:6a:cf:8b:89:09:15:9b:25:34:d8:f3:37:ee:d9:
                    49:76:46:94:0a:71:ca:2e:82:ba:1a:ef:4b:c2:64:
                    f0:aa:85:1b:b4:e4:65:ba:3e:d5:9c:3e:a6:ac:38:
                    6a:25:c1:dd:81:ab:14:00:0e:ce:f0:77:73:29:58:
                    e1:ab:a0:46:95:d7:01:de:8a:e5:54:87:a7:f2:56:
                    c6:40:39:55:b9:fc:a4:89:65:f3:fd:13:6e:46:52:
                    4b:eb:a4:fa:20:8c:4b:00:0c:a2:2a:78:d6:72:10:
                    1a:c1:a5:e2:63:86:d0:c5:db:89:79:3d:2b:88:93:
                    43:b1:b6:c0:73:98:84:c2:91:75:ca:79:ce:87:46:
                    ab:bf:75:b6:cd:15:fd:25:f4:d1:67:0f:dc:a0:0e:
                    9e:bb:f0:ca:24:40:82:12:50:06:85:64:be:6e:df:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:3E:1A:F7:80:83:B7:33:F9:4F:8C:BF:C4:0C:9C:16:84:5F:AD
            X509v3 Authority Key Identifier:
                keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:61:b5:c4:56:a5:b5:1a:cd:e0:e2:8e:32:b3:2f:7b:18:7b:
         24:92:95:30:66:b7:39:73:72:01:9e:97:3a:87:10:8e:a7:76:
         cc:e5:47:d1:a5:53:2c:40:ae:08:72:bc:82:96:88:02:f5:5a:
         02:43:f2:9b:87:84:04:bb:33:cf:56:a1:2a:dd:80:b9:ff:9e:
         ee:40:d2:3d:73:a3:4a:22:54:f3:f2:e5:b3:25:5c:34:fd:60:
         dc:f6:44:e8:db:d3:ee:b5:20:cd:1f:11:9c:62:8e:a6:0d:4d:
         d6:df:45:13:c9:38:e1:fc:aa:c9:1e:28:82:7f:80:85:61:bc:
         9a:a6:01:53:e9:99:6a:66:4b:03:2f:83:09:13:72:9f:6c:08:
         a8:53:79:31:bf:5a:21:c7:e2:a6:85:fa:8a:ea:9d:21:03:89:
         58:f1:47:64:0d:63:12:e1:e6:e2:b9:68:b0:f4:78:c1:79:14:
         74:ea:7d:9b:90:c2:a1:00:ad:d9:96:18:78:54:a0:17:07:ca:
         ee:22:08:c8:39:c4:3d:50:be:2e:f8:9e:ef:b4:35:b2:da:aa:
         b1:d6:fc:a2:95:23:c6:c4:94:da:a4:da:4d:77:ab:5f:e8:1e:
         7d:f7:8d:1e:56:99:72:8e:2e:65:37:7b:6e:36:d1:d2:da:0f:
         bd:96:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:29 2025 by rpki-client