This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File:                     67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier:          y+QYE66Sqj4eLDvATERm9KalhmCuClt9aD+krYtxv4E=
Subject key identifier:   A2:29:77:C3:A9:19:72:80:DF:B2:E4:69:D0:C5:0D:5A:79:88:D3:2C
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer:       /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial:       0138531DF97C32EF3D9D681A6036CFE5EF038EBA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number:          0193
Signing time:             Tue 02 Dec 2025 01:11:15 +0000
Manifest this update:     Tue 02 Dec 2025 01:06:15 +0000
Manifest next update:     Fri 05 Dec 2025 01:12:15 +0000
Files and hashes:         1: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: vNj2u5YQ2vjbwVmtcViVGeq3kgjdfKg/+gGTIie1b7U=)
                          2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=)
                          3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
                          rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 01:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:38:53:1d:f9:7c:32:ef:3d:9d:68:1a:60:36:cf:e5:ef:03:8e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
        Validity
            Not Before: Dec  2 01:06:15 2025 GMT
            Not After : Dec  5 01:12:15 2025 GMT
        Subject: CN=A22977C3A9197280DFB2E469D0C50D5A7988D32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:ee:70:fc:29:37:d6:a2:ce:1b:cd:44:7c:
                    45:d5:13:6e:e7:0f:19:59:5e:ae:ea:68:7f:9b:ad:
                    a9:51:17:2d:0d:1b:1f:25:d1:b3:c7:0c:55:8a:3c:
                    8c:fd:34:08:70:04:bf:32:a3:a8:ff:3f:22:fb:97:
                    5a:0d:5c:f8:18:df:5f:c0:ed:e9:ab:c4:7d:56:2f:
                    44:cd:e3:dd:44:40:51:02:0e:99:d5:20:69:a8:38:
                    a0:65:ad:04:ff:04:f4:bb:5a:f5:42:40:04:71:c2:
                    e2:b3:75:87:c9:88:63:35:ef:49:20:ba:a0:ec:4b:
                    1d:dd:67:56:29:16:18:a7:cc:ec:e3:06:1f:c1:d0:
                    21:1b:8d:95:b2:0d:45:3e:99:07:9f:bc:bb:63:b6:
                    eb:da:6b:e0:38:85:33:94:e2:b5:99:ca:fe:89:f8:
                    78:ee:95:13:6b:5b:61:fd:3e:dc:e3:5a:e9:cd:48:
                    da:73:0a:f9:92:d1:71:41:0d:88:85:fb:78:ab:7a:
                    35:f6:e9:b1:fa:b2:94:c2:6b:9d:9e:86:2d:a5:74:
                    48:ea:01:93:de:f6:ff:09:70:97:27:20:8f:df:71:
                    89:f3:3a:52:a1:14:62:c8:b0:ac:a1:45:1d:ef:a9:
                    a2:32:e6:3b:46:41:91:3c:32:28:c4:44:d6:97:73:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:77:C3:A9:19:72:80:DF:B2:E4:69:D0:C5:0D:5A:79:88:D3:2C
            X509v3 Authority Key Identifier:
                keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:28:3c:ef:27:aa:1f:c7:50:d4:a6:b2:42:71:10:4a:a3:b3:
         ee:2b:b3:f0:c1:af:46:f0:aa:aa:32:df:83:7d:bf:45:13:36:
         b0:9d:a2:92:f5:1e:f9:b7:69:d8:93:2e:db:a3:f1:a5:8e:8f:
         dc:0b:dd:46:0f:12:fe:22:a0:b7:5a:e5:67:fe:4b:07:8f:cf:
         a7:69:1f:d8:6c:25:c4:b9:66:01:9f:c4:f4:02:e4:0a:dc:80:
         b9:37:9b:37:43:6b:09:6f:a4:29:4e:64:74:23:39:93:1c:a1:
         b3:00:81:04:6d:96:45:69:25:f3:d2:ab:1d:c9:d0:77:53:7a:
         e1:ea:74:70:ad:3c:0a:7d:0c:37:9f:99:f0:e9:f6:11:09:5b:
         93:b2:87:31:4b:11:26:53:09:d6:0f:0c:d4:15:98:5a:67:41:
         14:af:d6:85:c1:85:11:48:c7:4d:ba:a7:b4:3f:88:8f:69:a4:
         2e:3f:bd:d1:cf:21:e1:be:bf:66:03:f7:97:aa:02:2d:f6:4a:
         8b:d1:5a:6a:93:21:d5:ca:53:9a:ce:b3:b3:08:b7:92:ef:e2:
         b2:8d:53:2e:9b:8d:41:2d:03:c1:b0:5d:39:8f:e5:57:bd:3f:
         a2:b7:ed:6f:13:24:1e:01:24:ab:d0:db:7f:ea:36:06:ca:c1:
         e1:92:f4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:15 2025 by rpki-client