This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
File:                     A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json)
Hash identifier:          5qGoysS+GburMeyCnIF3X4D2IWcfgz1Fe2SarfuMXyc=
Subject key identifier:   61:5C:68:70:59:E3:99:89:8F:B4:C4:23:EB:C5:79:DC:99:32:92:9D
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Certificate issuer:       /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial:       23212DA1A21E3DA8DEFFEC8750E2961D1C089878
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
Manifest number:          04DA
Signing time:             Tue 02 Dec 2025 11:21:55 +0000
Manifest this update:     Tue 02 Dec 2025 11:16:55 +0000
Manifest next update:     Fri 05 Dec 2025 13:39:55 +0000
Files and hashes:         1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: UodhzfooN0hApz/DcTkPCYoS7kqSLiULP/WMUqfZrA0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl
                          rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 13:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:21:2d:a1:a2:1e:3d:a8:de:ff:ec:87:50:e2:96:1d:1c:08:98:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
        Validity
            Not Before: Dec  2 11:16:55 2025 GMT
            Not After : Dec  5 13:39:55 2025 GMT
        Subject: CN=615C687059E399898FB4C423EBC579DC9932929D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:f9:e9:c8:13:64:3f:4c:fc:61:c8:aa:f8:
                    89:53:4d:99:68:e2:89:e6:85:ce:0e:56:54:76:3e:
                    9a:c6:74:f3:67:8d:9c:76:ab:61:d1:eb:22:77:4f:
                    a7:aa:74:e3:21:63:99:d0:35:fb:92:6a:8a:d9:45:
                    e7:79:bb:63:a2:8f:a8:11:91:48:97:0f:19:b1:36:
                    3d:e0:07:b5:8f:47:f9:6d:e9:22:73:88:97:d9:fe:
                    3b:46:1b:f3:23:66:46:7e:d2:91:dd:3d:9d:3e:de:
                    aa:ea:fd:23:cc:ed:66:1f:48:10:46:12:aa:f5:5c:
                    3d:1a:79:83:a5:67:17:18:0b:48:57:35:01:e8:5e:
                    77:5f:2d:94:63:86:66:e2:c7:2b:b5:b0:cb:84:55:
                    eb:f8:d5:e0:87:d0:cc:29:75:ac:f3:5e:7a:fb:6b:
                    39:6c:6a:74:f5:ce:92:b8:72:cc:d3:fe:54:bb:5a:
                    46:d6:c6:38:70:7a:30:e2:52:bc:fc:01:4d:b2:85:
                    79:99:0d:95:bf:19:d3:ea:9b:f3:cf:8e:ef:0a:ad:
                    b0:66:82:68:06:b4:ea:d6:73:9b:ba:f4:96:55:ff:
                    cb:b3:8b:21:99:c9:65:ab:1a:fd:91:28:c8:b6:21:
                    83:94:b5:0e:b7:b9:03:86:2b:6c:d6:3c:e6:42:33:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5C:68:70:59:E3:99:89:8F:B4:C4:23:EB:C5:79:DC:99:32:92:9D
            X509v3 Authority Key Identifier:
                keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:28:91:a5:bc:14:47:d3:75:50:a0:47:62:65:0a:f6:72:bd:
         59:1d:06:85:41:e9:66:1b:ff:1e:80:8f:ad:e6:0d:57:70:86:
         9d:30:36:4e:73:ca:38:73:ad:8b:67:27:d0:93:53:c0:80:84:
         02:ad:0c:fd:2b:1c:f3:0e:4a:3a:3e:3d:06:c3:d3:27:5a:79:
         35:64:62:da:80:26:c3:24:f5:d5:01:b4:49:88:bb:a7:6a:6a:
         c4:42:77:49:37:e3:be:50:5a:ef:da:ab:65:fc:62:aa:2a:11:
         f6:c8:13:52:42:27:30:a5:69:f0:7f:ed:2f:c2:e5:a2:1d:b2:
         33:38:8e:7f:72:ce:75:de:20:7a:0b:45:79:e5:1a:5d:fd:bc:
         2b:3f:63:01:10:74:95:69:fb:ab:1b:85:bc:8e:c2:f9:83:bf:
         2c:c3:29:4c:f6:39:12:40:8b:21:47:67:3b:95:d6:0e:8c:fd:
         6b:4b:7d:35:a2:4c:c0:35:f3:09:4a:79:b0:ea:fc:b7:09:3e:
         3b:be:79:63:cd:50:6c:a5:b7:1c:05:6a:0d:e8:ae:c8:d0:61:
         1f:74:e7:34:73:d9:53:f7:a2:36:b6:62:ab:6b:2a:8f:b8:db:
         48:b6:45:60:e3:87:52:f5:6a:7e:36:50:e1:1e:e2:3e:39:30:
         2e:84:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:36 2025 by rpki-client